[plug] Am I being scanned?

[adrian_blockley at dingoblue.net.au]

G'day all,

With all the heightend awareness on security issues recently I have been
trying to take a more active role in checking what happens to my linux PC
while logged in to the network (dialup link). I noticed this in my logs
tonight - is it anything I need to be concerned about?  What would
normally live at port 12345 (seems an odd number) or was it just the start
of a random port scan.  Whoever it was seemed to try about once or twice a
minute for about 15 minutes. 

portsentry[638]: attackalert: Connect from host:
p77.nas6.is2.u-net.net/194.119.133.205 to TCP port: 12345

I had already turned off all services that weren't being used including
telnet as I tend only to use ssh if i need to login anywhere remote.

Am I being paranoid? What other steps do people take to keep their linux
boxes secure?

Cheers

Adrian.

--------------------------------------------------
Adrian Blockley	 
adrian_blockley at dingoblue.net.au
Ph 03 9571 4823