Re: Cisco 675 password nonsense

[signal11 () MEDIAONE NET (Signal 11)]

Dave Dittrich wrote:
> Not really.  While I haven't ever seen Network neighborhood
> announcements, I do notice that *.scour.net has been trying to make SMB
> connections to my Linux box nearly daily for a while, I presume looking

I'm on Mediaone, recently aquired by @Home.  I have had similar entries
in my logfiles approximately once a day.  Mediaone dialups for MN are from 209.32.176.0 - 209.32.183.255. I can make my 
logfiles available to anyone who wants them (ipchains/linux format).  I was able to get a response from scour.net, and 
the message is as follows:

#BEGIN
Hello,

What you noticed was not an attack. Instead, you noticed our crawler
connecting to your SMB (Windows) shares.

Scour.Net is a multimedia search engine that indexes files from three
protocols -- HTTP, FTP, and SMB. The connection you saw was one of the SMB
crawlers. If you do not have any SMB shares, the crawler will disconnect. If
you do have public shares, it will index multimedia files located there.

If you would rather not have your site indexed, you can go to
http://www.scour.net/General/Misc/AddSite.phtml and click on the "Remove my
SMB server from Scour" link towards the bottom.

If you have any further questions, please do not hesitate to contact me.

Sincerely,

Vince Busam
Scour, Inc.
-----------------------------------
Vince Busam
CTO, Scour, Inc.
http://scour.net/
#END

Lastly, if there are any mediaone subscribers on-list and have a firewall, or keep logs of network activity, I'd like 
to talk to you..

--
Signal 11, List BOFH and sysadmin of malign.net
Take the blue pill. | people.mn.mediaone.net/bojay/