Re: [cobalt-users] Low memory (glimpse command)

["Karl Dreyer" <karl.dreyer@xxxxxxxxxxxxxxx>]

cobalt-users@xxxxxxxxxxxxxxx writes:
>
>I have also a memory alert on my Qube2.
>After a "top" check, I can see that a process is running for 22 days !!
>It seems to be a httpd process with command "glimpse".
>
>30078 httpd     12   0  1540  380   352 R       0 50.6  0.2 30763m glimpse
>
>I have notice some errors (repeated every 6 hours) on
>/var/log/httpd/home-error log file:
>
>File does not exist: /home/groups/home/scripts/root.exe
>File does not exist: /home/groups/home/c/winnt/system32/cmd.exe
>File does not exist: /home/groups/home/d/winnt/system32/cmd.exe
>
>I have no idea about the meaning of system32 or winnt on my Coblat server.
>
>Could someone help me to solve this problem ?
>Than you for your help.

It's a Code Red/Nimda scan... someone's infected system is looking for
unpatched IIS servers, it will do nothing to a Linux box except cause
annoying logs and make it deal w/ more useless traffic on the net.


Karl Dreyer
Northeast Internet & Applications Support
Photobition Group USA
T  (212)594-4800  X298
F  (212)594-1709
karl.dreyer@xxxxxxxxxxxxxxx