Network Abuse - Netblock x.x.x.x - IMPORTANT
CMartin at mercury.balink.com
Thu Jul 30 17:53:07 UTC 1998
I guess the fella doesn't realize that smurfers monitor this group...
And I thought it was dying down. :(
From: Jay Stewart [mailto:cosmo at olywa.net]
Sent: Thursday, July 30, 1998 1:28 PM
To: jamie at ais.net
Cc: nanog at merit.edu
Subject: Re: Network Abuse - Netblock x.x.x.x - IMPORTANT
From: James Rishaw <jamie at dilbert.ais.net>
To: nanog at merit.edu <nanog at merit.edu>
Date: Thursday, July 30, 1998 10:20 AM
Subject: FW: Network Abuse - Netblock x.x.x.x - IMPORTANT
>A coworker's friend forwarded this to me.. kinda funny.. Kinda lame..
>Sent: Thursday, July 30, 1998 7:36 AM
>Subject: FW: Network Abuse - Netblock de.le.te.d - IMPORTANT
>From: Andrew Shoemaker[SMTP:wrath at jerky.net]
>Sent: Thursday, July 30, 1998 6:43 AM
>Subject: Network Abuse - Netblock de.le.te.d - IMPORTANT
>My name is Andrew Shoemaker and I am the head security consultant at JNS.
>recently were the target of a denial of service attack that saturated our
>Internet connection. This attack, known as a 'smurf' attack, uses
>relays to source the at
>tack. By relaying the attack through your network the attack is made
>anonymous and increases in strength. This type of attack causes degraded
>performance on both the attacked and relay networks and is the result of an
>improperly configured router at you
>r site. I urge you to fix your routers. If you are unable to do so, or do
>not know how I suggest you call a security consultant. JNS is willing to
>fix your router permanently for a one time fee of $100 US. If you are
>interested in this deal please co
>ntact me and I will send you a copy of our security contract and an
>Netblock de.le.te.d was found to produce 11 replys for each packet sent.
>This means if the attacker is sending at T1 speeds the amount of your
>bandwidth used in relaying
> the attack is equivalent to 11 T1s
>wrath at jerky.net
Did anyone take the time to look at this goober's web page? Here is a
OlyWa.Net - "Olympia's Premier Internet Service Provider"
The Smurf Relay List
This is a list of subnets that can be used for the "smurf" attack. If
find your subnet on this list FIX YOUR FUCKING ROUTERS! If you have
you wish to add to this list please email the wrath-mon. Once you fix
router email the above address to get your subnet removed. Until
then....everyone feel free to completely FUCK these networks...and
stupidity should never be tolerated.
More information about the NANOG