smurf amp nets

Sat Jun 13 05:25:51 UTC 1998

On Sat, 13 Jun 1998, Jon Lewis wrote:

> I just recorded 4.5mb of a smurf attack directed at one of my servers. 
> Here's a list of the networks used as amplifiers and the number of
> different hosts responding from each network.

This is not true! According to your list the following networks are   
*NOT* smurf amplifiers. Please check your data before blacklisting
innocent people!!!

> 206.34.46:   1
> 195.50.72:   1
> 193.115.33:  1
> 128.97.251:  1
> 206.105.227: 1
> 164.38.32:   1
> 4.1.1:       1
> 206.105.231: 1
> 194.247.64:  1
> 206.39.70:   1
> 199.93.199:  1
> 144.85.200:  1
> 194.154.13:  1
> 137.52.109:  1
> 165.113.56:  1
> 144.85.207:  1
> 206.34.78:   1
> 206.98.32:   1
> 12.127.114:  1
> 128.97.46:   1
> 205.125.0:   1
> 157.130.0:   1
> 195.5.1:     1
> 206.39.92:   1
> 206.39.94:   1
> 206.39.98:   1
> 204.70.226:  1
> 12.127.209:  1
> 205.68.129:  1
> 205.202.164: 1
> 206.34.95:   1
> 204.59.1:    1
> 195.15.6:    1
> 195.89.160:  1
> 207.60.45:   1
> 195.89.163:  1
> 193.118.193: 1
> 204.70.164:  1
> 128.97.79:   1
> 4.0.128:     1
> 154.32.26:   1
> 195.99.124:  1
> 192.221.137: 1
> 4.0.63:      1
> 4.0.64:      1
> 12.127.232:  1
> 194.177.180: 1
> 144.85.1:    1
> 4.0.132:     1
> 194.80.132:  1
> 4.0.135:     1
> 206.41.10:   1
> 166.48.6:    1
> 137.39.135:  1
> 207.123.112: 1
> 196.7.77:    1
> 131.32.39:   1
> 209.4.206:   1
> 166.77.10:   1
> 204.119.168: 1
> 194.74.17:   1
> 207.165.237: 1
> 255.255.255: 1
> 12.127.163:  1
> 207.87.97:   1
> 4.0.144:     1
> 12.127.37:   1
> 149.142.122: 1
> 207.140.148: 1
> 4.0.80:      1
> 196.7.126:   1
> 192.216.246: 1
> 195.166.6:   1
> 207.0.84:    1
> 131.192.31:  1
> 131.192.32:  1
> 12.127.177:  1
> 207.233.85:  1
> 12.127.179:  1
> 204.97.134:  1
> 149.142.76:  1
> 169.139.60:  1
> 193.36.37:   1
> 4.1.66:      1
> 207.0.90:    1
> 206.149.195: 1
> 12.127.180:  1
> 207.217.50:  1
> 207.123.29:  1
> 4.0.240:     1
> 4.0.160:     1
> 194.72.131:  1
> 195.92.201:  1
> 128.97.113:  1
> 137.145.112: 1
> 207.68.13:   1
> 198.247.230: 1
> 194.205.68:  1
> 195.232.0:   1
> 157.130.193: 1
> 172.16.0:    1
> 172.16.1:    1
> 194.38.93:   1
> 131.119.18:  1
> 4.0.182:     1
> 192.221.96:  1
> 131.119.26:  1
> 131.119.28:  1
> 12.127.81:   1
> 128.97.147:  1
> 12.127.83:   1
> 164.67.72:   1
> 131.119.36:  1
> 131.119.38:  1
> 204.59.224:  1
> 128.97.230:  1
> 193.118.200: 1
> 194.164.1:   1
> 194.88.82:   1
> 131.119.49:  1
> 207.240.1:   1
> 207.137.76:  1
> 205.182.0:   1

--
Michael Dillon                 -               Internet & ISP Consulting
Memra Communications Inc.      -               E-mail: michael at memra.com
http://www.memra.com           -  *check out the new name & new website*