>===== Original Message From (UA CIRT Announce List) ===== UA CIRT Announce List Digest #1460 1) Weekly Welchia Worm Report by Chirk Chu (Security Officer-University of Alaska) This digest is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the FEED mode, E-mail to Send administrative queries to ----- Forwarded Message ----- From: Chirk Chu (Security Officer-University of Alaska) Subject: Weekly Welchia Worm Report -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 University of Alaska Information Resource Security Incident Report Date: November 17, 2003 MAU: SW, UAA, UAF and UAS Incident Date/Time: August 22, 2003 14:22:49 GMT -8 Incident Type: [ ]Scans [X]Worm/Virus [X]Compromise [ ]Abuse Source IP Address: Many, see below Target IP Address: 137.229.0.0/16 DESCRIPTION: Outbreak of the W32.Welchia.Worm. For more details on the W32.Welchia.Worm visit http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html Please email new cases and status updates to c3chu@alaska.edu. INFECTED SYSTEMS: IP Address Date/Time Status ==================== ============== ====== 137.229.0.133 09/05/03 10:21 Patched 137.229.0.134 09/03/03 15:22 Patched 137.229.0.237 11/01/03 10:01 Patched 137.229.0.253 09/03/03 17:03 Patched 137.229.2.147 09/05/03 10:49 Patched 137.229.2.149 10/17/03 14:47 Patched 137.229.2.188 09/03/03 16:34 Patched 137.229.7.145 09/04/03 14:47 Patched 137.229.10.14 10/01/03 09:09 Patched 137.229.10.219 10/20/03 23:42 Patched 137.229.12.36 09/19/03 09:55 Patched 137.229.12.53 09/05/03 10:44 Patched 137.229.12.68 09/03/03 15:48 Rebuilt & Patched 137.229.12.113 09/03/03 16:37 Patched 137.229.12.194 09/03/03 17:47 Rebuilt & Patched 137.229.16.198 09/04/03 15:47 Unknown 137.229.16.224 09/09/03 08:54 Unknown 137.229.17.12 08/29/03 Patched 137.229.17.59 09/08/03 17:20 Unknown 137.229.17.99 09/19/03 15:43 Unknown 137.229.17.107 09/02/03 18:08 Unknown 137.229.17.117 08/28/03 16:48 Patched 137.229.17.161 09/12/03 17:39 Unknown 137.229.17.209 09/19/03 11:56 Unknown 137.229.17.230 09/25/03 14:52 Port Disabled 137.229.18.34 09/13/03 17:22 Unknown 137.229.20.14 09/15/03 Patched 137.229.20.94 09/03/03 14:26 Patched 137.229.20.136 09/02/03 12:15 Unknown 137.229.20.179 09/03/03 Patched 137.229.20.183 09/11/03 16:31 Port Disabled 137.229.20.208 09/02/03 12:49 Unknown 137.229.20.217 10/08/03 14:53 Actively Scanning 137.229.20.227 09/08/03 13:28 Unknown 137.229.21.145 08/29/03 17:10 Unknown 137.229.21.163 10/08/03 08:44 Actively Scanning 137.229.21.165 09/19/03 08:57 Unknown 137.229.21.189 10/08/03 13:36 Actively Scanning 137.229.21.210 09/10/03 15:53 Patched 137.229.21.252 08/27/03 10:10 Unknown 137.229.22.34 09/02/03 04:36 Unknown 137.229.22.43 09/26/03 10:10 Patched 137.229.23.19 09/08/03 16:45 Unknown 137.229.23.112 08/28/03 16:50 Unknown 137.229.23.250 08/30/03 08:37 Unknown 137.229.24.144 09/02/03 11:55 Unknown 137.229.25.21 09/16/03 Patched 137.229.25.24 08/29/03 Patched 137.229.25.25 09/03/03 Patched 137.229.25.159 08/28/03 18:06 Unknown 137.229.25.192 09/11/03 20:21 Unknown 137.229.25.205 08/31/03 11:06 Patched 137.229.25.227 09/08/03 15:29 Port Disabled 137.229.25.236 09/04/03 15:16 Unknown 137.229.25.237 09/23/03 18:09 Unknown 137.229.25.239 08/28/03 20:26 Unknown 137.229.25.240 09/05/03 09:46 Patched 137.229.25.241 09/15/03 09:50 Unknown 137.229.25.242 09/03/03 17:11 Unknown 137.229.25.245 08/31/03 15:02 Port Disabled 137.229.25.250 08/27/03 11:17 Patched 137.229.25.254 08/27/03 16:39 Unknown 137.229.26.41 08/28/03 13:30 Unknown 137.229.26.44 09/22/03 12:59 Unknown 137.229.26.54 09/11/03 17:40 Unknown 137.229.26.76 09/23/03 13:52 Unknown 137.229.26.128 09/29/03 14:52 Patched 137.229.26.161 09/11/03 19:07 Unknown 137.229.26.224 09/09/03 10:41 Unknown 137.229.26.235 09/11/03 17:48 Unknown 137.229.27.21 08/27/03 Patched 137.229.27.22 08/28/03 Patched 137.229.27.23 08/28/03 Patched 137.229.27.73 09/02/03 01:17 Unknown 137.229.27.184 09/04/03 16:46 Unknown 137.229.27.189 09/23/03 14:01 Patched 137.229.27.223 08/27/03 15:07 Patched 137.229.27.224 08/29/03 09:06 Patched 137.229.27.226 08/27/03 15:33 Patched 137.229.28.77 Patched 137.229.28.84 09/23/03 09:33 Unknown 137.229.28.94 09/05/03 15:35 Unknown 137.229.28.96 09/02/03 08:07 Unknown 137.229.28.104 09/23/03 14:19 Patched 137.229.28.105 09/08/03 08:40 Unknown 137.229.28.107 09/10/03 16:35 Unknown 137.229.28.121 11/04/03 08:20 Unknown 137.229.28.153 11/11/03 08:31+ Patched 137.229.36.54 09/27/03 04:48 Actively Scanning 137.229.36.75 09/27/03 04:11 Actively Scanning 137.229.36.166 09/27/03 04:59 Actively Scanning 137.229.36.169 09/27/03 09:29 Actively Scanning 137.229.40.32 09/01/03 14:00 Patched 137.229.40.117 09/22/03 09:39 Patched 137.229.40.121 09/03/03 11:24 Patched 137.229.41.32 08/27/03 15:09 Patched 137.229.41.72 09/07/03 12:39 Patched 137.229.41.73 09/04/03 10:25 Patched 137.229.41.97 09/22/03 12:22 Patched 137.229.42.106 08/29/03 09:45 Patched 137.229.42.193 09/09/03 17:07 Unknown 137.229.42.159 09/08/03 15:48 Actively Scanning 137.229.43.27 08/31/03 15:41 Unknown 137.229.43.29 09/08/03 20:56 Unknown 137.229.43.33 08/31/03 15:18 Unknown 137.229.43.42 09/01/03 00:54 Patched 137.229.43.49 09/02/03 11:08 Unknown 137.229.43.51 09/06/03 14:15 Unknown 137.229.43.54 09/08/03 21:06 Unknown 137.229.43.67 10/10/03 08:29 Patched 137.229.43.72 09/07/03 02:04 Unknown 137.229.43.74 09/05/03 19:36 Unknown 137.229.43.77 09/06/03 21:36 Unknown 137.229.43.83 09/01/03 06:40 Patched 137.229.43.91 09/01/03 23:00 Patched 137.229.43.94 09/06/03 20:15 Unknown 137.229.43.98 09/01/03 16:43 Unknown 137.229.43.101 09/05/03 19:43 Patched 137.229.43.107 09/01/03 21:22 Patched 137.229.43.110 09/01/03 21:06 Unknown 137.229.43.117 09/01/03 04:44 Unknown 137.229.43.118 09/08/03 21:33 Unknown 137.229.43.120 09/02/03 15:45 Unknown 137.229.43.124 09/08/03 15:49 Unknown 137.229.43.125 08/31/03 19:12 Unknown 137.229.43.132 08/28/03 09:41 Unknown 137.229.43.133 09/01/03 20:29 Unknown 137.229.43.137 09/06/03 23:56 Unknown 137.229.43.148 09/01/03 19:26 Unknown 137.229.43.160 09/05/03 20:15 Unknown 137.229.43.167 08/31/03 13:05 Unknown 137.229.43.182 09/05/03 18:42 Unknown 137.229.43.186 08/29/03 09:11 Patched 137.229.43.206 09/02/03 08:13 Unknown 137.229.43.218 09/05/03 19:19 Unknown 137.229.43.226 09/09/03 12:12 Unknown 137.229.43.230 09/02/03 09:49 Unknown 137.229.43.243 09/02/03 12:21 Unknown 137.229.43.251 09/02/03 10:15 Unknown 137.229.44.24 09/01/03 19:02 Unknown 137.229.44.25 09/06/03 18:46 Unknown 137.229.44.26 09/01/03 19:03 Unknown 137.229.44.42 09/02/03 12:08 Unknown 137.229.44.49 09/02/03 10:03 Unknown 137.229.44.51 09/06/03 17:07 Unknown 137.229.44.66 09/18/03 19:57 Unknown 137.229.44.74 09/01/03 19:40 Patched 137.229.44.76 09/02/03 09:06 Patched 137.229.44.77 08/31/03 18:11 Patched 137.229.44.85 09/06/03 17:51 Unknown 137.229.44.87 09/02/03 14:01 Unknown 137.229.44.92 09/02/03 13:27 Patched 137.229.44.126 11/17/03 17:48 Actively Scanning 137.229.44.158 09/06/03 16:10 Unknown 137.229.44.172 09/05/03 18:03 Unknown 137.229.44.177 09/04/03 15:58 Port Disabled 137.229.44.188 09/01/03 23:41 Patched 137.229.44.189 09/06/03 22:23 Unknown 137.229.44.215 09/06/03 14:38 Unknown 137.229.45.10 09/01/03 16:48 Unknown 137.229.45.13 09/09/03 17:14 Unknown 137.229.45.136 10/18/03 16:48 Patched 137.229.45.137 09/30/03 12:55 Unknown 137.229.45.157 11/10/03 13:49+ Actively Scanning 137.229.45.173 10/27/03 08:43 Patched 137.229.45.189 09/04/03 09:31 Unknown 137.229.45.196 09/22/03 12:54 Unknown 137.229.45.215 10/01/03 12:47 Unknown 137.229.45.219 09/05/03 10:39 Patched 137.229.45.204 09/10/03 14:25 Unknown 137.229.45.222 08/27/03 16:25 Unknown 137.229.46.41 09/02/03 07:11 Unknown 137.229.46.55 08/31/03 08:04 Unknown 137.229.46.75 09/01/03 19:46 Patched 137.229.46.97 08/31/03 18:20 Unknown 137.229.46.100 09/05/03 18:05 Unknown 137.229.46.146 09/03/03 19:30 Unknown 137.229.46.171 09/02/03 09:31 Unknown 137.229.46.182 09/06/03 10:08 Unknown 137.229.46.201 09/05/03 18:57 Patched 137.229.46.236 08/29/03 15:30 Unknown 137.229.46.253 09/06/03 14:15 Unknown 137.229.47.30 09/01/03 16:35 Unknown 137.229.47.36 09/01/03 08:53 Unknown 137.229.47.82 09/03/03 20:33 Unknown 137.229.47.88 09/02/03 09:51 Unknown 137.229.47.154 09/02/03 02:50 Unknown 137.229.47.161 09/07/03 05:54 Unknown 137.229.47.189 09/05/03 19:51 Unknown 137.229.47.191 09/06/03 21:32 Unknown 137.229.47.205 09/01/03 15:40 Unknown 137.229.47.225 09/22/03 16:32 Port Disabled 137.229.48.35 09/02/03 04:49 Unknown 137.229.48.50 09/05/03 20:03 Unknown 137.229.48.61 09/02/03 10:36 Unknown 137.229.48.63 09/06/03 12:10 Unknown 137.229.48.64 09/01/03 18:22 Unknown 137.229.48.84 08/28/03 13:28 Patched 137.229.48.147 08/29/03 16:21 Unknown 137.229.48.162 09/06/03 11:56 Unknown 137.229.48.171 09/06/03 10:32 Unknown 137.229.49.182 10/29/03 14:58 Patched 137.229.49.186 08/28/03 08:28 Patched 137.229.49.192 08/27/03 10:09 Offline 137.229.49.195 11/12/03 12:25+ Patched 137.229.49.222 10/14/03 13:55 Patched 137.229.49.252 10/16/03 13:05 Patched 137.229.49.235 08/27/03 15:30 Offline 137.229.50.190 09/19/03 14:38 Unknown 137.229.50.216 09/18/03 09:25 Unknown 137.229.51.62 10/29/03 15:03 Actively Scanning 137.229.51.64 09/11/03 09:13 Actively Scanning 137.229.51.66 10/15/03 14:35 Actively Scanning 137.229.51.68 11/10/03 15:19+ Actively Scanning 137.229.51.71 09/03/03 16:17 Unknown 137.229.51.72 10/31/03 19:10 Patched 137.229.51.73 10/17/03 11:13 Actively Scanning 137.229.51.74 09/04/03 09:06 Unknown 137.229.51.75 09/04/03 08:55 Unknown 137.229.51.76 08/28/03 16:02 Unknown 137.229.51.77 11/07/03 12:12 Actively Scanning 137.229.51.78 09/01/03 13:57 Unknown 137.229.51.79 09/10/03 17:53 Unknown 137.229.51.84 08/27/03 10:07 Unknown 137.229.51.85 11/03/03 14:53 Actively Scanning 137.229.51.87 11/06/03 17:45 Actively Scanning 137.229.51.89 09/23/03 10:38 Unknown 137.229.51.92 09/18/03 17:32 Unknown 137.229.51.94 09/18/03 05:06 Reg. Cancelled 137.229.51.97 09/19/03 10:39 Unknown 137.229.51.105 11/09/03 22:49 Actively Scanning 137.229.51.111 10/21/03 10:04 Patched 10/22 137.229.51.113 10/10/03 13:08 Actively Scanning 137.229.51.114 11/07/03 12:42 Actively Scanning 137.229.51.116 11/10/03 10:45 Patched 11/12 137.229.51.122 09/19/03 11:39 Unknown 137.229.51.125 10/23/03 13:16 Actively Scanning 137.229.51.139 09/22/03 16:27 Unknown 137.229.51.141 09/23/03 13:01 Unknown 137.229.51.151 09/26/03 12:31 Patched 10/10 137.229.51.164 09/05/03 19:50 Unknown 137.229.51.165 10/21/03 08:33 Patched 10/30 137.229.51.170 10/21/03 13:57 Actively Scanning 137.229.51.172 09/16/03 09:10 Unknown 137.229.51.176 09/22/03 10:59 Unknown 137.229.51.177 11/05/03 12:41 Patched 137.229.51.184 09/05/03 17:50 Unknown 137.229.51.186 10/17/03 11:21 Actively Scanning 137.229.51.189 10/10/03 22:56 Actively Scanning 137.229.51.190 10/29/03 14:07 Patched 137.229.51.192 09/04/03 09:28 Actively Scanning 137.229.51.207 09/07/03 20:55 Unknown 137.229.51.215 09/11/03 13:51 Unknown 137.229.51.217 11/05/03 08:00 Actively Scanning 137.229.51.218 10/29/03 12:10 Actively Scanning 137.229.51.224 09/04/03 09:42 Unknown 137.229.51.225 10/16/03 17:09 Notified 10/17 137.229.51.233 10/06/03 13:08 Patched 137.229.51.235 10/20/03 08:57 Patched 137.229.51.241 09/19/03 10:07 Unknown 137.229.52.5 08/27/03 10:08 Patched 137.229.52.9 09/16/03 02:19 Port Disabled 137.229.52.21 08/29/03 14:45 Unknown 137.229.52.35 09/01/03 11:10 Unknown 137.229.52.90 09/26/03 Patched 137.229.52.102 08/28/03 09:30 Unknown 137.229.52.208 09/02/03 18:19 Patched 137.229.53.15 08/28/03 17:09 Unknown 137.229.53.18 08/27/03 12:34 Patched 137.229.53.19 08/27/03 Patched 137.229.53.136 09/12/03 10:08 Unknown 137.229.53.180 09/02/03 15:24 Unknown 137.229.53.188 08/27/03 15:34 Patched 137.229.53.189 08/28/03 13:00 Unknown 137.229.53.237 09/12/03 12:07 Unknown 137.229.53.239 09/03/03 11:21 Unknown 137.229.55.150 09/16/03 11:39 Port Disabled 137.229.55.198 09/08/03 02:11 Unknown 137.229.55.199 09/07/03 18:16 Unknown 137.229.55.221 09/05/03 14:56 Unknown 137.229.55.228 09/05/03 14:57 Unknown 137.229.55.241 09/05/03 10:59 Unknown 137.229.55.242 09/02/03 11:58 Unknown 137.229.56.24 08/29/03 Patched 137.229.56.25 08/28/03 Patched 137.229.56.71 09/05/03 10:53 Unknown 137.229.56.84 09/04/03 23:53 Unknown 137.229.56.86 09/02/03 17:58 Unknown 137.229.56.93 08/29/03 17:29 Port Disabled 137.229.56.99 08/28/03 13:36 Patched 137.229.56.105 08/31/03 18:43 Unknown 137.229.56.237 08/28/03 15:55 Unknown 137.229.57.24 09/01/03 21:32 Unknown 137.229.57.26 09/01/03 21:41 Unknown 137.229.57.29 09/02/03 15:46 Unknown 137.229.57.33 09/02/03 10:50 Patched 137.229.57.47 09/02/03 09:04 Unknown 137.229.57.55 09/02/03 06:31 Patched 137.229.57.59 09/01/03 16:45 Unknown 137.229.57.60 09/01/03 13:17 Unknown 137.229.57.69 09/16/03 08:41 Unknown 137.229.57.173 09/05/03 20:02 Unknown 137.229.57.180 09/05/03 20:07 Unknown 137.229.57.211 09/01/03 07:13 Unknown 137.229.57.212 09/05/03 18:51 Unknown 137.229.57.238 09/07/03 02:09 Unknown 137.229.58.17 09/03/02 Patched 137.229.58.20 09/02/03 12:24 Unknown 137.229.58.29 09/02/03 14:39 Patched 137.229.58.35 09/02/03 15:58 Unknown 137.229.58.44 09/02/03 00:31 Unknown 137.229.58.47 09/03/03 18:27 Patched 137.229.58.49 09/02/03 15:52 Unknown 137.229.58.56 08/31/03 11:33 Unknown 137.229.58.57 09/01/03 16:21 Unknown 137.229.58.59 08/27/03 19:25 Patched 137.229.58.107 09/05/03 18:31 Actively Scanning 137.229.58.112 09/05/03 19:11 Unknown 137.229.58.125 09/18/03 17:19 Unknown 137.229.58.126 09/19/03 14:46 Unknown 137.229.58.144 09/29/03 15:36 Patched 137.229.58.165 08/29/03 16:41 Port Disabled 137.229.58.189 09/01/03 17:54 Unknown 137.229.58.197 09/05/03 18:28 Unknown 137.229.58.198 09/01/03 15:37 Unknown 137.229.58.203 09/02/03 02:12 Unknown 137.229.58.213 09/06/03 11:40 Unknown 137.229.58.227 09/29/03 12:13 Port Disabled 137.229.58.233 09/01/03 21:36 Patched 137.229.58.248 09/01/03 19:04 Unknown 137.229.59.28 09/05/03 19:38 Unknown 137.229.59.33 09/01/03 23:12 Unknown 137.229.59.35 09/01/03 17:24 Unknown 137.229.59.37 09/01/03 14:17 Unknown 137.229.59.55 09/05/03 19:59 Unknown 137.229.59.60 09/05/03 19:45 Unknown 137.229.59.63 09/06/03 19:54 Unknown 137.229.59.70 09/01/03 14:05 Unknown 137.229.59.76 09/01/03 14:38 Unknown 137.229.59.81 09/01/03 07:42 Unknown 137.229.59.82 09/05/03 19:01 Unknown 137.229.59.84 09/01/03 15:45 Unknown 137.229.59.93 09/19/03 15:20 Patched 137.229.59.98 08/27/03 15:38 Unknown 137.229.59.154 09/29/03 20:45 Actively Scanning 137.229.59.158 09/29/03 21:35 Patched 137.229.59.176 09/06/03 12:27 Unknown 137.229.59.189 09/22/03 15:55 Unknown 137.229.59.204 09/05/03 18:32 Unknown 137.229.62.109 09/19/03 16:30 Unknown 137.229.62.110 09/23/03 14:57 Patched 137.229.62.121 08/30/03 20:37 Unknown 137.229.62.129 08/27/03 10:09 Port Disabled 137.229.62.159 09/04/03 16:42 Patched 10/07 137.229.62.237 09/14/03 16:48 Unknown 137.229.62.246 09/10/03 14:46 Unknown 137.229.62.254 10/28/03 09:54 Port Disabled 137.229.63.109 09/06/03 14:42 Unknown 137.229.63.124 09/27/03 11:33 Patched 137.229.63.126 09/01/03 12:12 Unknown 137.229.63.147 09/05/03 19:14 Unknown 137.229.63.200 09/07/03 00:29 Unknown 137.229.64.32 08/31/03 16:55 Unknown 137.229.64.72 09/08/03 17:41 Unknown 137.229.64.84 09/08/03 20:24 Patched 137.229.64.112 09/01/03 03:04 Patched 137.229.64.147 09/01/03 14:41 Unknown 137.229.64.156 09/01/03 10:26 Unknown 137.229.64.167 09/09/03 07:20 Unknown 137.229.64.191 10/25/03 19:30 Port Disabled 137.229.64.198 10/31/03 19:22 Port Disabled 137.229.64.202 09/01/03 21:16 Patched 137.229.64.214 09/09/03 07:35 Unknown 137.229.64.222 09/01/03 18:03 Port Disabled 137.229.64.231 08/27/03 10:11 Patched 137.229.65.13 08/28/03 Patched 137.229.65.14 08/27/03 Patched 137.229.65.23 09/07/03 00:55 Patched 137.229.65.34 08/29/03 18:17 Patched 137.229.65.38 09/01/03 22:49 Patched 137.229.65.39 09/04/03 00:59 Unknown 137.229.65.41 09/07/03 00:11 Unknown 137.229.65.43 09/01/03 23:54 Patched 137.229.65.46 09/04/03 09:05 Unknown 137.229.65.131 08/28/03 10:02 Unknown 137.229.65.133 08/27/03 11:07 Unknown 137.229.65.139 08/30/03 12:24 Unknown 137.229.65.142 09/22/03 10:32 Port Disabled 137.229.65.146 08/27/03 10:08 Unknown 137.229.65.183 09/04/03 08:50 Unknown 137.229.65.235 08/27/03 10:15 Port Disabled 137.229.65.244 08/30/03 13:16 Unknown 137.229.67.12 08/28/03 Patched 137.229.67.77 09/15/03 11:30 Unknown 137.229.67.120 08/28/03 13:25 Port Disabled 137.229.67.131 08/27/03 16:26 Patched 137.229.68.34 09/06/03 17:59 Unknown 137.229.68.36 08/31/03 15:55 Unknown 137.229.68.52 09/02/03 01:56 Port Disabled 137.229.68.53 09/01/03 11:03 Unknown 137.229.68.54 09/01/03 14:14 Unknown 137.229.68.57 09/02/03 15:15 Unknown 137.229.68.59 09/02/03 02:35 Unknown 137.229.68.61 09/11/03 08:54 Unknown 137.229.68.63 08/31/03 16:21 Port Disabled 137.229.68.123 09/25/03 17:20 Port Disabled 137.229.68.138 09/10/03 21:01 Unknown 137.229.68.144 09/07/03 23:28 Patched 09/29 137.229.68.163 09/02/03 12:01 Unknown 137.229.68.178 09/06/03 16:19 Unknown 137.229.68.185 09/11/03 12:47 Unknown 137.229.68.189 09/07/03 15:01 Reg. Cancelled 137.229.68.191 10/02/03 17:00 Patched 137.229.68.194 09/06/03 12:30 Port Disabled 137.229.68.210 09/12/03 18:02 Unknown 137.229.68.228 09/07/03 14:13 Unknown 137.229.68.247 09/06/03 18:34 Reg. Cancelled 137.229.69.21 09/01/03 14:40 Unknown 137.229.69.23 09/06/03 17:23 Patched 137.229.69.29 08/31/03 15:50 Unknown 137.229.69.46 08/28/03 15:21 Patched 137.229.69.210 09/06/03 19:43 Unknown 137.229.69.213 09/07/03 07:59 Unknown 137.229.69.214 09/05/03 19:28 Unknown 137.229.69.253 08/28/03 11:48 Unknown 137.229.73.17 08/27/00 Patched 137.229.73.56 09/12/03 09:35 Unknown 137.229.73.58 09/02/03 15:32 Unknown 137.229.73.63 09/02/03 17:17 Port Disabled 137.229.73.170 08/27/03 13:39 Port Disabled 137.229.74.2 09/03/03 Patched 137.229.74.51 09/05/03 19:15 Unknown 137.229.74.57 08/28/03 12:21 Patched 137.229.74.81 10/21/03 11:25 Port Disabled 137.229.74.104 09/11/03 13:35 Actively Scanning 137.229.74.121 09/02/03 15:10 Unknown 137.229.74.131 09/03/03 06:47 Unknown 137.229.74.191 11/12/03 10:43+ Patched 137.229.74.195 09/04/03 11:50 Unknown 137.229.74.199 09/03/03 10:51 Port Disabled 137.229.74.220 09/17/03 17:06 Unknown 137.229.74.176 09/23/03 08:24 Patched 137.229.74.251 09/10/03 15:48 Unknown 137.229.75.162 09/19/03 15:16 Unknown 137.229.75.167 09/23/03 11:56 Unknown 137.229.75.178 10/27/03 10:34 Actively Scanning 137.229.75.189 09/03/03 14:56 Unknown 137.229.75.196 08/27/03 11:09 Unknown 137.229.76.2 08/29/03 Patched 137.229.76.16 09/12/03 14:35 Unknown 137.229.76.17 08/27/03 Patched 137.229.76.20 08/27/03 10:21 Patched 137.229.76.21 08/29/03 Patched 137.229.76.23 09/22/03 10:34 Unknown 137.229.76.24 08/29/03 Patched 137.229.76.25 08/27/03 Patched 137.229.76.29 09/07/03 15:50 Unknown 137.229.76.42 08/30/03 19:07 Patched 137.229.76.48 08/29/03 13:03 Patched 137.229.76.69 09/27/03 21:10 Unknown 137.229.76.72 09/26/03 11:15 Unknown 137.229.76.75 09/05/03 14:17 Unknown 137.229.76.88 09/25/03 12:57 Unknown 137.229.76.95 11/11/03 17:18+ Actively Scanning 137.229.76.109 08/31/03 11:01 Unknown 137.229.76.110 09/12/03 10:22 Unknown 137.229.76.132 11/11/03 10:51+ Actively Scanning 137.229.76.135 09/10/03 13:48 Unknown 137.229.76.150 08/27/03 21:29 Patched 137.229.76.155 09/12/03 14:16 Unknown 137.229.76.165 08/27/03 12:35 Patched 137.229.76.167 09/19/03 12:35 Unknown 137.229.76.173 09/06/03 21:44 Unknown 137.229.76.200 09/15/03 21:20 Unknown 137.229.76.218 11/11/03 08:01+ Patched 137.229.76.228 09/03/03 05:09 Unknown 137.229.76.230 11/12/03 09:35+ Patched 137.229.76.236 08/28/03 15:14 Unknown 137.229.76.239 09/11/03 13:27 Unknown 137.229.76.247 08/27/03 10:46 Patched 137.229.76.249 09/23/03 18:16 Unknown 137.229.76.251 09/19/03 16:56 Unknown 137.229.76.254 09/03/03 09:38 Unknown 137.229.78.16 09/27/03 Patched 137.229.78.17 09/24/03 Patched 137.229.78.55 09/01/03 10:43 Unknown 137.229.78.143 09/03/03 14:58 Unknown 137.229.78.152 09/23/03 11:55 Port Disabled 137.229.78.158 09/19/03 10:58 Unknown 137.229.78.159 09/09/03 13:54 Port Disabled 137.229.78.169 09/02/03 16:58 Unknown 137.229.78.171 09/23/03 09:34 Port Disabled 137.229.78.174 09/09/03 11:38 Unknown 137.229.78.184 09/19/03 16:32 Unknown 137.229.78.213 08/29/03 10:23 Unknown 137.229.78.238 09/08/03 08:55 Patched 137.229.78.252 09/02/03 12:00 Unknown 137.229.80.39 08/27/03 10:05 Unknown 137.229.80.56 09/22/03 09:41 Unknown 137.229.80.80 08/29/03 14:28 Unknown 137.229.80.84 08/31/03 13:58 Unknown 137.229.80.97 09/08/03 11:55 Unknown 137.229.80.120 09/11/03 11:03 Unknown 137.229.80.129 09/05/03 09:39 Unknown 137.229.80.137 09/12/03 19:31 Unknown 137.229.80.143 08/27/03 11:13 Port Disabled 137.229.80.166 09/12/03 15:51 Unknown 137.229.80.207 10/31/03 22:22 Actively Scanning 137.229.80.246 09/03/03 09:48 Unknown 137.229.83.53 09/25/03 11:13 Patched 137.229.84.47 09/23/03 12:36 Patched 137.229.84.161 09/02/03 08:13 Unknown 137.229.88.23 09/27/03 Patched 137.229.88.24 09/27/03 Patched 137.229.88.25 09/27/03 Patched 137.229.88.119 11/13/03 04:41+ Patched 137.229.88.181 09/19/03 17:38 Patched 137.229.88.184 09/15/03 17:22 Patched 137.229.88.193 09/11/03 16:34 Patched 137.229.88.227 09/04/03 12:07 Patched 137.229.88.229 09/05/03 15:33 Patched 137.229.88.230 09/04/03 11:54 Patched 137.229.88.231 09/04/03 13:19 Patched 137.229.88.232 09/08/03 19:14 Patched 137.229.88.233 09/09/03 07:51 Patched 137.229.88.234 09/03/03 13:59 Patched 137.229.88.236 09/04/03 10:48 Patched 137.229.88.237 09/18/03 17:43 Patched 137.229.88.238 09/09/03 16:07 Patched 137.229.88.239 09/09/03 09:57 Patched 137.229.88.240 09/10/03 18:07 Patched 137.229.88.243 09/09/03 09:51 Patched 137.229.88.244 09/08/03 17:07 Patched 137.229.88.245 09/04/03 12:06 Patched 137.229.88.246 09/08/03 17:52 Patched 137.229.88.249 09/09/03 01:14 Patched 137.229.88.250 09/04/03 11:19 Patched 137.229.88.251 09/08/03 15:48 Patched 137.229.88.253 09/10/03 17:33 Patched 137.229.89.11 09/08/03 19:33 Unknown 137.229.89.12 08/27/03 Patched 137.229.89.15 08/31/03 10:17 Actively Scanning 137.229.89.48 08/27/03 16:39 Patched 137.229.89.64 09/02/03 10:56 Unknown 137.229.89.101 09/15/03 13:52 Unknown 137.229.89.115 08/27/03 11:18 Port Disabled 137.229.89.130 09/11/03 00:34 Port Disabled 137.229.89.136 09/04/03 08:58 Unknown 137.229.89.147 09/04/03 08:56 Unknown 137.229.89.185 09/16/03 08:32 Port Disabled 137.229.89.205 08/28/03 15:50 Unknown 137.229.89.232 09/09/03 11:10 Unknown 137.229.89.236 08/31/03 16:45 Unknown 137.229.89.249 09/03/03 15:09 Unknown 137.229.92.16 09/19/03 13:16 Patched 137.229.92.201 09/04/03 15:26 Patched 137.229.93.138 09/08/03 14:34 Patched 137.229.93.153 10/06/03 14:34 Patched 137.229.93.226 09/06/03 12:44 Patched 137.229.93.228 10/10/02 13:19 Actively Scanning 137.229.93.238 10/01/03 13:23 Patched 137.229.94.177 09/03/03 07:51 Patched 137.229.94.186 10/10/03 13:53 Actively Scanning 137.229.104.174 09/25/03 09:56 Patched 137.229.128.12 10/01/03 05:36 Patched 137.229.128.47 09/26/03 12:20 Patched 137.229.128.52 09/26/03 11:42 Patched 137.229.128.54 09/08/03 10:01 Patched 137.229.135.050 09/02/03 Patched 137.229.141.035 09/02/03 Patched 137.229.143.101 09/02/03 Unknown 137.229.144.112 08/23/03 21:56 Patched 137.229.144.188 09/02/03 Unknown 137.229.144.204 09/02/03 Unknown 137.229.144.208 11/01/03 12:51 Scanning 137.229.144.249 08/22/03 14:34 Port Disabled 137.229.146.156 09/02/03 Unknown 137.229.146.170 08/23/03 12:37 Unknown 137.229.146.188 11/01/03 11:18 Scanning 137.229.146.191 09/02/03 Unknown 137.229.146.196 11/01/03 14:29 Scanning 137.229.146.220 09/02/03 Unknown 137.229.147.23 08/24/03 12:21 Port Disabled 137.229.147.60 08/24/03 10:04 Patched 137.229.147.156 09/02/03 Unknown 137.229.147.165 08/22/03 14:34 Patched 137.229.147.180 08/22/03 14:35 Port Disabled 137.229.148.25 11/01/03 17:21 Scanning 137.229.148.76 11/01/03 11:32 Scanning 137.229.148.105 11/01/03 13:46 Scanning 137.229.149.027 09/02/03 Unknown 137.229.149.103 09/02/03 Unknown 137.229.150.52 08/22/03 16:05 Patched 137.229.150.61 09/02/03 Patched 137.229.150.66 11/01/03 11:02 Scanning 137.229.150.68 09/02/03 Port Disabled 137.229.150.84 08/23/03 17:10 Patched 137.229.150.108 09/02/03 Port Disabled 137.229.150.121 08/24/03 14:41 Port Disabled 137.229.150.124 08/23/03 21:09 Port Disabled 137.229.150.139 08/24/03 01:41 Patched 137.229.150.153 11/01/03 11:02 Scanning 137.229.150.164 09/02/03 Unknown 137.229.150.180 09/02/03 Patched 137.229.150.181 08/22/03 14:34 Patched 137.229.150.185 08/23/03 18:29 Port Disabled 137.229.150.191 08/24/03 11:37 Patched 137.229.150.193 08/24/03 14:54 Port Disabled 137.229.150.196 08/24/03 13:15 Patched 137.229.150.200 09/02/03 Patched 137.229.150.201 08/22/03 21:18 Unknown 137.229.150.226 11/01/03 13:26 Scanning 137.229.150.241 08/24/03 15:01 Patched 137.229.151.14 09/02/03 Port Disabled 137.229.151.27 09/02/03 Patched 137.229.151.33 09/02/03 Port Disabled 137.229.151.45 11/01/03 17:10 Scanning 137.229.151.52 09/02/03 Patched 137.229.151.78 08/24/03 17:10 Port Disabled 137.229.151.112 09/02/03 Patched 137.229.151.149 09/02/03 Port Disabled 137.229.151.169 11/01/03 11:12 Scanning 137.229.151.187 08/24/03 16:53 Unknown 137.229.151.198 09/02/03 Unknown 137.229.151.204 09/02/03 Port Disabled 137.229.151.235 09/02/03 Notified 10/28 137.229.151.249 08/24/03 07:29 Patched 137.229.151.252 08/24/03 14:07 Port Disabled 137.229.152.098 09/02/03 Unknown 137.229.152.109 08/24/03 16:54 Patched 137.229.152.111 09/02/03 Patched 137.229.152.127 09/02/03 Unknown 137.229.152.131 09/02/03 Unknown 137.229.152.132 08/24/03 12:23 Patched 137.229.152.135 11/01/03 10:59 Scanning 137.229.152.137 09/02/03 Port Disabled 137.229.152.139 08/22/03 19:09 Patched 137.229.152.141 09/02/03 Patched 137.229.152.147 08/23/03 17:28 Patched 137.229.152.148 08/23/03 16:08 Patched 137.229.152.159 08/23/03 20:01 Patched 137.229.152.164 08/22/03 16:11 Patched 137.229.152.166 11/01/03 11:32 Scanning 137.229.152.168 08/22/03 16:54 Patched 137.229.152.180 08/23/03 21:00 Patched 137.229.152.183 09/02/03 Patched 137.229.152.186 11/01/03 13:37 Scanning 137.229.152.190 08/23/03 11:11 Port Disabled 137.229.152.192 11/01/03 12:41 Scanning 137.229.152.193 08/22/03 16:27 Unknown 137.229.152.194 09/02/03 Port Disabled 137.229.152.198 08/24/03 04:50 Unknown 137.229.152.200 08/24/03 12:16 Unknown 137.229.152.207 09/02/03 Port Disabled 137.229.152.209 11/01/03 11:08 Scanning 137.229.152.211 09/02/03 Unknown 137.229.152.222 09/02/03 Unknown 137.229.152.237 09/02/03 Unknown 137.229.152.241 08/22/03 14:33 Patched 137.229.152.242 08/23/03 19:11 Patched 137.229.153.11 08/24/03 14:27 Patched 137.229.153.25 08/23/03 16:01 Port Disabled 137.229.153.38 09/02/03 Port Disabled 137.229.153.44 09/02/03 Patched 137.229.153.45 11/01/03 11:05 Scanning 137.229.153.55 08/22/03 14:35 Patched 137.229.153.67 08/23/03 22:21 Port Disabled 137.229.153.79 09/02/03 Port Disabled 137.229.153.103 08/23/03 16:21 Patched 137.229.153.123 08/22/03 14:34 Unknown 137.229.153.140 09/02/03 Unknown 137.229.153.147 08/23/03 18:48 Patched 137.229.153.155 11/01/03 16:50 Scanning 137.229.153.163 11/01/03 11:44 Scanning 137.229.153.178 08/23/03 13:34 Patched 137.229.153.188 08/22/03 14:22 Unknown 137.229.153.204 11/01/03 10:55 Scanning 137.229.153.227 09/02/03 Port Disabled 137.229.153.232 09/02/03 Patched 137.229.153.233 09/02/03 Port Disabled 137.229.153.236 09/02/03 Patched 137.229.153.240 09/02/03 Unknown 137.229.154.109 09/02/03 Patched 137.229.154.111 11/01/03 11:54 Scanning 137.229.154.118 08/22/03 14.34 Patched 137.229.154.141 09/02/03 Port Disabled 137.229.154.142 11/01/03 14:10 Scanning 137.229.154.147 08/22/03 18:36 Patched 137.229.154.159 08/23/03 19:49 Port Disabled 137.229.154.166 08/22/03 14.34 Port Disabled 137.229.154.167 11/01/03 11:32 Scanning 137.229.154.174 09/02/03 Unknown 137.229.154.207 09/02/03 Unknown 137.229.154.214 08/24/03 09:14 Patched 137.229.154.217 08/24/03 05:01 Port Disabled 137.229.154.224 08/22/03 20:31 Port Disabled 137.229.154.230 08/23/03 22:10 Patched 137.229.154.232 09/02/03 Patched 137.229.154.233 11/01/03 12:23 Scanning 137.229.155.3 11/01/03 14:01 Scanning 137.229.155.4 09/02/03 Port Disabled 137.229.155.6 11/01/03 13:22 Scanning 137.229.155.12 08/24/03 16:27 Port Disabled 137.229.155.32 09/02/03 Port Disabled 137.229.155.40 08/22/03 20:26 Patched 137.229.155.41 09/02/03 Unknown 137.229.155.48 08/24/03 14:17 Port Disabled 137.229.155.52 11/01/03 11:49 Scanning 137.229.155.66 08/22/03 18:36 Port Disabled 137.229.155.68 11/01/03 11:08 Scanning 137.229.155.76 09/02/03 Unknown 137.229.155.84 08/24/03 12:32 Port Disabled 137.229.155.92 08/24/03 13:42 Patched 137.229.155.119 09/02/03 Patched 137.229.155.130 08/24/03 08:30 Patched 137.229.155.138 11/01/03 11:28 Scanning 137.229.155.148 11/01/03 11:21 Scanning 137.229.155.151 11/01/03 14:13 Scanning 137.229.155.153 08/23/03 18:17 Patched 137.229.155.163 11/01/03 14:19 Scanning 137.229.155.181 08/23/03 12:56 Port Disabled 137.229.155.204 11/01/03 12:59 Scanning 137.229.155.208 11/01/03 11:19 Scanning 137.229.155.220 08/22/03 15:56 Patched 137.229.155.224 09/02/03 Port Disabled 137.229.156.027 09/02/03 Unknown 137.229.156.194 09/02/03 Port Disabled 137.229.157.188 09/02/03 Port Disabled 137.229.158.109 08/24/03 08:48 Patched 137.229.158.123 09/02/03 Port Disabled 137.229.158.137 09/02/03 Port Disabled 137.229.158.144 09/02/03 Patched 137.229.158.154 09/02/03 Patched 137.229.158.157 09/02/03 Port Disabled 137.229.158.160 09/02/03 Unknown 137.229.158.174 08/24/03 11:36 Port Disabled 137.229.158.194 09/02/03 Patched 137.229.158.203 09/02/03 Port Disabled 137.229.158.207 09/02/03 Patched 137.229.158.218 09/02/03 Unknown 137.229.158.237 09/02/03 Patched 137.229.158.245 08/24/03 10:31 Patched 137.229.159.025 09/02/03 Port Disabled 137.229.159.050 09/02/03 Unknown 137.229.159.053 09/02/03 Port Disabled 137.229.159.054 09/02/03 Port Disabled 137.229.159.067 09/02/03 Patched 137.229.159.089 09/02/03 Patched 137.229.159.095 09/02/03 Patched 137.229.159.127 09/02/03 Port Disabled 137.229.159.137 09/02/03 Unknown 137.229.159.210 09/02/03 Patched 137.229.159.214 09/02/03 Patched 137.229.159.217 09/02/03 Port Disabled 137.229.159.241 09/02/03 Unknown 137.229.159.243 08/24/03 08:48 Port Disabled 137.229.159.247 08/24/03 08:48 Port Disabled 137.229.161.7 08/22/03 14:33 Patched 137.229.161.147 09/02/03 Patched 137.229.164.116 09/02/03 Unknown 137.229.164.145 11/01/03 10:34 Scanning 137.229.164.167 09/02/03 Unknown 137.229.164.203 08/22/03 21:08 Port Disabled 137.229.165.72 08/22/03 21:11 Port Disabled 137.229.165.109 09/02/03 Unknown 137.229.165.134 09/02/03 Unknown 137.229.165.247 09/02/03 Patched 137.229.166.127 09/02/03 Port Disabled 137.229.166.200 09/02/03 Unknown 137.229.166.211 09/02/03 Unknown 137.229.167.001 09/02/03 Unknown 137.229.167.004 09/02/03 Unknown 137.229.168.109 09/02/03 Patched 137.229.168.166 08/24/03 04:20 Patched 137.229.168.176 08/24/03 04:12 Port Disabled 137.229.169.12 09/02/03 Port Disabled 137.229.169.17 08/24/03 04:24 Port Disabled 137.229.169.25 09/02/03 Patched 137.229.169.37 08/23/03 12:23 Port Disabled 137.229.169.224 09/02/03 Port Disabled 137.229.169.234 08/24/03 04:16 Port Disabled 137.229.171.150 09/02/03 Unknown 137.229.177.127 09/02/03 Patched 137.229.177.150 09/02/03 Unknown 137.229.177.163 09/02/03 Patched 137.229.177.220 11/01/03 11:26 Scanning 137.229.178.155 08/22/03 14:34 Unknown 137.229.178.191 11/01/03 10:39 Scanning 137.229.178.196 09/02/03 Port Disabled 137.229.178.248 08/22/03 15:08 Patched 137.229.179.38 09/02/03 Patched 137.229.179.53 09/02/03 Port Disabled 137.229.179.64 09/02/03 Unknown 137.229.179.97 11/01/03 11:31 Scanning 137.229.179.117 11/01/03 11:08 Scanning 137.229.179.133 09/02/03 Unknown 137.229.179.136 09/02/03 Patched 137.229.179.217 09/02/03 Unknown 137.229.179.226 09/02/03 Port Disabled 137.229.179.247 09/02/03 Patched 137.229.179.249 11/01/03 15:07 Scanning 137.229.180.142 09/02/03 Patched 137.229.180.199 11/01/03 11:04 Scanning 137.229.180.203 11/01/03 10:49 Scanning 137.229.181.21 09/02/03 Unknown 137.229.181.28 08/22/03 14:34 Patched 137.229.181.36 09/02/03 Unknown 137.229.181.55 09/02/03 Unknown 137.229.181.95 09/02/03 Unknown 137.229.181.112 09/02/03 Patched 137.229.181.123 09/02/03 Patched 137.229.183.084 09/02/03 Unknown 137.229.183.194 09/02/03 Patched 137.229.184.118 08/24/03 13:53 Patched 137.229.184.121 08/24/03 14:36 Patched 137.229.184.142 09/02/03 Patched 137.229.184.168 09/02/03 Patched 137.229.184.200 08/24/03 15:05 Patched 137.229.184.203 11/01/03 12:49 Scanning 137.229.184.208 09/02/03 Patched 137.229.184.224 08/24/03 15:29 Patched 137.229.184.230 09/02/03 Unknown 137.229.184.254 08/24/03 16:49 Patched 137.229.185.086 09/02/03 Patched 137.229.185.104 09/02/03 Patched 137.229.185.116 09/02/03 Unknown 137.229.185.151 09/02/03 Patched 137.229.185.175 11/01/03 12:46 Scanning 137.229.185.222 09/02/03 Patched 137.229.185.239 08/24/03 15:19 Patched 137.229.189.94 08/22/03 15:57 Unknown 137.229.189.234 08/24/03 11:51 Unknown 137.229.190.44 08/22/03 14:35 Port Disabled 137.229.190.169 09/02/03 Port Disabled 137.229.191.110 09/02/03 Unknown 137.229.191.152 08/26/03 07:57 Port Disabled 137.229.192.23 09/09/03 13:04 Actively Scanning 137.229.192.24 09/09/03 18:17 Unknown 137.229.192.25 09/08/03 09:10 Unknown 137.229.192.26 09/10/03 17:57 Unknown 137.229.192.27 09/07/03 15:45 Unknown 137.229.192.28 09/07/03 18:22 Unknown 137.229.194.142 09/04/03 09:50 Unknown 137.229.194.156 09/05/03 08:43 Patched 137.229.195.129 08/28/03 15:20 Blocked 137.229.195.145 10/10/02 08:56 Blocked 137.229.195.152 10/03/03 17:05 Blocked 137.229.197.9 09/05/03 08:52 Patched 137.229.197.27 09/04/03 16:00 Patched 137.229.197.34 10/16/03 15:20 Patched 137.229.197.37 09/16/03 12:33 Patched 137.229.197.125 09/25/03 10:43 Blocked 137.229.197.133 09/09/03 08:41 Patched 137.229.197.215 10/16/03 15:20 Patched 137.229.197.241 10/13/03 09:46 Blocked 137.229.198.11 09/07/03 16:55 Unknown 137.229.198.13 10/06/03 10:04 Blocked 137.229.198.18 09/07/03 15:40 Patched 137.229.198.19 09/02/03 17:57 Patched 137.229.198.22 10/07/03 10:46 Patched 137.229.198.28 09/05/03 11:25 Patched 137.229.198.33 09/06/03 00:25 Patched 137.229.198.38 09/04/03 15:00 Patched 137.229.198.55 10/14/03 18:26 Blocked 137.229.198.87 10/14/03 14:49 Patched 137.229.198.120 10/23/03 17:54 Scanning 137.229.198.124 09/02/03 17:48 Patched 137.229.198.138 10/16/03 15:13 Blocked 137.229.198.149 09/03/03 16:09 Patched 137.229.198.153 09/04/03 17:41 Patched 137.229.198.161 09/03/03 11:16 Patched 137.229.198.172 09/10/03 14:16 Unknown 137.229.198.184 10/14/03 13:15 Blocked 137.229.198.190 10/28/03 13:51 Unknown 137.229.198.193 10/23/03 13:16 Patched 137.229.198.204 10/06/03 15:07 Blocked 137.229.198.208 09/04/03 13:41 Patched 137.229.198.209 09/27/03 16:02 Blocked 137.229.198.212 09/30/03 09:21 Patched 137.229.198.230 09/03/03 15:52 Unknown 137.229.198.232 10/01/03 16:26 Patched 137.229.198.238 11/06/03 16:10 Actively Scanning 137.229.198.240 09/30/03 12:49 Patched 137.229.198.245 09/18/03 18:45 Blocked 137.229.198.248 09/04/03 10:28 Blocked 137.229.199.2 09/11/03 16:54 Blocked 137.229.199.9 09/11/03 17:15 Blocked 137.229.199.12 09/03/03 14:31 Patched 137.229.199.23 09/27/03 17:00 Blocked 137.229.199.34 09/08/03 20:33 Unknown 137.229.199.36 09/23/03 12:37 Blocked 137.229.199.73 09/27/03 20:43 Blocked 137.229.199.82 09/04/03 14:53 Reinfected 10/14 137.229.199.89 11/13/03 15:19+ Blocked 137.229.200.137 08/29/03 17:20 Patched 137.229.200.146 08/31/03 18:09 Blocked 137.229.200.153 08/30/03 12:46 Patched 137.229.200.154 08/28/03 16:15 Patched 137.229.200.156 08/28/03 15:43 Patched 137.229.200.158 08/28/03 16:05 Patched 137.229.200.172 09/01/03 15:49 Patched 137.229.200.179 08/29/03 14:08 Patched 137.229.200.182 08/29/03 11:50 Patched 137.229.200.183 08/30/03 12:47 Unknown 137.229.200.195 08/28/03 20:50 Unknown 137.229.200.196 08/29/03 13:40 Unknown 137.229.200.198 08/29/03 16:18 Patched 137.229.200.199 08/30/03 04:37 Unknown 137.229.200.201 08/29/03 17:12 Patched 137.229.200.203 08/31/03 15:05 Unknown 137.229.200.204 08/30/03 12:37 Patched 137.229.200.212 08/30/03 14:05 Patched 137.229.200.214 08/30/03 15:17 Patched 137.229.200.215 08/31/03 18:56 Unknown 137.229.200.221 09/01/03 10:59 Patched 137.229.200.222 08/30/03 17:56 Patched 137.229.200.223 09/02/03 16:00 Unknown 137.229.203.4 10/01/03 12:52 Offline 137.229.203.80 10/29/03 16:46 Actively Scanning 137.229.203.84 10/14/03 14:38 Blocked 137.229.203.91 09/10/03 16:36 Blocked 137.229.230.11 bfwms 08/22/03 18:07* Patched 137.229.239.69 10/30/03 13:52 Patched 137.229.242.170 10/13/03 00:12 Patched 137.229.242.252 10/23/03 10:17 Patched 137.229.244.99 11/04/03 16:24 Patched 137.229.244.176 09/29/03 04:44 Patched 137.229.247.5 asndf 10/04/03 18:52* Notified 10/04 137.229.247.5 asalb9 10/20/03 19:27* Notified 10/21,25,06,07 137.229.247.8 anjkm 11/02/03 23:18* Patched 11/05 137.229.247.11 astmm7 10/01/03 19:48* Notified 10/01,14,03 137.229.247.11 asslb35 10/02/03 16:53* Notified 10/02,04,27,28 137.229.247.16 asapl2 09/06/03 10:29* Notified 09/06,09,23,26 137.229.247.17 anmtw1 09/06/03 09:28* Notified 09/06,09 137.229.247.20 asbmd5 09/03/03 12:36* Notified 09/05,23,30,09 137.229.247.24 asink1 09/25/03 23:04* Notified 09/26,02,04 137.229.247.26 ashgh1 09/05/03 17:23* Patched 137.229.247.26 asahb3 10/07/03 10:28* Notified 10/07,09,10 137.229.247.29 asjmh23 10/07/03 11:59* Notified 10/07,10,14,18 137.229.247.33 asvsb2 10/17/03 14:32* Notified 10/17,25,05,06 137.229.247.34 asjrc19 09/02/03 06:09* Notified 09/04,05,06 137.229.247.38 asjfc2 09/05/03 10:50* Notified 09/05,09 137.229.247.44 ascdf4 11/03/03 13:58* Notified 11/03,04,05,06 137.229.247.46 asett 10/01/03 16:36* Notified 10/01,02,04 137.229.247.48 asccw3 09/04/03 13:41* Patched 10/13 137.229.247.52 andjr 10/01/03 19:31* Patched 137.229.247.54 asavk3 10/26/03 23:59* Notified 10/27 137.229.247.62 afla 10/04/03 09:35* Patched 10/16. 137.229.247.83 asdww2 09/05/03 10:23* Notified 09/05,06,17,31 137.229.247.83 andnh 11/16/03 22:24*+ Notified 11/17 137.229.247.86 asbla11 09/09/03 13:33* Notified 09/09 137.229.247.89 asbav2 09/01/03 16:16* Notified 09/05,06 137.229.247.92 asavk5 09/18/03 12:30* Notified 09/18,04,14 137.229.247.92 asbll8 10/10/03 11:57* Notified 10/10,14,17,18 137.229.247.95 afwps 09/02/03 09:12* Account Disabled 137.229.247.97 asmis2 09/02/03 09:54* Reinfected 10/20 137.229.247.106 ankpv 10/20/03 19:19* Notified 10/21 137.229.247.108 anmen 09/02/03 10:05* Patched 137.229.247.111 asjjd19 09/25/03 11:27* Patched 09/28 12:57 137.229.247.111 anvms 09/25/03 20:35* Notified 09/26,04,07,09 137.229.247.115 anmam 09/01/03 14:32* Notified 09/05,06,09,18 137.229.247.119 asjdm28 09/03/03 20:42* Patched 137.229.247.121 ascjs18 09/18/03 10:28* Notified 09/18 137.229.247.124 asdec1 09/23/03 09:23* Reinfected 09/25 137.229.247.124 ascos 11/05/03 03:17* Notified 11/05,10 137.229.247.125 asbsf2 09/05/03 10:19* Notified 09/05,06,09,18 137.229.247.129 askrh5 09/09/03 04:32* Notified 09/09,11,15,18 137.229.247.129 asch10 10/20/03 20:14* Notified 10/21,25,27,28 137.229.247.131 aslev2 09/23/03 17:11* Notified 09/23 137.229.247.136 asnab12 10/02/03 10:05* Notified 10/02,04 137.229.247.138 asbah16 10/20/03 17:54* Notified 10/21 137.229.247.140 asamj10 09/05/03 14:38* Notified 09/05,06 137.229.247.145 asseb11 10/09/03 15:48* Notified 10/09 137.229.247.146 asnje6 10/02/03 15:47* Patched 10/28 137.229.247.146 afgrc 10/20/03 22:04* Notified 10/21 137.229.247.147 asdlr3 10/14/03 17:24* Patched 10/27 137.229.247.149 askdb 09/02/03 13:04* Unknown 137.229.247.155 afcac 10/10/03 09:45* Patched 10/13 137.229.247.158 aseat8 09/06/03 17:20* Notified 09/06,09,18,26 137.229.247.156 psya 09/15/03 09:23* Notified 09/15 137.229.247.170 fschd 10/10/03 12:16* Notified 10/10 137.229.247.171 ascjk19 09/02/03 11:26* Unknown 137.229.247.172 asbgs3 10/27/03 19:00* Notified 10/28 137.229.247.178 asral11 08/31/03 05:27* Notified 09/04 137.229.247.186 vsslh2 09/03/03 14:12* Notified 09/04,05,06,09 137.229.247.187 asjls6 10/17/03 15:55* Notified 10/17,28,31,03 137.229.247.188 fnlmm 09/04/03 10:28* Notified 09/04,05 137.229.247.197 ashsh 10/10/03 15:59* Notified 10/10,17,21,28 137.229.247.200 asjtb3 09/06/03 15:23* Notified 09/06,01,21,13 137.229.247.204 anjki 09/25/03 09:34* Notified 09/26,01,03,14 137.229.247.204 andel 11/14/03 10:51*+ Notified 11/14,17 137.229.247.210 afcpf 09/05/03 20:45* Notified 09/05 137.229.247.212 anadj 09/23/03 18:45* Notified 09/23 137.229.247.215 askmp8 09/25/03 19:06* Notified 09/26,01,02,04 137.229.247.216 asbmd5 09/02/03 11:48* Notified 09/04,09,18 137.229.247.219 asmmc13 09/01/03 07:35* Notified 09/15 137.229.247.219 aslrp3 10/25/03 13:40* Patched 10/30 137.229.247.223 aseah17 09/03/03 20:15* Patched 137.229.247.223 asks16 09/09/03 12:14* Notified 09/09,11,18,23 137.229.247.224 asdtn2 09/03/03 12:05* Unknown 137.229.247.225 ismn 08/28/03 18:14* Patched 137.229.247.232 asmak3 10/07/03 11:26* Notified 10/07,10 137.229.247.234 anfrr 11/01/03 12:05* Notified 11/01,05 137.229.247.235 asnwg3 09/02/03 12:45* Patched 137.229.247.236 ahwam 11/12/03 09:18*+aywwami Notified 11/13,14 137.229.247.240 assjr13 09/04/03 11:34* Notified 09/04,09,11,18 137.229.247.241 ahtest 10/26/03 07:58* Notified 10/27,29 137.229.247.253 asbjl15 09/15/03 10:23* Patched 137.229.248.7 fstle2 10/01/03 19:51* Notified 10/01,04 137.229.248.11 fsmab17 10/20/03 23:30* Notified 10/21 137.229.248.11 fsrdm 10/06/03 22:49* Notified 11/07 137.229.248.14 ftxf 10/07/03 13:45* Patched 10/07 137.229.248.16 fsnkk 10/07/03 09:17* Notified 10/07 137.229.248.16 ftana 10/10/03 01:47* Notified 11/10 137.229.248.18 fsrks1 10/20/03 21:47* Notified 10/21 137.229.248.19 fsslm11 09/03/03 15:10* Notified 09/04 137.229.248.21 ffadm 09/01/03 11:31* Unknown 137.229.248.20 fsces 09/09/03 20:29* Patched 137.229.248.23 ftkj 09/01/03 11:14* Patched 137.229.248.24 fsmgb1 09/06/03 15:59* Notified 09/06 137.229.248.28 fscar1 10/10/03 12:24* Notified 10/10 137.229.248.40 ffljh1 09/18/03 11:33* Notified 09/18 137.229.248.41 ksbaz 09/30/03 09:26* Patched 10/03 137.229.248.41 fssnf 10/07/03 08:29* Notified 10/07 137.229.248.41 ftsej 10/07/03 12:46* Patched 10/11 137.229.248.44 fskcv 09/04/03 17:58* Patched 137.229.248.45 ftaae 10/01/03 10:30* Notified 10/01,02 137.229.248.46 fshi 10/04/03 11:00* Patched 10/05 137.229.248.48 ffdkr 08/28/03 15:47* Unknown 137.229.248.49 pfcmh 10/04/03 11:06* (UAA) Notified 10/04 137.229.248.56 fnjav 10/04/03 16:18* Notified 10/04 137.229.248.56 fsap2 10/20/03 21:02* Notified 10/21 137.229.248.57 fsbjs 09/05/03 07:09* Notified 09/05 137.229.248.62 fscjb5 10/10/03 07:35* Notified 10/10 137.229.248.63 fsimb1 09/25/03 17:17* Notified 09/26 137.229.248.64 fsdoh 09/15/03 09:45* Patched 137.229.248.72 ffys 10/01/03 19:09* Notified 10/01,04 137.229.248.73 fsrap7 11/06/03 12:43* Notified 11/06,07,10 137.229.248.75 fstlc8 09/15/03 09:19* Patched 137.229.248.80 fstma3 10/01/03 12:07* Notified 10/01,18 137.229.248.82 kfdmd 10/04/03 13:57* Patched 10/15 137.229.248.83 fnjz 09/03/03 11:22* Notified 09/04,26 137.229.248.84 fnmdm 10/02/03 18:33* Notified 10/02 137.229.248.86 fsjkw 09/15/03 13:00* Patched 137.229.248.92 fslrb3 09/15/03 10:33* Notified 09/15,18 137.229.248.93 snrad 09/01/03 15:51* Patched 137.229.248.100 fnlaw 09/06/03 14:08* Notified 09/06,11 137.229.248.100 fsneh 10/18/03 14:21* Notified 10/18 137.229.248.103 fsdef 10/04/03 09:05* Patched 10/05 137.229.248.105 fsjcl 09/23/03 18:58* Notified 09/23 137.229.248.109 ffssm1 09/11/03 17:51* Patched 137.229.248.110 astlp9 09/18/03 17:02* Notified 09/18 137.229.248.111 fnjmb 09/25/03 04:52* Notified 09/26,30,01,02 137.229.248.112 fscka1 09/06/03 14:28* Notified 09/06,26 137.229.248.113 fscck1 09/09/03 18:56* Notified 09/09 137.229.248.115 fslas1 10/27/03 17:41* Notified 10/28 137.229.248.118 fslcy 09/15/03 07:46* Patched 137.229.248.120 fszsc 10/26/03 20:40* Notified 10/27,28 137.229.248.121 fsrlm7 09/23/03 17:07* Notified 09/23 137.229.248.123 fsdrc 10/20/03 06:20* Notified 10/21,25,27 137.229.248.124 fspjd 09/09/03 14:08* Notified 09/09,11 137.229.248.127 fsmjl 09/18/03 07:09* Notified 09/18 137.229.248.127 fsafr 09/30/03 05:34* Notified 09/30,01 137.229.248.129 knkhp 10/04/03 13:59* Patched 10/15 137.229.248.130 asjlg40 10/26/03 22:16* Patched 10/29 137.229.248.136 fsjka3 10/09/03 11:05* Notified 10/09,10 137.229.248.138 fsajm10 09/30/03 11:12* Notified 09/30,01 137.229.248.141 fsjar13 10/04/03 16:40* Notified 10/04,07 137.229.248.141 fsbjg 11/13/03 09:54*+ Notified 11/13 137.229.248.143 fnjrb2 10/27/03 20:27* Notified 10/28 137.229.248.145 fsege 09/15/03 15:54* Notified 09/15,18 137.229.248.145 snjep 10/07/03 10:34* Patched 10/14 137.229.248.148 fswcr1 09/18/03 16:53* Reinfected 10/04 137.229.248.150 ffwz 10/04/03 15:07* Notified 10/04 137.229.248.152 fsjlt6 10/07/03 12:02* Notified 10/07 137.229.248.152 fnrda 11/03/03 20:23* Notified 11/03 137.229.248.157 fsreb 09/15/03 13:49* Patched 137.229.248.159 fsmdb4 09/06/03 04:32* Notified 09/06,09,17,18 137.229.248.161 fnsfg 10/14/03 14:03* Notified 10/14 137.229.248.161 fncjl 10/26/03 18:03* Patched 10/28 137.229.248.165 fstlw4 10/04/03 12:08* Patched 10/13 137.229.248.166 fsjat2 10/14/03 18:13* Patched 10/15 137.229.248.169 ffefh 09/03/03 12:52* Patched 137.229.248.169 fsssj 10/04/03 16:59* Notified 10/04 137.229.248.169 fsjlk5 09/18/03 17:26* Patched 137.229.248.176 fssp 11/01/03 02:42* Notified 11/01 137.229.248.181 pslrl 10/26/03 22:33* (UAA) Notified 10/27,28 137.229.248.182 fsrej 09/04/03 12:35* Patched 137.229.248.184 fsovg1 09/05/03 20:47* Patched 137.229.248.185 fstww 09/05/03 11:00* Patched 137.229.248.185 fncwp 10/26/03 17:17* Notified 10/27,28 137.229.248.186 issmp5 09/09/03 13:16* Patched 09/30 137.229.248.189 ftkcp 10/01/03 19:02* Notified 10/01 137.229.248.196 asddj2 10/09/03 10:46* Notified 10/10 137.229.248.200 ffjpl 09/25/03 21:20* Notified 09/26 137.229.248.215 fftkg 10/01/03 15:36* Notified 10/01,02 137.229.248.216 fstbg 09/23/03 17:56* Patched 137.229.248.217 ahim 10/20/03 19:38* Notified 10/21 137.229.248.219 fslx 09/04/03 13:48* Patched 137.229.248.219 fsjwd 09/18/03 12:52* Notified 09/18 137.229.248.219 ftyq 10/04/03 20:34* Notified 10/04 137.229.248.230 fnmas1 09/03/03 10:01* Cleaned 137.229.248.230 fncsc1 11/16/03 22:52*+ Notified 11/17 137.229.248.233 fsbit 10/09/03 09:19* Notified 10/09,10 137.229.248.235 fsegh 09/03/03 11:40* Patched 137.229.248.239 fscjb3 09/23/03 17:56* Notified 09/23 137.229.248.242 kfcal 10/01/03 11:35* Notified 10/01,04 137.229.248.243 fsfes 10/07/03 12:20* Notified 10/08 137.229.248.251 ffmjs 09/25/03 20:28* Notified 09/26 137.229.249.14 tsmat4 10/14/03 14:53* Notified 10/14,21,03 137.229.249.23 jsmdm7 09/04/03 11:41* Patched 137.229.249.31 jsmns 09/15/03 11:35* Notified 09/15,01,02,04 137.229.249.38 jsmle1 09/15/03 14:08* Patched 137.229.249.42 jssjm2 09/18/03 10:32* Patched 137.229.249.57 jsjai2 09/25/03 21:10* Notified 09/26,07 137.229.249.83 jswaa 11/12/03 07:00*+ Notified 11/13 137.229.249.121 jslnh 10/07/03 07:07* Notified 10/07 137.229.249.171 ffmss 10/02/03 11:33* Patched 10/07 137.229.252.148 10/10/03 14:44 Patched 137.229.252.177 09/26/03 09:19 Patched 137.229.252.151 10/13/03 11:36 Patched Total Count: 93 as of 08/24/03 17:40:00 93 as of 08/25/03 20:34:40 94 as of 08/26/03 19:10:00 125 as of 08/27/03 21:07:10 154 as of 08/28/03 21:20:05 204 as of 08/31/03 20:01:40 260 as of 09/01/03 20:01:40 462 as of 09/02/03 21:05:00 501 as of 09/03/03 22:05:00 540 as of 09/04/03 20:27:03 592 as of 09/05/03 22:55:00 622 as of 09/06/03 22:09:30 660 as of 09/08/03 18:07:50 698 as of 09/09/03 21:28:45 710 as of 09/10/03 20:30:00 729 as of 09/11/03 21:28:00 746 as of 09/15/03 17:21:40 754 as of 09/16/03 20:04:00 771 as of 09/18/03 21:42:55 809 as of 09/22/03 17:49:02 832 as of 09/23/03 22:00:32 838 as of 09/25/03 19:30:18 851 as of 09/26/03 20:12:55 863 as of 09/27/03 21:31:35 870 as of 09/29/03 11:56:00 907 as of 09/30/03 19:02:50 921 as of 10/01/03 22:50:50 927 as of 10/02/03 21:35:40 942 as of 10/04/03 22:59:45 957 as of 10/07/03 20:25:25 964 as of 10/09/03 18:57:09 977 as of 10/10/03 20:20:09 990 as of 10/14/03 21:20:22 1000 as of 10/17/03 19:20:35 1016 as of 10/21/03 18:19:43 1031 as of 10/27/03 12:00:00 1087 as of 11/01/03 19:00:26 1102 as of 11/10/03 13:34:38 1119 as of 11/17/03 19:07:00 Statewide 23 UAA 352 UAF 644 UAS 100 * Dialup IP. + New infections RESOLUTION: Notified UA CIRT. Reported By: Chirk Chu Chief Security Officer University of Alaska c3chu@alaska.edu (907) 474-6290 PGP Key: http://pgp.mit.edu/ http://www.keyserver.net/en/ ID 0x6C17D2CB -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.8 iQA/AwUBP7mbeb9Yt2hsF9LLEQLPiwCfUxnYJiwLUyfdTJb05RzQ+16oRtgAnj+r owAqJ+dmnhLPxPppBIhG2Btb =RECp -----END PGP SIGNATURE-----