Penetration Testing mailing list archives

Check if addresses from AS in a black list


From: "Gleb Paharenko" <gpaharenko () gmail com>
Date: Sun, 13 Apr 2008 21:18:10 +0300

Hi.

The presence of some address of organization external IP's in spam,
virus or other malicious black lists could be the clue about possible
security compromise and consequent information leakage from an
organization. In my opinion monitoring of such lists could be the part
of regular process for company's security team. Please, could you
share your opinions and interfaces (even payed) to perform such a
check. To make long short:

- We have a AS range xxx.xxx.xxx.xxx-yyy.yyy.yyy.yyy.
- We need to check if some of the address space is in black lists (RBL's, etc.)

P.S. The brute force way to check every address is possible but the
latest way, I'm looking for more elegant (cheaper and reliable)
solutions.

-- 
Best regards.
Gleb Pakharenko.
http://gpaharenko.livejournal.com

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


Current thread: