Network Abuse - Netblock x.x.x.x - IMPORTANT

Martin, Christian CMartin at
Thu Jul 30 17:53:07 UTC 1998

I guess the fella doesn't realize that smurfers monitor this group...
And I thought it was dying down. :(


-----Original Message-----
From: Jay Stewart [mailto:cosmo at]
Sent: Thursday, July 30, 1998 1:28 PM
To: jamie at
Cc: nanog at
Subject: Re: Network Abuse - Netblock x.x.x.x - IMPORTANT

-----Original Message-----
From: James Rishaw <jamie at>
To: nanog at <nanog at>
Date: Thursday, July 30, 1998 10:20 AM
Subject: FW: Network Abuse - Netblock x.x.x.x - IMPORTANT

>A coworker's friend forwarded this to me.. kinda funny.. Kinda lame..
>-----Original Message-----
>Sent: Thursday, July 30, 1998 7:36 AM
>Subject: FW: Network Abuse - Netblock de.le.te.d - IMPORTANT
>From: Andrew Shoemaker[SMTP:wrath at]
>Sent: Thursday, July 30, 1998 6:43 AM
>Subject: Network Abuse - Netblock de.le.te.d - IMPORTANT
>My name is Andrew Shoemaker and I am the head security consultant at JNS.
>recently were the target of a denial of service attack that saturated our
>Internet connection.  This attack, known as a 'smurf' attack, uses
>relays to source the at
>tack.  By relaying the attack through your network the attack is made
>anonymous and increases in strength.  This type of attack causes degraded
>performance on both the attacked and relay networks and is the result of an
>improperly configured router at you
>r site.  I urge you to fix your routers.  If you are unable to do so, or do
>not know how I suggest you call a security consultant.  JNS is willing to
>fix your router permanently for a one time fee of $100 US.  If you are
>interested in this deal please co
>ntact me and I will send you a copy of our security contract and an
>Netblock de.le.te.d was found to produce 11 replys for each packet sent.
>This means if the attacker is sending at T1 speeds the amount of your
>bandwidth used in relaying
> the attack is equivalent to 11 T1s
>Andrew Shoemaker
>JNS Security
>wrath at

Did anyone take the time to look at this goober's web page?  Here is a
*nice* snippet.

Jay Stewart
Vice President
OlyWa.Net - "Olympia's Premier Internet Service Provider"


The Smurf Relay List

This is a list of subnets that can be used for the "smurf" attack. If
find your subnet on this list FIX YOUR FUCKING ROUTERS! If you have
you wish to add to this list please email the wrath-mon. Once you fix
router email the above address to get your subnet removed. Until
then....everyone feel free to completely FUCK these networks...and
stupidity should never be tolerated.

Updated: 07.29.98

More information about the NANOG mailing list