full-disclosure - Popup spam attempts on port 2???

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20050720071345.52e07067@homebox.slave-tothe-box.net>
Date: Wed Jul 20 14:12:57 2005
From: jlay at slave-tothe-box.net (James Lay)
Subject: Popup spam attempts on port 2???

Here it is...what the heck over?  Something new or did someone out
there make a boo boo ;)

06:56:58 homebox kernel: New,invalid UDP: IN=eth0 OUT=
MAC=00:04:75:80:dc:08:00:0f:90:27:ef:34:08:00 SRC=61.235.154.92
DST=24.116.x.x LEN=506 TOS=0x00 PREC=0x00 TTL=39 ID=0 DF PROTO=UDP
SPT=53591 DPT=1027 LEN=486 

06:56:58 homebox kernel: New,invalid UDP:
IN=eth0 OUT= MAC=00:04:75:80:dc:08:00:0f:90:27:ef:34:08:00
SRC=61.235.154.92 DST=24.116.x.x LEN=506 TOS=0x00 PREC=0x00 TTL=40
ID=0 DF PROTO=UDP SPT=53606 DPT=2 LEN=486 

06:56:58 homebox kernel:
New,invalid UDP: IN=eth0 OUT=
MAC=00:04:75:80:dc:08:00:0f:90:27:ef:34:08:00 SRC=61.235.154.92
DST=24.116.x.x LEN=506 TOS=0x00 PREC=0x00 TTL=39 ID=0 DF PROTO=UDP
SPT=53613 DPT=1032 LEN=486 

06:56:58 homebox kernel: New,invalid UDP:
IN=eth0 OUT= MAC=00:04:75:80:dc:08:00:0f:90:27:ef:34:08:00
SRC=61.235.154.92 DST=24.116.x.x LEN=506 TOS=0x00 PREC=0x00 TTL=39
ID=0 DF PROTO=UDP SPT=53621 DPT=2 LEN=486