Re: [44net] MikroTik worm - please check your RouterOS version! Ryan Elliott Turner ryan.e.t at gmail.com - 44net

27 Mar 2018

...
  All of the hosts I can control in 44.34/21 have been
updated this evening.
 Please let me know if you notice any other troublemakers there. Thanks for
 the report. 
This is the latest packet to TCP port 8291 I have seen from addresses in the 44.34
network:

01:13:28.014665 44.34.128.100
04:04:59.569058 44.34.128.101
01:21:03.741867 44.34.128.102
01:11:34.822173 44.34.128.34
00:21:39.834057 44.34.128.35
01:53:00.697869 44.34.128.39
03:36:45.895350 44.34.128.94
07:13:36.922146 44.34.129.114
04:22:32.850903 44.34.129.117
03:32:09.935080 44.34.129.40
02:27:34.360165 44.34.129.41
01:51:02.516010 44.34.129.42
01:18:43.892712 44.34.129.73

Times are UTC+2
When you have updated those devices after those times it should be OK

Rob