- Jul 1, 2002
- 4,570
- 0
- 0
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1042
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1043
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1044
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1045
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1046
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1047
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1050
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1048
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1049
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1051
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1053
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1052
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1054
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1055
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1024
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1025
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1026
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1027
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1028
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1029
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1030
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1031
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1032
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1033
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1034
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1035
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1036
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1037
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1038
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1039
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1040
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1041
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1042
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1043
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1044
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1045
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1046
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1047
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1048
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1049
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1050
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1051
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1052
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1053
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1054
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1055
I ran a whois and got
OrgName: Verio, Inc.
OrgID: VRIO
Address: 8005 South Chester Street
Address: Suite 200
City: Englewood
StateProv: CO
PostalCode: 80112
Country: US
ReferralServer: rwhois://rwhois.verio.net:4321/
NetRange: 204.0.0.0 - 204.3.255.255
CIDR: 204.0.0.0/14
NetName: VRIO-204-000
NetHandle: NET-204-0-0-0-1
Parent: NET-204-0-0-0-0
NetType: Direct Allocation
NameServer: NS0.VERIO.NET
NameServer: NS1.VERIO.NET
NameServer: NS2.VERIO.NET
NameServer: NS3.VERIO.NET
NameServer: NS4.VERIO.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
Comment:
Comment: ********************************************
Comment: Reassignment information for this block is
Comment: available at rwhois.verio.net port 4321
Comment: ********************************************
RegDate: 2000-07-26
Updated: 2003-08-27
TechHandle: VIA4-ORG-ARIN
TechName: Verio, Inc.
TechPhone: +1-303-645-1900
TechEmail: vipar@verio.net
OrgAbuseHandle: VAC5-ARIN
OrgAbuseName: Verio Abuse Contact
OrgAbusePhone: +1-800-551-1630
OrgAbuseEmail: abuse@verio.net
OrgNOCHandle: VSC-ARIN
OrgNOCName: Verio Support Contact
OrgNOCPhone: +1-800-551-1630
OrgNOCEmail: support@verio.net
OrgTechHandle: VIA4-ORG-ARIN
OrgTechName: Verio, Inc.
OrgTechPhone: +1-303-645-1900
OrgTechEmail: vipar@verio.net
# ARIN WHOIS database, last updated 2003-08-29 19:15
# Enter ? for additional hints on searching ARIN's WHOIS database.
Im kind of new to securing my network, and i'm wondering if someone could clue me in on what was going on in this log..
thanks
'
I now understand that the address belongs to GRC which I was using to test with, but what does it mean by unrecognized access? doe that mean something is getting through?
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1043
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1044
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1045
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1046
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1047
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1050
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1048
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1049
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1051
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1053
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1052
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1054
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1055
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1024
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1025
Saturday, August 30, 2003 2:01:53 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1026
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1027
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1028
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1029
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1030
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1031
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1032
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1033
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1034
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1035
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1036
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1037
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1038
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1039
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1040
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1041
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1042
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1043
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1044
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1045
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1046
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1047
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1048
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1049
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1050
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1051
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1052
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1053
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1054
Saturday, August 30, 2003 2:01:54 AM Unrecognized access from 204.1.226.228:47156 to TCP port 1055
I ran a whois and got
OrgName: Verio, Inc.
OrgID: VRIO
Address: 8005 South Chester Street
Address: Suite 200
City: Englewood
StateProv: CO
PostalCode: 80112
Country: US
ReferralServer: rwhois://rwhois.verio.net:4321/
NetRange: 204.0.0.0 - 204.3.255.255
CIDR: 204.0.0.0/14
NetName: VRIO-204-000
NetHandle: NET-204-0-0-0-1
Parent: NET-204-0-0-0-0
NetType: Direct Allocation
NameServer: NS0.VERIO.NET
NameServer: NS1.VERIO.NET
NameServer: NS2.VERIO.NET
NameServer: NS3.VERIO.NET
NameServer: NS4.VERIO.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
Comment:
Comment: ********************************************
Comment: Reassignment information for this block is
Comment: available at rwhois.verio.net port 4321
Comment: ********************************************
RegDate: 2000-07-26
Updated: 2003-08-27
TechHandle: VIA4-ORG-ARIN
TechName: Verio, Inc.
TechPhone: +1-303-645-1900
TechEmail: vipar@verio.net
OrgAbuseHandle: VAC5-ARIN
OrgAbuseName: Verio Abuse Contact
OrgAbusePhone: +1-800-551-1630
OrgAbuseEmail: abuse@verio.net
OrgNOCHandle: VSC-ARIN
OrgNOCName: Verio Support Contact
OrgNOCPhone: +1-800-551-1630
OrgNOCEmail: support@verio.net
OrgTechHandle: VIA4-ORG-ARIN
OrgTechName: Verio, Inc.
OrgTechPhone: +1-303-645-1900
OrgTechEmail: vipar@verio.net
# ARIN WHOIS database, last updated 2003-08-29 19:15
# Enter ? for additional hints on searching ARIN's WHOIS database.
Im kind of new to securing my network, and i'm wondering if someone could clue me in on what was going on in this log..
thanks
'
I now understand that the address belongs to GRC which I was using to test with, but what does it mean by unrecognized access? doe that mean something is getting through?
