Suspicious option in cron job

jeffschips

• August 02, 2023 23:37

Hello. I found this in my /var/spool/cron: '#tmp.my-server-host-name.domain.com.XXXXLK98D4' Anybody have a clue what it is - I didn't put it here. . .

• 

  ffeingol

  • August 03, 2023 12:07

  No clue, but if the first character is a #, that is just a comment.

  0
• 

  SimpleSonic

  • August 03, 2023 12:43

  That was the filename or was the text in a file?

  0
• 

  jeffschips

  • August 03, 2023 13:42

  it is listed in amongst the other files located in /var/spool/cron. Not in a file but in the directory /var/spool/cron

  0
• 

  cPRex Jurassic Moderator

  • August 03, 2023 15:13

  Is the file owned by root or by a different username? My guess would be that something was trying to create a cron, but instead it got created as a file itself.

  0
• 

  jeffschips

  • August 03, 2023 15:34

  I think you're right @cPRex. it was owned by root. I've since deleted it. Consider it SOLVED

  0

Please sign in to leave a comment.