Popup spam attempts on port 2???

[James Lay <jlay () slave-tothe-box net>]

Here it is...what the heck over?  Something new or did someone out
there make a boo boo ;)

06:56:58 homebox kernel: New,invalid UDP: IN=eth0 OUT=
MAC=00:04:75:80:dc:08:00:0f:90:27:ef:34:08:00 SRC=61.235.154.92
DST=24.116.x.x LEN=506 TOS=0x00 PREC=0x00 TTL=39 ID=0 DF PROTO=UDP
SPT=53591 DPT=1027 LEN=486 

06:56:58 homebox kernel: New,invalid UDP:
IN=eth0 OUT= MAC=00:04:75:80:dc:08:00:0f:90:27:ef:34:08:00
SRC=61.235.154.92 DST=24.116.x.x LEN=506 TOS=0x00 PREC=0x00 TTL=40
ID=0 DF PROTO=UDP SPT=53606 DPT=2 LEN=486 

06:56:58 homebox kernel:
New,invalid UDP: IN=eth0 OUT=
MAC=00:04:75:80:dc:08:00:0f:90:27:ef:34:08:00 SRC=61.235.154.92
DST=24.116.x.x LEN=506 TOS=0x00 PREC=0x00 TTL=39 ID=0 DF PROTO=UDP
SPT=53613 DPT=1032 LEN=486 

06:56:58 homebox kernel: New,invalid UDP:
IN=eth0 OUT= MAC=00:04:75:80:dc:08:00:0f:90:27:ef:34:08:00
SRC=61.235.154.92 DST=24.116.x.x LEN=506 TOS=0x00 PREC=0x00 TTL=39
ID=0 DF PROTO=UDP SPT=53621 DPT=2 LEN=486
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/