Re: [cobalt-users] [RaQ4] The main web server appears to be down

[Marco Baurdoux <linux@xxxxxxxxxxxxx>]

Hi Erik,

Welcome to the world of "Microsoft" what you have just found are http
requests coming from the "code red" virus that was spread around a couple of
week. But normally on Unix machine you only get the erronous request but it
shouldn't affect your machine.

We also have some but they are harmless for Apache on linux.



le 12.9.2001 16:41, support@xxxxxxxxxxxxx à support@xxxxxxxxxxxxx a écrit :

> Hi,
> 
> Just some extra info from the access.log
> We found a lot of messages like this;
> 
> www.domain.com 193.98.32.211 - - [10/Sep/2001:07:53:30 +0200] "GET
> /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
> XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
> XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
> XXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%
> u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
> HTTP/1.0" 302 623 "-" "-"
> 
> This message appears at random intervals (so it seems) for evry site hosted
> on this machine.
> 
> the IP number after the domainname is never the same.
> 
> any suggestions/ideas are welcome
> 
> regards
> 
> Erik Venema
> DutchNet
> 
> -----Original Message-----
> From: cobalt-users-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of
> support@xxxxxxxxxxxxx
> Sent: woensdag 12 september 2001 16:02
> To: cobalt-users@xxxxxxxxxxxxxxx
> Subject: [cobalt-users] [RaQ4] The main web server appears to be down
> 
> 
> Hi,
> 
> Can anyone tell me what could be wrong?
> I get this message every hour from one of our RAQ4i's with 128Mb memory. The
> machine seems to work fine
> 
> The main web server appears to be down.  Make sure that the server's network
> interface has been correctly configured in the network control panel.  If
> it all looks correct, try rebooting the server; if this still does not
> correct the problem, contact Cobalt Technical Support.
> 
> Any info would be appreciated. BTW this started after we upgraded the memory
> in the RAQ, we then had problems (the machine was very slow) so we
> downgraded the memory back to the orginal memory.
> 
> regards
> 
> Erik Venema
> 
> DutchNet
> _____________________________________________________________________
> Postbus 3                     Verkoop/billing:    sales@xxxxxxxxxxxxx
> 3734 ZG  Den Dolder         Storingsmeldingen:  support@xxxxxxxxxxxxx
> tel.: 030-2292693           Technische vragen: helpdesk@xxxxxxxxxxxxx
> fax.: 030-2292694            DutchNet website:      www.dutch-net.com
> _____________________________________________________________________
> 
> Kijk op onze on-line shop www.dutch-net.com/shop voor al uw
> computer-benodigdheden en actuele aanbiedingen.
> 
> -----------------------------
> The information transmitted is intended only for the person or entity to
> which it is addressed and may contain confidential and/or privileged
> material. Any review, retransmission, dissemination or other use of, or
> taking of any action in reliance upon, this information by persons or
> entities other than the intended recipient is prohibited. If you received
> this in error, please contact the sender and delete the material from any
> computer.
> 
> 
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
> 
> 
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users

=======================================================================

Marco Baurdoux
Unix Administrator
Infomaniak Network SA
Avenue de la Praille 26
1227 Carouge
Switzerland
Tel: +41 (0)22 820 35 41
Fax: +41 (0)22 820 35 46
http://web.infomaniak.ch

=======================================================================