hacker?

From: Oyanarte Portilho <portilho_at_tritium.fis.unb.br>
Date: Mon, 23 Mar 1998 08:38:26 -0300

Hi Gurus,

We are facing some difficulties in our web server (DEC 3000-300, DU V3.2D-1).
It has its NFS connection to another server being stalled in about half an
hour after boot and the problem is not in the second server, for sure (we
know this because a third machine that also mounts NFS file systems on it has
no problem).

Meanwhile, by examining access details in our web server through "Access Watch"
(a software provided by Netpressence - http://netpressence.com/accesswatch/)
I notice early morning accesses by the unidentified machine (null).fis.unb.br
(our URL is www.fis.unb.br) which accesses the dummy directory or file 500,
which does not exist, instead of a regular file. Does anybody know whether this
could be a hacker attack?

Thanks for any suggestions and ideas.

        Oyanarte Portilho
        Institute of Physics
        University of Brasilia, Brazil
Received on Mon Mar 23 1998 - 12:38:00 NZST

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:37 NZDT