SMURF amplifier block list

Sun Apr 12 19:35:44 UTC 1998

On Sun, 12 Apr 1998, Alex P. Rudnev wrote:

==>Remember, this intruders use small ISP as their service providers, not 
==>huge MCI or SPRINT.

Actually, the majority of these people use compromised root accounts in
educational institutions, educational residence halls w/ Ethernet,
enterprises w/o decent firewalls, and co-location machines.

There are lists which exist of over 200-300 compromised root accounts and
access capabilities from which someone can launch an attack.

/cah