Overview of the IP Addresses Dashboard
The IP Addresses tab provides a detailed list of all the IP addresses associated with a specific vendor.
This dashboard is crucial for understanding a vendor's network footprint, which is a key part of assessing their overall attack surface, and for your own network security and firewall configurations.
Key Features of the IP Addresses Table:
Source: This column indicates how the IP address was identified (e.g., "DNS").
IP Address: The specific IP address.
Owner: The owner of the IP block (e.g., "Framer B.V."). This helps you identify the hosting provider or cloud service the vendor is using.
Country: The country where the IP address is located.
Score: A security score associated with the IP address.
Services: The services running on that IP address (e.g., "HTTP," "HTTPS").
Labels: Custom labels that have been assigned to the IP address.
IP Addresses vs. IP Ranges:
The dashboard is divided into two tabs: IP Addresses and IP Ranges.
IP Addresses: This tab lists individual IP addresses.
IP Ranges: This tab lists the entire IP blocks or ranges owned by the vendor. This is useful for a broader network-level assessment.
What are IP Ranges?
The IP Ranges tab lists the entire IP address blocks that are owned and used by the vendor.
This is different from the IP Addresses tab, which lists individual IP addresses that the vendor's domains resolve to.
This information is crucial for a complete network security assessment, especially for vendors who own and manage their own data centers or network infrastructure.
Using the IP Ranges Tab:
While the visual shows "No owned IP ranges," this is where DSALTA would automatically add and monitor any IP ranges discovered for the vendor.
When IP ranges are present, you would see details such as the range itself, the owner, the country, and any associated security findings.
This information is invaluable for managing your own firewall rules and network policies related to your vendors.
Accessing IP Address Details:
From the IP Addresses dashboard, click on any specific IP address to open the detailed view panel.
This panel provides all the information you need to understand the security posture of that particular IP address.
IP Address Details Panel:
IP Address: The specific IP address at the top of the panel.
Source: How the IP address was identified.
Owner & IP Range: The owner of the IP block and the full IP range it belongs to.
Country: The geographical location of the IP address.
Score & Services: The security score and the services running on the IP address.
Labels: Any custom labels assigned to the IP.
Domains: This section lists all the domains and subdomains that resolve to this IP address, along with their individual security scores.
Using This View:
This detailed view is essential for network administrators and security professionals.
You can use the information to check for any unexpected services running on an IP address.
The associated domains and their scores help you cross-reference risks and understand the full impact of an issue on a particular IP address.
