I am frustrated. I have two mystic crons running on our server, that I can not find by doing crontab -l. The good thing is these crons are sending mails. That is how I know those are running at :21m and :56m every hour.

I have root access and I have also been looking into /etc/cron.daily and /etc/cron.hourly.


Am I totally blinded?

  • Could somebody be sshing in from another host at those times?
    – tripleee
    Commented Jan 30, 2012 at 21:53

1 Answer 1


The standard place for user crontabs is /var/spool/cron/crontabs/. Overall, I would check these locations:

  • /etc/crontab
  • /etc/cron.hourly, /etc/cron.daily, /etc/cron.weekly, /etc/cron.monthly
  • /var/spool/cron/crontabs

Depending on your OS distro, ~/.crontab may also be in effect.

  • also /etc/cron.d
    – stew
    Commented Jan 30, 2012 at 22:19

You must log in to answer this question.