 (8.9.1/8.9.1) with ESMTP id PAA12027	for ; Fri, 19 Sep 2003 15:59:49 -0700 (PDT) Received: from ucsb.edu (hub.ucsb.edu [128.111.24.40])	by charm.physics.ucsb.edu (8.9.3/8.9.3) with ESMTP id PAA00633	for ; Fri, 19 Sep 2003 15:59:49 -0700 Received: from localhost ([127.0.0.1] helo=hub.ucsb.edu)	by ucsb.edu with esmtp  id 1A0UE9-0005AU-8u; Fri, 19 Sep 2003 15:59:49 -0700 Received: from hub.ucsb.edu ([128.111.24.40] helo=smtp.ucsb.edu)	by ucsb.edu with esmtp TLSv1:AES256-SHA:256 id 1A0UE5-0005AJ-NY;	Fri, 19 Sep 2003 15:59:45 -0700 Received: from security3.oit.ucsb.edu ([128.111.12.28])	by smtp.ucsb.edu with asmtp TLSv1:DES-CBC3-SHA:168 id 1A0UE5-0005AF-IR;	Fri, 19 Sep 2003 15:59:45 -0700 Date: Fri, 19 Sep 2003 15:59:45 -0700 From: E. Todd Atkins  To: security-microsoft@ucsb.edu, csf@ucsb.edu Message-ID: <154880000.1064012385@abc.oit.ucsb.edu> X-Mailer: Mulberry/3.0.3 (Linux/x86) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; FORMAT=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Subject: [CSF] Blocked and RPCSS Vulnerable Hosts X-BeenThere: csf@ucsb.edu X-Mailman-Version: 2.1.2 Precedence: list Reply-To: UCSB Network Security Coordinator  List-Id: Computer Support Forum   List-Unsubscribe: ,	 List-Archive:  List-Post:  List-Help:  List-Subscribe: ,	 Sender: csf-bounces@ucsb.edu Errors-To: csf-bounces@ucsb.edu X-Scanner: exiscan for exim4 (http://duncanthrax.net/exiscan/) *1A0UE9-0005AU-8u*g9kXKXdCQpc* Hello, Here is what you need to do if your host is in the list: 1. Make sure that the host has been completely cleaned up. Unless the host  is completely rebuilt, please make sure that the host is not running any  rogue IRC bots, FTP servers, VNC, etc. Tools like "tcpview" and "procexp"  from www.sysinternals.com should help to locate any such services. 2. Send an email message to security@ucsb.edu to inform us that the host is now safe to be connected with the internet. When referring to multiple IP addresses, please list the IP addresses on separate lines. 3. If you find any rogue services running, please include the type of  service and the port that it was using. Now, here are the lists... *** Filtered Hosts *** 128.111.9.125   orb125.itp.ucsb.edu 128.111.9.126   orb126.itp.ucsb.edu 128.111.9.211   dhcp211.itp.ucsb.edu 128.111.9.220   dhcp220.itp.ucsb.edu 128.111.9.230   dhcp230.itp.ucsb.edu 128.111.9.241   dhcp241.itp.ucsb.edu 128.111.29.20   meppc1.engr.ucsb.edu 128.111.34.65   pfrws-1.engr.ucsb.edu 128.111.35.220  ecipc045.engr.ucsb.edu 128.111.43.224  atlas.cs.ucsb.edu 128.111.69.54   ilab-04.cs.ucsb.edu 128.111.74.158  nakamuralab8.materials.ucsb.edu 128.111.74.249 128.111.77.36   luna.crss.ucsb.edu 128.111.77.77   genetest.crss.ucsb.edu 128.111.77.82   theomac.crss.ucsb.edu 128.111.79.35   sediment.mee.ucsb.edu 128.111.81.36   pulse.ucen.ucsb.edu 128.111.82.13   joshtest.chemengr.ucsb.edu 128.111.82.14   connerjs.chemengr.ucsb.edu 128.111.82.129  calimero.chemengr.ucsb.edu 128.111.82.132  seppia.chemengr.ucsb.edu 128.111.82.133  codavinci.chemengr.ucsb.edu 128.111.82.215  theofan.chemengr.ucsb.edu 128.111.83.43   dh83043.chemengr.ucsb.edu 128.111.83.134  cobra.chemengr.ucsb.edu 128.111.83.137  krait.chemengr.ucsb.edu 128.111.83.242  marina.chemengr.ucsb.edu 128.111.103.21  otter.opl.ucsb.edu 128.111.104.155 euphrates.geog.ucsb.edu 128.111.106.15  zulu2.geog.ucsb.edu 128.111.106.101 olympia.geog.ucsb.edu 128.111.106.121 slave.geog.ucsb.edu 128.111.106.163 alexlaptop.geog.ucsb.edu 128.111.108.54  host108-54.lsdepts.ucsb.edu 128.111.108.108 host108-108.lsdepts.ucsb.edu 128.111.108.128 host108-128.lsdepts.ucsb.edu 128.111.108.158 host108-158.lsdepts.ucsb.edu 128.111.108.193 host108-193.lsdepts.ucsb.edu 128.111.108.219 host108-219.lsdepts.ucsb.edu 128.111.120.25  ip25.lmri.ucsb.edu 128.111.138.160 128.111.138.171 128.111.138.174 128.111.164.209 turtle.mee.ucsb.edu 128.111.165.27  host165-27.lsdepts.ucsb.edu 128.111.166.152 dhcp152.authnet.ucsb.edu 128.111.220.82  dhcp82.nceas.ucsb.edu 128.111.221.26  igertpc.mat.ucsb.edu 128.111.229.251 128.111.229.252 128.111.234.43  ppp3.ncgia.ucsb.edu 128.111.247.62 128.111.247.63 *** Unpatched hosts *** 128.111.9.222   RPCSS Vulnerable - [KB823980 Vulnerable, KB824146  Vulnerable] 128.111.20.78   RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.20.90   RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.20.250  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.29.125  RPCSS Vulnerable - [KB823980 Vulnerable, KB824146  Vulnerable] 128.111.30.148  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.30.149  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.30.150  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.30.151  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.30.152  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.30.153  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.30.249  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.30.250  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.30.252  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.31.166  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.32.224  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.32.232  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.33.252  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.36.81   RPCSS Vulnerable - [KB823980 Vulnerable, KB824146  Vulnerable] 128.111.37.181  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.37.192  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.37.209  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.37.228  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.38.205  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.38.227  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.38.238  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.38.245  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.39.166  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.39.169  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.39.170  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.39.171  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.39.172  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.39.215  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.39.220  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.39.238  RPCSS Vulnerable - [KB823980 Vulnerable, KB824146  Vulnerable] 128.111.39.242  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.40.212  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.40.215  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.50.92   RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.54.9    RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.56.158  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.57.22   RPCSS Vulnerable - [KB823980 Vulnerable, KB824146  Vulnerable] 128.111.57.44   RPCSS Vulnerable - [KB823980 Vulnerable, KB824146  Vulnerable] 128.111.57.80   RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.57.185  RPCSS Vulnerable - [KB823980 Vulnerable, KB824146  Vulnerable] 128.111.57.204  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.68.236  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.71.124  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.71.126  RPCSS Vulnerable - [KB823980 Vulnerable, KB824146  Vulnerable] 128.111.71.184  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.71.219  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.71.240  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.72.25   RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.72.143  RPCSS Vulnerable - [KB823980 Vulnerable, KB824146  Vulnerable] 128.111.73.70   RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.73.125  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.73.245  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.75.168  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.75.234  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.75.242  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.75.250  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.78.21   RPCSS Vulnerable - [KB823980 Vulnerable, KB824146  Vulnerable] 128.111.78.60   RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.79.11   RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.79.20   RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.82.63   RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.82.140  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.83.40   RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.83.60   RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.83.135  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.92.198  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.92.200  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.92.202  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.101.26  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.103.26  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.103.28  RPCSS Vulnerable - [KB823980 Vulnerable, KB824146  Vulnerable] 128.111.104.14  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.104.15  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.104.41  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.104.46  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.104.80  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.104.83  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.104.181 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.106.6   RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.106.11  RPCSS Vulnerable - [KB823980 Vulnerable, KB824146  Vulnerable] 128.111.108.65  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.109.65  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.132.97  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.132.100 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.161.3   RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.164.79  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.164.193 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.164.202 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.164.227 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.180.113 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.180.149 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.180.182 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.180.191 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.180.193 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.180.213 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.180.218 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.180.222 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.180.233 RPCSS Vulnerable - [KB823980 Vulnerable, KB824146  Vulnerable] 128.111.180.236 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.180.244 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.180.247 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.180.248 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.181.204 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.181.205 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.181.233 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.181.235 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.181.243 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.182.118 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.182.195 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.182.198 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.182.204 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.182.211 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.182.212 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.182.216 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.182.228 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.182.230 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.183.219 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.183.221 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.183.229 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.183.254 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.184.252 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.185.75  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.192.29  RPCSS Vulnerable - [KB823980 Vulnerable, KB824146  Vulnerable] 128.111.192.37  RPCSS Vulnerable - [KB823980 Vulnerable, KB824146  Vulnerable] 128.111.192.120 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.197.220 RPCSS Vulnerable - [KB823980 Vulnerable, KB824146  Vulnerable] 128.111.198.233 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.220.72  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.220.92  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.221.42  RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.234.23  RPCSS Vulnerable - [KB823980 Vulnerable, KB824146  Vulnerable] 128.111.234.160 RPCSS Vulnerable - [KB823980 Vulnerable, KB824146  Vulnerable] 128.111.247.250 RPCSS Vulnerable - [KB823980 Vulnerable, KB824146  Vulnerable] 128.111.248.168 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.248.254 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.249.123 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.249.175 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.249.201 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.249.220 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.249.236 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.249.240 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] 128.111.249.241 RPCSS Vulnerable - [KB823980 Patched, KB824146 Vulnerable] *** Statistics *** Filtered Hosts ............................... 54 RPCSS Vulnerable ............................. 147 DCOM Disabled ................................ 72 Not Vulnerable ............................... 2492 Errors ....................................... 13 TCP Port 135 Closed or Host Timeout .......... 62812 TOTAL HOSTS SCANNED .......................... 65536 -- Todd Atkins Network Security Coordinator UCSB/Office of Information Technology Voice: (805) 893-5077 Fax: (805) 893-5051 http://www.oit.ucsb.edu/security _______________________________________________ CSF mailing list  -  CSF@ucsb.edu http://ucsb.edu/mailman/listinfo/csf