Smurf attacks were popular in 19th , however there a few devices that are still vulnerable to this attack.
Smurf attacks are not only possible in a LAN, but work over WAN too. It depend upon the configuration of your routing devices.All the websites, VPS, and public gateways do have a public IP.
So, if you can generate large numbers of ICMP packets with the intended victim's spoofed source IP and then broadcast to a computer network using an IP Broadcast address, then they will be flooded.
This means if a router with a public IP allows to respond to ICMP or
allow to forward packet to broadcast IP, then it can lead to a DoS
over all other host who are assigned the router as the gateway.
Protections against it are:
- Configure individual hosts and routers to not respond to ICMP
requests or broadcasts; or
- Configure routers to not forward packets directed to broadcast
Until 1999, standards required routers to forward such packets by default. Since then, the default standard was changed to not forward such packets.
You can find current top ten smurf amplifiers facing this attack