|
Author: P.Hauser (30 Sep 07 6:24am)
Websense is a security company harvesting web sites for malware and was found here and in Project HoneyPot with IPs 66.194.6.2, 66.194.6.3, 66.194.6.11, 66.194.6.12, 66.194.6.13, 66.194.6.91, 66.194.6.196 (S) so far.
According to http://ws.arin.net/whois Websense, Inc ownes 296 hosts in the following ranges:
Websense (WEBSEN-1)
Websense Network Operations Center (WNOC-ARIN) arin@websense.com +1-858-320-8000
Websense, Inc (AS13448) WEBSENSE 13448
66.194.6/24 66.194.6.0 - 66.194.6.255 [256 hosts]
74.211.167.208/29 74.211.167.208 - 74.211.167.215 [8 hosts]
67.117.201.128/28 67.117.201.128 - 67.117.201.143 [16 hosts]
64.69.80.104/29 64.69.80.104 - 64.69.80.111 [8 hosts]
64.69.80.96/29 64.69.80.96 - 64.69.80.103 [8 hosts]
Now I am not going to check all Websense-ranges via the HoneyPot web-interface oder via the http:BL-API, since You can clearify this a lot easier via a local SQL-query against Your database.
Eventually HoneyPot hits here from one of the 296 IPs can be flagged here as deriving from a Security company's harvester.
Post Edited (30 Sep 07 10:25am)
|
Welcome to Project Honey Pot | Login