Penetration Testing mailing list archives

Re: IP Range


From: David Douthitt <ssrat () mailbag com>
Date: Fri, 30 Aug 2002 09:33:27 -0500

On Thu, Aug 29, 2002 at 01:43:05PM -0700, John Madden wrote:

Where just about to begin a pentest engagement and the
client wants us to know if we can find out how many IP
blocks they have. Is there a way to find out all the
IP blocks of a company ? You've got the usual e-mail
domain name to find at least one but what if they have
2,3 + IP blocks ?

If you use jwhois, you can find this information out by

jwhois -h whois.arin.net "CompanyName"

However, this only reports the blocks that the
company itself has registered; if they let their
ISP do that, then the ISP will be in the
registry, not the company.

Of course, if they used private IPs, then
you won't find that anywhere anyway.


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/


Current thread: