survey-scanner

KO | EN

gitlite — search

#javascript #python #hacktoberfest #react #ai #typescript #llm #go #golang #android #machine-learning #rust #deep-learning #linux

★ 13 Open GitHub ↗

This repository publishes the sources of Internet-Wide Scans observed by NICTER darknet monitoring.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# survey-scanner
This repository publishes the sources of Internet-Wide Scans.

The list was created from [NICTER darknet monitoring](https://www.nicter.jp/en). We have examined source IP addresses of the packets observed at NICTER and identified the survey-scan organization and their IP addresses by reverse DNS lookups, WHOIS searches, and HTTP(S) accesses to the scanner’s IP addresses. We also searched for relevant descriptions on the official website of each survey-scanner. The detailed process can be found at [NICTER report 2023](https://csl.nict.go.jp/report/NICTER_report_2023.pdf).

## scanorg
In each period, we identify survey-scan organizations. The scanorg csv file contains the list of name, type, TCP port counts, UDP port counts, observed days in the period and a reference URL of each survey-scan organization. The list is sorted in descending order of the number of packets observed in the period.

(e.g.)
```
scanorg_2023.csv
```

## survey-scanners' IP addresses
In each period, we identify IP addresses of survey-scanners. The JSON file contains the list of IP address, name of the survey-scan organization and the last date when we observed a scan packet from the IP address in the period.

(e.g.)
```
surveyscanner_2023.json
```

## Citation Guidelines
If you are using this data for writing a paper, please cite the following paper:

1. D. Inoue et al., "nicter: An Incident Analysis System Toward Binding Network Monitoring with Malware Analysis," 2008 WOMBAT Workshop on Information Security Threats Data Collection and Sharing, Amsterdam, Netherlands, 2008, pp. 58-66, doi: 10.1109/WISTDCS.2008.14, [https://ieeexplore.ieee.org/document/4627315](https://ieeexplore.ieee.org/document/4627315).

2. T. Kasama, Y. Endo, M. Kubo and D. Inoue, "Please Stop Knocking on My Door: An Empirical Study on Opt-Out of Internet-Wide Scanning," in IEEE Access, vol. 13, pp. 48416-48430, 2025, doi: 10.1109/ACCESS.2025.3551691, [https://ieeexplore.ieee.org/document/10928993](https://ieeexplore.ieee.org/document/10928993).

## Contributing Information on survey-scan organizations
If you have information regarding survey-scan organizations, please send it to our e-mail: nicter-kai[at]ml.nict.go.jp. If the information is verified, we will consider updating the list in future releases.

survey-scanner

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README