Is /usr/bin/srvhsmon anything to do with cPanel?

Nick Fenwick

Member
Sep 28, 2018
13
2
3
Bangkok
cPanel Access Level
Root Administrator
Hi all,

I've got a Centos 7.7 system running cPanel and every day a cron job fails, it seems to be a very old unsupported script but googling doesn't bring up any relevant info at all about it. I didn't write it so I presume it came with cPanel.

It is cron script /etc/cron.daily/server-health-check and it contains:

Code:
# cat /etc/cron.daily/server-health-check
## Server Health/Security check daily cron
/usr/bin/srvhsmon --update
/usr/bin/srvhsmon --alert [email protected]
The email address is correct, redacted here but is one of our managers, so it has been customised for our installation. Nothing seems to own the script it runs:

Code:
# rpm -q --whatprovides /usr/bin/srvhsmon
file /usr/bin/srvhsmon is not owned by any package
The output of the script is:

Code:
# /usr/bin/srvhsmon --update
Failed to download versions file.
Aborting.
grep: //tmp/srvhsmon/versions: No such file or directory
Updating Server Health/Security Check 0103201801 to ...
Downloading Server Health/Security Check ...
Done.
grep: //tmp/srvhsmon/versions: No such file or directory
MD5 invalid. Aborting.
Digging into the script it is trying to wget a file from supportdepartment.net:

Code:
wget -q --output-document=/$TEMDIR/versions http://supportdepartment.net/srv/versions
Which, when I try it myself:

Code:
# wget http://supportdepartment.net/srv/versions
--2019-12-18 05:42:37--  http://supportdepartment.net/srv/versions
Resolving supportdepartment.net (supportdepartment.net)... 109.203.113.233, 109.203.125.4
Connecting to supportdepartment.net (supportdepartment.net)|109.203.113.233|:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
2019-12-18 05:42:37 ERROR 403: Forbidden.
Is supportdepartment.net anything to do with cPanel or am I asking in the wrong forum? :)
 

Nick Fenwick

Member
Sep 28, 2018
13
2
3
Bangkok
cPanel Access Level
Root Administrator
This is not associated in any way with cPanel/WHM and I am sorry but I do not know who/what that company is.
Thank you very much for the reply :) I will probably remove it from our server, then.

This server was set up over a decade ago and the filesystem migrated by our hosting company when we upgrade or move to a new server, and we have no contact with the tech guy who originally set it up, so it looks like this is some very old technical debt that I should clear out.

Have a great day :)