External Recon for a block of IPs | Voters

External Recon for a block of IPs

Phyllis Streich

Ability to add a small customer IP block (a /28 for example), in order to monitor ALL of the IPs for open ports that belong to a client AND provide a monthly summary report of open ports to the customer and/or MSP vendor. Also highlight any new port changes in the summary report.

December 11, 2020

Robert Dana

Merged in a post:

External Recon - Specify company owned IPs and IP blocks

Kris Cears

With so many agents checking-in from home networks, it would be nice if we could specify at the organization level IPs or IP blocks in use at company locations. Then on the External Recon page, differentiate those somehow so we can prioritize investigations appropriately without a bunch of extra investigative effort.

February 29, 2024

Tanner Stine

I think it would be good to bring attention brought back to this topic. This may be more attainable since External Recon is now referencing Shodan.

Augustus Lang

I signed on today to make just such a suggestion! Would also like to get alert emails based on new results, but only on the specified IPs!

Edelmira Botsford

Most of my clients have sub-nets from two providers. Support contiguous network ranges.

Tom Strickland

Along these lines, I've love to see a "rescan" feature that we can use to confirm things are buttoned up after adjusting firewall rules. As it is, we have to wait for Shodan to make another pass, which could be a while.

And, yes, I know we can do our own test with telnet but I'd prefer and trust 3rd party testing as being more complete.

Candi Corkery

Yes, this would be great!