Re: Analysis: AboveNet attacks

[bejtlich () TEXAS NET (Richard Bejtlich)]

Excellent analysis Robert.  I'm passing your message to my 
analysts for their education.

Poking around http://www.above.net/network/network.html , 
it looks like Above.net still lists the IPs you mentioned.  
This reminds me of the business/education/etc network 
diagrams shown in each issue of Network Computing magazine 
(http://www.networkcomputing.com).  This "centerfold" is a 
great resource for anyone looking to break into a company --
 why would anyone volunteer their entire topology, albeit 
minus IP addresses?

Richard

---

In the case of AboveNet, they actually tell everyone the IP 
addresses of
their switches. They post to their website map the current 
status of all
their equipment and Internet connections. They essentially 
publicize where
to find the equipment and classify it in a well-known 
category of attacks
that might bring it down.