When URL CRON hits from ISPC node it shows like this in logs: I found plugin which invokes cron operation and updated line where user agent is set to something neutral to stop doxing my servers. But it is still shows up like user agent above. Where does user agent value could be set?
It is set in the cron plugin; there is no other place. You probably still have a cron job running that was created before you changed the code.
You are absolutely correct, found it under the /etc/cron.d . Heh, I thought that CRON operation is invoked from database via PHP
This happens only for the internal cron jobs like backup, maintenance tasks, etc., but not the client cron jobs.