Dave Dittrich wrote: > Not really. While I haven't ever seen Network neighborhood > announcements, I do notice that *.scour.net has been trying to make SMB > connections to my Linux box nearly daily for a while, I presume looking I'm on Mediaone, recently aquired by @Home. I have had similar entries in my logfiles approximately once a day. Mediaone dialups for MN are from 209.32.176.0 - 209.32.183.255. I can make my logfiles available to anyone who wants them (ipchains/linux format). I was able to get a response from scour.net, and the message is as follows: #BEGIN Hello, What you noticed was not an attack. Instead, you noticed our crawler connecting to your SMB (Windows) shares. Scour.Net is a multimedia search engine that indexes files from three protocols -- HTTP, FTP, and SMB. The connection you saw was one of the SMB crawlers. If you do not have any SMB shares, the crawler will disconnect. If you do have public shares, it will index multimedia files located there. If you would rather not have your site indexed, you can go to http://www.scour.net/General/Misc/AddSite.phtml and click on the "Remove my SMB server from Scour" link towards the bottom. If you have any further questions, please do not hesitate to contact me. Sincerely, Vince Busam Scour, Inc. ----------------------------------- Vince Busam CTO, Scour, Inc. http://scour.net/ #END Lastly, if there are any mediaone subscribers on-list and have a firewall, or keep logs of network activity, I'd like to talk to you.. -- Signal 11, List BOFH and sysadmin of malign.net Take the blue pill. | people.mn.mediaone.net/bojay/
This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:55:48 PDT