Re: Are automated scanners doing this ?

[Jon <secure () envisager com>]

In-Reply-To: <20021025081652.32109.qmail () mail securityfocus com>

Thanks for all the notes everyone.  I don't know how to check if ports are being probed on Linux:

The access attempts are almost all via smbd/nmbd when I have it on line: That is, failed logon 
attempts recorded in the samba log.  In the past there also used to be a majority of logon 
attempts via xinetd until I got fed up and switched xinetd off entirely.

I also get attempts to logon via SSHD (one IP address in Hong Kong spent 15 minutes trying). 

Thanks !

Jon