Question
-
Topic
-
Unfamiliar entries in my router system log, Maleware?
LockedI noticed strange entries on our router on 10/29/21016 and they continue every 5 minutes. The cron.info hits the router every 5 minutes for 6 times then the killall occurs and the cron.info starts again. This occurs even when there are no computers connected to the router.
I have Comcast
Motorola surfboard 6141
Belkin AC1200 router.
all computers are Mint 17.3
Here is an example.
Nov 8 07:50:01 localhost cron.info crond[1096]: crond: USER root pid 3725 cmd /usr/scripts/mem_sync
Nov 8 07:55:01 localhost cron.info crond[1096]: crond: USER root pid 3775 cmd /usr/scripts/mem_sync
Nov 8 08:00:01 localhost cron.info crond[1096]: crond: USER root pid 3827 cmd killall -SIGUSR2 nlinkd
Nov 8 08:00:01 localhost cron.info crond[1096]: crond: USER root pid 3829 cmd /usr/scripts/mem_sync
Nov 8 08:05:01 localhost cron.info crond[1096]: crond: USER root pid 3879 cmd /usr/scripts/mem_sync
Nov 8 08:10:01 localhost cron.info crond[1096]: crond: USER root pid 3931 cmd /usr/scripts/mem_sync
Nov 8 08:15:01 localhost cron.info crond[1096]: crond: USER root pid 3981 cmd /usr/scripts/mem_sync
Nov 8 08:20:01 localhost cron.info crond[1096]: crond: USER root pid 4033 cmd /usr/scripts/mem_sync
Nov 8 08:25:01 localhost cron.info crond[1096]: crond: USER root pid 4083 cmd /usr/scripts/mem_sync
Nov 8 08:30:01 localhost cron.info crond[1096]: crond: USER root pid 4131 cmd killall -SIGUSR2 nlinkd
Nov 8 08:30:01 localhost cron.info crond[1096]: crond: USER root pid 4133 cmd /usr/scripts/mem_sync