full-disclosure - Yahoo telnet scans?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20050720072304.5e93ee86@homebox.slave-tothe-box.net>
Date: Wed Jul 20 14:22:17 2005
From: jlay at slave-tothe-box.net (James Lay)
Subject: Yahoo telnet scans?

Here's a snippet of what I have...in total I have 95 of these starting
from April 14th.  Only thing I am connected to is:

http://tv.yahoo.com/grid?.force=p&setlineupcookie=true

Jul 14 06:19:05 homebox kernel: New,invalid TCP: IN=eth0 OUT=
MAC=00:04:75:80:dc:08:00:0f:90:27:ef:34:08:00 SRC=216.34.77.12
DST=24.116.255.102 LEN=40 TOS=0x00 PREC=0x00 TTL=117 ID=45983 DF
PROTO=TCP SPT=1299 DPT=23 WINDOW=8760 RES=0x00 SYN URGP=0 

Jul 17 02:31:53 homebox kernel: New,invalid TCP: IN=eth0 OUT=
MAC=00:04:75:80:dc:08:00:0f:90:27:ef:34:08:00 SRC=216.34.77.12
DST=24.116.255.102 LEN=40 TOS=0x00 PREC=0x00 TTL=117 ID=26237 DF
PROTO=TCP SPT=1299 DPT=23 WINDOW=8760 RES=0x00 SYN URGP=0 

Jul 19 22:44:41 homebox kernel: New,invalid TCP: IN=eth0 OUT=
MAC=00:04:75:80:dc:08:00:0f:90:27:ef:34:08:00 SRC=216.34.77.12
DST=24.116.255.102 LEN=40 TOS=0x00 PREC=0x00 TTL=117 ID=2500 DF
PROTO=TCP SPT=1299 DPT=23 WINDOW=8760 RES=0x00 SYN URGP=0