suspicious_cron_strings.txt

111.90.159.106
122.51.164.83
146.71.79.230
185.181.10.234
195.3.146.118
195.3.146.118/ae.sh
1.sh
31.210.20.181
3.215.110.66.one
3.sh
45.137.151.106
53 23 31 2 3
5b51f9dea
6hsnefbp
acb.sh
aliyun.one
ap.sh
base64 -d
base64 --decode
bash /etc/csf/uninstall.sh
bfdrive
bigd1ck.com
/bin/systemctl stop imunify360.service
/bin/systemctl stop imunify-antivirus.service
bioset
bitcoin
bnrffa4
brict.sh
cr2.sh
CRON11
/dev/shm/.kauditd/[kauditd]
/dev/shm/mycron
DO NOT REMOVE THIS LINE. SEED PRNG. #gs-bd-kernel
/etc/selinux/targeted/plugins
fczyo-cron
fTakK8lVE
givemexyz
iamhex
import hashlib
ipfswallet
kavachelf
kinsing
lib.pygensim.com
.Library/SystemServices/updateSystem
linux1213
localhost.xyd
logo0
logo4
logo9
lsd.systemten.org
magicPussy
mimic_
mr.sh
n5slskx
newdat.sh
oanacroane
oka
onion
opentab
oracleservice
pastebin
perfclean
Perfctl
pg_stat.sh
politrict.sh
R9T8kK9w
restrict.sh
ScBr_
seed prng gs-bd-kernel
systemd-service.sh
t.amynx.com
/tmp/linux
/tmp/./xL
tor2web
truct.sh
unix.sh
unk.sh
usbdriver
/var/tmp/vm.lock
watchd0g.sh
.xmr
xmr.ipzse.com
yxarsh.shop
yx=hashlib
zmreplchkr
zsvc
/etc/cpanelmod/diallicense
/var/lib/postgresql/data/pg_mem