Admin Task #1: Researching with ARIN Database

If an attacker is doing reconnaissance on a company, information found on ARIN.net can be used as a weapon. For this task, be prepared to think and research like a hacker.

December 4, 2017

About This Challenge

ARIN.net can be a wealth of information for an attacker since IP blocks belonging to a company can often be identified. An attacker can gather dangerous information without sending any packets to the target network, therefore, avoiding identification.

While researching, decide whether or not individuals should be listed by name as points of contact, or by position. If inaccuracies are found, report them to ARIN.net to be corrected with authorization from your organization.

Disclaimer: Ensure any activities undertaken on your work network are allowed by your corporate policy and approved by management at your organization.

Follow The Instructions To Complete Today’s Network Defender Task:

Feel free to download the PDF version of the directions for your review.

Download PDF

Task Directions:

Head over to the American Registry for Internet Numbers, or more commonly, ARIN, at https://www.arin.net. Use their SEARCH Whois function and locate your company, or another company, if you cannot locate your own.  (Smaller companies may not be preset in the ARIN database).

Answer the following questions:

1. What IP blocks are assigned to the company?

2. What Autonymous System (AS Number) is assigned to the company?

3. What point of contact (POC) records are listed?

4. Are the records current and accurate?

5. Are individuals or teams listed?

6. What does this information mean for the security of your or their systems?

Once you’ve followed these directions, scroll down to mark this challenge complete.

Once You’ve Completed This Task Click This Button.

I Completed This Task

If your company will not allow you to perform the above task. Please read this security article and click the button above.

IT Security Training To Prepare You For War

Loving The Challenge And Want More Great StormWind Content? Contact Us To Schedule A Security Training Consultation

First Name

Last Name

Email

Company

Job Role:

Phone Number

Why Over 100,000 Techs Believe In StormWind Studios

StormWind Studios is to IT training what George Lucas is to Star Wars. We take industry experts, add serious special effects, and deliver the most exciting, compelling live IT training on the planet – see for yourself during our Network Defender 5-Day Challenge

Signing up for Stormwind is one of the best education decisions I've made and I strongly recommend them to anyone interested in studying IT.

Jon Lincoln

One of the coolest parts about this course (CEH) was that lectures were recorded daily, so you could make up any missed time without a lot of headache or heartache. I just took the Certified Ethical Hacker test, and I’m pleased to say that I passed on the first try.

Dave Cork

I took StormWind classes and labs- absolutely OUTSTANDING! I did those just prior to going for my certification exam and passed it with a 923 out of 1000.

Ron Marx

It has made a sizable impact with our company, our offerings to our client base, and my personal career. I am looking forward to this new position with my employer in San Antonio, thanks to StormWind.

Mike Lind