ransferred port bindings: 10,11,12,3,4,5,6,7,8,9 ==> cpsrvd: bound to ports [2024-05-25 22:30:45 +0000] info [cpsrvd] version 11.120.0.8 online ==> cpsrvd 11.120.0.8 started ==> cpsrvd: loading security policy....Done ==> cpsrvd: Setting up SSL support ... Done ==> cpsrvd: transferred port bindings: 10,11,12,3,4,5,6,7,8,9 ==> cpsrvd: bound to ports [2024-05-25 22:37:51 +0000] info [cpsrvd] version 11.120.0.8 online ==> cpsrvd 11.120.0.8 started ==> cpsrvd: loading security policy....Done ==> cpsrvd: Setting up SSL support ... Done ==> cpsrvd: transferred port bindings: 10,11,12,3,4,5,6,7,8,9 ==> cpsrvd: bound to ports [2024-05-25 22:42:00 +0000] info [cpsrvd] version 11.120.0.8 online ==> cpsrvd 11.120.0.8 started ==> cpsrvd: loading security policy....Done ==> cpsrvd: Setting up SSL support ... Done ==> cpsrvd: transferred port bindings: 10,11,12,3,4,5,6,7,8,9 ==> cpsrvd: bound to ports [2024-05-25 22:45:24 +0000] info [cpsrvd] version 11.120.0.8 online ==> cpsrvd 11.120.0.8 started ==> cpsrvd: loading security policy....Done ==> cpsrvd: Setting up SSL support ... Done ==> cpsrvd: transferred port bindings: 10,11,12,3,4,5,6,7,8,9 ==> cpsrvd: bound to ports [2024-05-25 22:52:45 +0000] info [cpsrvd] version 11.120.0.8 online ==> cpsrvd 11.120.0.8 started ==> cpsrvd: loading security policy....Done ==> cpsrvd: Setting up SSL support ... Done ==> cpsrvd: transferred port bindings: 10,11,12,3,4,5,6,7,8,9 ==> cpsrvd: bound to ports [2024-05-25 22:57:01 +0000] info [cpsrvd] version 11.120.0.8 online 1716671424 583 . 1716672047 583 . 1716672361 1241 . 1716672422 1105 . 1716672924 583 . 1716673321 1113 . 1716673845 583 . 1716674221 1105 . 1716674447 583 . 1716675122 1105 . 1716675350 583 . 1716676021 1113 . 1716676245 583 . 1716676921 1113 . 1716677124 583 . 1716677821 1113 . 85784): Disconnect from local: Logged out (state=GREETING) May 25 22:45:27 194-76-27-98 dovecot[2251744]: imap-login: Login: user=<__cpanel__service__auth__imap__3lohw9kxupwv5o3e>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=2885794, secured, session= May 25 22:45:27 194-76-27-98 dovecot[2251744]: imap(__cpanel__service__auth__imap__3lohw9kxupwv5o3e)<2885794>: Disconnected: Logged out in=11, out=519, bytes=11/519 May 25 22:52:44 194-76-27-98 spamd[2803678]: spamd: connection from localhost [::1]:39594 to port 783, fd 5 May 25 22:52:45 194-76-27-98 dovecot[2251744]: pop3-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session= May 25 22:52:45 194-76-27-98 dovecot[2251744]: lmtp(2886292): Connect from local May 25 22:52:45 194-76-27-98 dovecot[2251744]: lmtp(2886292): Disconnect from local: Logged out (state=GREETING) May 25 22:52:46 194-76-27-98 dovecot[2251744]: imap-login: Login: user=<__cpanel__service__auth__imap__3lohw9kxupwv5o3e>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=2886309, secured, session= May 25 22:52:46 194-76-27-98 dovecot[2251744]: imap(__cpanel__service__auth__imap__3lohw9kxupwv5o3e)<2886309>: Disconnected: Logged out in=11, out=519, bytes=11/519 May 25 22:57:01 194-76-27-98 dovecot[2251744]: imap-login: Login: user=, method=PLAIN, rip=82.132.215.152, lip=194.76.27.98, mpid=2886596, TLS, session= May 25 22:57:01 194-76-27-98 dovecot[2251744]: imap(app.ios@vive.care)<2886596>: Disconnected: Connection closed (SELECT finished 0.110 secs ago) in=109, out=1113, bytes=109/1113 May 25 22:57:45 194-76-27-98 spamd[2803678]: spamd: connection from localhost [::1]:38036 to port 783, fd 5 May 25 22:57:45 194-76-27-98 dovecot[2251744]: pop3-login: Disconnected: Aborted login by logging out (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session= May 25 22:57:46 194-76-27-98 dovecot[2251744]: lmtp(2886702): Connect from local May 25 22:57:46 194-76-27-98 dovecot[2251744]: lmtp(2886702): Disconnect from local: Logged out (state=GREETING) May 25 22:57:46 194-76-27-98 dovecot[2251744]: imap-login: Login: user=<__cpanel__service__auth__imap__3lohw9kxupwv5o3e>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=2886713, secured, session= May 25 22:57:46 194-76-27-98 dovecot[2251744]: imap(__cpanel__service__auth__imap__3lohw9kxupwv5o3e)<2886713>: Disconnected: Logged out in=11, out=519, bytes=11/519 .ondemand: No failed on-demand scans found INFO [2024-05-25 21:50:21,855] imav.malwarelib.rpc.endpoints.ondemand: Checking detached scan directory for failed scans INFO [2024-05-25 21:50:21,855] imav.malwarelib.rpc.endpoints.ondemand: No failed on-demand scans found INFO [2024-05-25 21:56:01,349] imav.malwarelib.rpc.endpoints.ondemand: Checking detached scan directory for failed scans INFO [2024-05-25 21:56:01,350] imav.malwarelib.rpc.endpoints.ondemand: No failed on-demand scans found INFO [2024-05-25 22:00:36,811] imav.malwarelib.rpc.endpoints.ondemand: Checking detached scan directory for failed scans INFO [2024-05-25 22:00:36,811] imav.malwarelib.rpc.endpoints.ondemand: No failed on-demand scans found INFO [2024-05-25 22:05:29,750] imav.malwarelib.rpc.endpoints.ondemand: Checking detached scan directory for failed scans INFO [2024-05-25 22:05:29,751] imav.malwarelib.rpc.endpoints.ondemand: No failed on-demand scans found INFO [2024-05-25 22:10:35,495] imav.malwarelib.rpc.endpoints.ondemand: Checking detached scan directory for failed scans INFO [2024-05-25 22:10:35,495] imav.malwarelib.rpc.endpoints.ondemand: No failed on-demand scans found INFO [2024-05-25 22:15:18,049] imav.malwarelib.rpc.endpoints.ondemand: Checking detached scan directory for failed scans INFO [2024-05-25 22:15:18,049] imav.malwarelib.rpc.endpoints.ondemand: No failed on-demand scans found INFO [2024-05-25 22:20:43,663] imav.malwarelib.rpc.endpoints.ondemand: Checking detached scan directory for failed scans INFO [2024-05-25 22:20:43,664] imav.malwarelib.rpc.endpoints.ondemand: No failed on-demand scans found INFO [2024-05-25 22:25:40,088] imav.malwarelib.rpc.endpoints.ondemand: Checking detached scan directory for failed scans INFO [2024-05-25 22:25:40,089] imav.malwarelib.rpc.endpoints.ondemand: No failed on-demand scans found INFO [2024-05-25 22:30:37,576] imav.malwarelib.rpc.endpoints.ondemand: Checking detached scan directory for failed scans INFO [2024-05-25 22:30:37,576] imav.malwarelib.rpc.endpoints.ondemand: No failed on-demand scans found INFO [2024-05-25 22:35:11,186] imav.malwarelib.rpc.endpoints.ondemand: Checking detached scan directory for failed scans INFO [2024-05-25 22:35:11,186] imav.malwarelib.rpc.endpoints.ondemand: No failed on-demand scans found INFO [2024-05-25 22:40:29,238] imav.malwarelib.rpc.endpoints.ondemand: Checking detached scan directory for failed scans INFO [2024-05-25 22:40:29,238] imav.malwarelib.rpc.endpoints.ondemand: No failed on-demand scans found INFO [2024-05-25 22:45:12,694] imav.malwarelib.rpc.endpoints.ondemand: Checking detached scan directory for failed scans INFO [2024-05-25 22:45:12,695] imav.malwarelib.rpc.endpoints.ondemand: No failed on-demand scans found INFO [2024-05-25 22:50:28,292] imav.malwarelib.rpc.endpoints.ondemand: Checking detached scan directory for failed scans INFO [2024-05-25 22:50:28,293] imav.malwarelib.rpc.endpoints.ondemand: No failed on-demand scans found INFO [2024-05-25 22:55:40,752] imav.malwarelib.rpc.endpoints.ondemand: Checking detached scan directory for failed scans INFO [2024-05-25 22:55:40,753] imav.malwarelib.rpc.endpoints.ondemand: No failed on-demand scans found OTO=TCP SPT=40709 DPT=58797 WINDOW=512 RES=0x00 SYN URGP=0 ۥZr|m] 隌=XTOj3ů ֙(lOw-!/!;ZJq7?vXN}JP~Ym2tEM2+*n1E}J׊Ucqyl{$gM%CD5,C`@kEqAE𹰊vLTa2&]( `HV;}ТUOR'Uz6T\|EJGLm3M6䆁-v/: =BUAWt!5~dULb&ۭ0Ð;)[d}u ?2HpKf+9CՏecd0tѢ\}jh@E T߯@?cRrFXk) vαqdaXB69PH5 n.U8ˈYq٥cB2?OX{|mEx GBX)vQ;^뒂 ߸/RL{S%OKI4U\KD +H$fz燙_ +' Te0XBRb&lF5rr!]1[#hZ-]$)\ |x rcpsGG2ˑ =~׾WmWyCz9{]ϦIs,ڱ5NC"5qVu(2xp'"ib308$3`Co|}vAB`T9w1N!mvE$'8?7T%V/+D\2?|PtA}սuy9v%QjDV ZZAnwːG' p NT4I4E sT=~o~*֗D˰'Z/Þ΢^)62pЯ\VoɊIXAݚh{`Pl`),E44-4$!NG ,s@QJ9F.g_#}(8yip/$^2Bo""l*6ujS1x{H$DMHYZ?QNZ&2ulOKfY i`; LL1b! ȕ|'Ť ~1nOuOT?V}G[/Fswol]i}#T|o6`瞝%b-xIG98\g85U +7 Μ+[3"_Ӄ_ܲA)-b^F0/ Ӊv<PqbiezD[! ?gHu4s#םF5NI/ضGJsdj:Lh`2+Sa {950TlC⇛AKTs?gSY\O2 r Ы31}Ch3u`L[),Pk$ѝ/Khw=teMb¾!s@>aНWwm+ "B[JM:,ٰެwqMx\'@Uzo}:YSդ./.!Ytpr{rX~+2z^__2mBګ Tq4|Dcg63UZT3L$VY'>H׷JALN2M|r*Q+4VYC2HD gm):s%=Lt c͜ˏSƥ1$F`׋@[FG!nȘ:!neuWL`"ݯ/DŽxd*Y?.Mej=QWˍ1H*eT(]@ h؟sM5Xn\~ڡ8wm{tSץ<:OK.M GYܳE1-m5X_z6^$MrGP-2% .Ӌ;Uk$4pF5 o! {"%>2NfLQ:5ٞq!lq2k@ HQ:60<J{|Wk'$vzXQ 0cі}%mQ kh{J_:R3>WfWThr/#qQ6^@Xy܈ X {|M0 o@{mС0Uյ +/Rc7Y".Im`r t/iȶWzS0p$>#؎e<>NbmgnF)~𲝋1T?(RJ DZ;k&GC ߯m~F\nB~4x.V Go{&F"RTmRUYCĻ(jTEwb u{v b]}hT {iK/s!XCN|H ,GPNC*jQW\e<ˁ5fFʣ1N!/=Aw8"U/b*>O6>FmNU}:)Q! !KJQA3-|(tVb֕h֟99vId[K" O&ѻ.=UKjŸT; orvkcL1M~ ㏤{f3ccE= m# Da#&BFX^w&ەVzo¤{X1/X0.( )ވ /*w\Ö[ɔMx9!ECac x=+8H__4:cu*Pj((ЭKD^o>vwdӯHH€r} =,9eIRY5O H95H#&)B3]ډ}wzb~MN}>Qe,oʗ1֝:L(^y#d gʯz2qǧHֈe*qKA*Eqo_#>v2Aj1NBWI 3ޖ9v@P!D|n@ *'[>IX{Q8YK1lnm$sF.2m{d}uufOb-C\DiuYaucx$4/nNr9sF|P : @+rqu)NJIv>xSq #І <׶I3 8\1#);?}yNG Xzp_FX0535 RES=0x00 SYN URGP=0 |May 25 22:42:12 194-76-27-98 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:16:3e:c5:91:3d:ec:9b:8b:8f:2a:05:08:00 SRC=103.207.36.246 DST=194.76.27.98 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=589 DF PROTO=TCP SPT=41831 DPT=20451 WINDOW=512 RES=0x00 SYN URGP=0 |May 25 22:42:13 194-76-27-98 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:16:3e:c5:91:3d:ec:9b:8b:8f:2a:05:08:00 SRC=103.207.36.246 DST=194.76.27.98 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=16443 DF PROTO=TCP SPT=40709 DPT=58372 WINDOW=512 RES=0x00 SYN URGP=0 |May 25 22:42:16 194-76-27-98 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:16:3e:c5:91:3d:ec:9b:8b:8f:2a:05:08:00 SRC=103.207.36.246 DST=194.76.27.98 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=6722 DF PROTO=TCP SPT=40709 DPT=58373 WINDOW=512 RES=0x00 SYN URGP=0 |May 25 22:42:19 194-76-27-98 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:16:3e:c5:91:3d:ec:9b:8b:8f:2a:05:08:00 SRC=103.207.36.246 DST=194.76.27.98 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=17427 DF PROTO=TCP SPT=40709 DPT=58374 WINDOW=512 RES=0x00 SYN URGP=0 |May 25 22:42:19 194-76-27-98 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:16:3e:c5:91:3d:ec:9b:8b:8f:2a:05:08:00 SRC=103.207.36.246 DST=194.76.27.98 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=33141 DF PROTO=TCP SPT=41831 DPT=20454 WINDOW=512 RES=0x00 SYN URGP=0 |May 25 22:42:21 194-76-27-98 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:16:3e:c5:91:3d:ec:9b:8b:8f:2a:05:08:00 SRC=103.207.36.246 DST=194.76.27.98 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=48686 DF PROTO=TCP SPT=40709 DPT=58375 WINDOW=512 RES=0x00 SYN URGP=0 |May 25 22:42:24 194-76-27-98 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:16:3e:c5:91:3d:ec:9b:8b:8f:2a:05:08:00 SRC=103.207.36.246 DST=194.76.27.98 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=34836 DF PROTO=TCP SPT=40709 DPT=58376 WINDOW=512 RES=0x00 SYN URGP=0 |May 25 22:42:27 194-76-27-98 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:16:3e:c5:91:3d:ec:9b:8b:8f:2a:05:08:00 SRC=103.207.36.246 DST=194.76.27.98 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=41540 DF PROTO=TCP SPT=40709 DPT=58377 WINDOW=512 RES=0x00 SYN URGP=0 |May 25 22:42:27 194-76-27-98 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:16:3e:c5:91:3d:ec:9b:8b:8f:2a:05:08:00 SRC=103.207.36.246 DST=194.76.27.98 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=53050 DF PROTO=TCP SPT=41831 DPT=20457 WINDOW=512 RES=0x00 SYN URGP=0 |May 25 22:42:29 194-76-27-98 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:16:3e:c5:91:3d:ec:9b:8b:8f:2a:05:08:00 SRC=103.207.36.246 DST=194.76.27.98 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=3135 DF PROTO=TCP SPT=40709 DPT=58378 WINDOW=512 RES=0x00 SYN URGP=0 |May 25 22:42:32 194-76-27-98 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:16:3e:c5:91:3d:ec:9b:8b:8f:2a:05:08:00 SRC=103.207.36.246 DST=194.76.27.98 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=50691 DF PROTO=TCP SPT=40709 DPT=58379 WINDOW=512 RES=0x00 SYN URGP=0 |May 25 22:42:34 194-76-27-98 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:16:3e:c5:91:3d:ec:9b:8b:8f:2a:05:08:00 SRC=103.207.36.246 DST=194.76.27.98 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=53522 DF PROTO=TCP SPT=40709 DPT=58380 WINDOW=512 RES=0x00 SYN URGP=0 |May 25 22:42:35 194-76-27-98 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:16:3e:c5:91:3d:ec:9b:8b:8f:2a:05:08:00 SRC=103.207.36.246 DST=194.76.27.98 LEN=40 TOS=0x00 Pated and will be removed in a future release. Please use caching_sha2_password instead' 2024-05-25T22:37:51.441371Z 14633 [Warning] [MY-013360] [Server] Plugin mysql_native_password reported: ''mysql_native_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2024-05-25T22:38:40.540810Z 14634 [Warning] [MY-013360] [Server] Plugin mysql_native_password reported: ''mysql_native_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2024-05-25T22:40:02.432173Z 14635 [Warning] [MY-013360] [Server] Plugin mysql_native_password reported: ''mysql_native_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2024-05-25T22:42:30.919338Z 14636 [Warning] [MY-013360] [Server] Plugin mysql_native_password reported: ''mysql_native_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2024-05-25T22:45:01.537246Z 14637 [Warning] [MY-013360] [Server] Plugin mysql_native_password reported: ''mysql_native_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2024-05-25T22:45:26.750435Z 14638 [Warning] [MY-013360] [Server] Plugin mysql_native_password reported: ''mysql_native_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2024-05-25T22:45:57.678710Z 14639 [Warning] [MY-013360] [Server] Plugin mysql_native_password reported: ''mysql_native_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2024-05-25T22:50:02.167315Z 14640 [Warning] [MY-013360] [Server] Plugin mysql_native_password reported: ''mysql_native_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2024-05-25T22:52:45.517691Z 14641 [Warning] [MY-013360] [Server] Plugin mysql_native_password reported: ''mysql_native_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2024-05-25T22:53:16.629177Z 14642 [Warning] [MY-013360] [Server] Plugin mysql_native_password reported: ''mysql_native_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2024-05-25T22:55:01.651342Z 14643 [Warning] [MY-013360] [Server] Plugin mysql_native_password reported: ''mysql_native_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2024-05-25T22:57:31.654206Z 14644 [Warning] [MY-013360] [Server] Plugin mysql_native_password reported: ''mysql_native_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2024-05-25T22:57:46.314077Z 14645 [Warning] [MY-013360] [Server] Plugin mysql_native_password reported: ''mysql_native_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' 2024-05-25T23:00:02.072512Z 14646 [Warning] [MY-013360] [Server] Plugin mysql_native_password reported: ''mysql_native_password' is deprecated and will be removed in a future release. Please use caching_sha2_password instead' t) CMD (/usr/sbin/imunify-notifier -update-cron) May 25 22:43:01 194-76-27-98 CROND[2885572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron) May 25 22:44:01 194-76-27-98 CROND[2885617]: (root) CMD (/usr/sbin/imunify-notifier -update-cron) May 25 22:45:01 194-76-27-98 CROND[2885661]: (root) CMD ( bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :) May 25 22:45:01 194-76-27-98 CROND[2885663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron) May 25 22:45:01 194-76-27-98 CROND[2885678]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1) May 25 22:46:01 194-76-27-98 CROND[2885873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron) May 25 22:46:01 194-76-27-98 CROND[2885890]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1) May 25 22:47:01 194-76-27-98 CROND[2885938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron) May 25 22:48:01 194-76-27-98 CROND[2885986]: (root) CMD (/usr/sbin/imunify-notifier -update-cron) May 25 22:49:01 194-76-27-98 CROND[2886029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron) May 25 22:50:01 194-76-27-98 CROND[2886076]: (root) CMD (/usr/sbin/imunify-notifier -update-cron) May 25 22:50:01 194-76-27-98 CROND[2886081]: (root) CMD ( bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :) May 25 22:50:02 194-76-27-98 CROND[2886093]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1) May 25 22:50:02 194-76-27-98 CROND[2886094]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1) May 25 22:51:01 194-76-27-98 CROND[2886151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron) May 25 22:52:01 194-76-27-98 CROND[2886194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron) May 25 22:53:01 194-76-27-98 CROND[2886372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron) May 25 22:54:01 194-76-27-98 CROND[2886425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron) May 25 22:55:01 194-76-27-98 CROND[2886469]: (root) CMD ( bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :) May 25 22:55:01 194-76-27-98 CROND[2886471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron) May 25 22:55:01 194-76-27-98 CROND[2886487]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1) May 25 22:56:01 194-76-27-98 CROND[2886545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron) May 25 22:57:01 194-76-27-98 CROND[2886599]: (root) CMD (/usr/sbin/imunify-notifier -update-cron) May 25 22:58:01 194-76-27-98 CROND[2886772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron) May 25 22:59:01 194-76-27-98 CROND[2886814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron) May 25 23:00:01 194-76-27-98 CROND[2886862]: (root) CMD ( bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :) May 25 23:00:01 194-76-27-98 CROND[2886863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron) May 25 23:00:01 194-76-27-98 CROND[2886879]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1) 0=3 a1=7ffd785ac430 a2=1 a3=7ffd785ac157 items=0 ppid=2801580 pid=2886861 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=137174 comm="crond" exe="/usr/sbin/crond" key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1716678001.873:2194875): proctitle=2F7573722F7362696E2F63726F6E64002D6E type=SERVICE_START msg=audit(1716678001.908:2194876): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1716678001.924:2194877): pid=2886871 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1716678001.924:2194878): pid=2886871 uid=0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=137175 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1716678001.924:2194878): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffcf2f06b80 a2=1 a3=7ffcf2f068a7 items=0 ppid=1 pid=2886871 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=137175 comm="(systemd)" exe="/usr/lib/systemd/systemd" key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1716678001.924:2194878): proctitle="(systemd)" type=USER_START msg=audit(1716678001.925:2194879): pid=2886871 uid=0 auid=0 ses=137175 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_namespace,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1716678001.983:2194880): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1716678001.988:2194881): pid=2886861 uid=0 auid=0 ses=137174 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1716678001.988:2194882): pid=2886861 uid=0 auid=0 ses=137174 msg='op=PAM:setcred grantors=pam_env,pam_hulk,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1716678005.343:2194883): pid=2886861 uid=0 auid=0 ses=137174 msg='op=PAM:setcred grantors=pam_env,pam_hulk,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="root" type=USER_END msg=audit(1716678005.345:2194884): pid=2886861 uid=0 auid=0 ses=137174 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1716678015.393:2194885): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1716678015.405:2194886): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"