messages

2025-04-07

We are having a really strange message in our /var/log/messages file.

Aug 16 10:08:57 server3 kernel: **UDP DROP** IN=eth0 OUT= MAC=00:50:22:9a:d6:37:00:e0:52:08:b8:bd:08:00 SRC=81.101.161.91 DST=64.246.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=7 ID=60403 PROTO=UDP SPT=60341 DPT=33496 LEN=20

The bold IP address is always there. It belongs to RIPE, according to an ARIN whois. I've added it to hosts.deny, but that message contiues to appear at the rate of 1 per second.

Any ideas?