I am frustrated. I have two mystic crons running on our server, that I can not find by doing crontab -l. The good thing is these crons are sending mails. That is how I know those are running at :21m and :56m every hour.

I have root access and I have also been looking into /etc/cron.daily and /etc/cron.hourly.


Am I totally blinded?

  • Could somebody be sshing in from another host at those times?
    – tripleee
    Jan 30, 2012 at 21:53

1 Answer 1


The standard place for user crontabs is /var/spool/cron/crontabs/. Overall, I would check these locations:

  • /etc/crontab
  • /etc/cron.hourly, /etc/cron.daily, /etc/cron.weekly, /etc/cron.monthly
  • /var/spool/cron/crontabs

Depending on your OS distro, ~/.crontab may also be in effect.

  • also /etc/cron.d
    – stew
    Jan 30, 2012 at 22:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy