To request access this dataset you will need to login with an IMPACT account. Accounts are free. If you don't have one please register.
This dataset is no longer available and has a current status of 'Withdrawn'.
Please see the catalog for a listing of currently available datasets.

Summary

DS-0654
Merit Telescope Darknet Scanners dataset
Dataset
Merit Network, Inc.
Merit Network, Inc.
04/26/2011
Data collection is ongoing
54 (lowest rank is 56)

Category & Restrictions

Blackhole Address Space Data
Restricted
true

ICC/Researcher MOA including the following additional terms:




1. Researcher shall not transfer, extract, or duplicate the provided data (or a subset thereof) outside the servers of the Data Host that house the data, without written authorization from Merit Network IMPACT PI team. Researcher agrees that derivative information from the provided data can be transferred and used, in accordance with the Researcher obligations and other terms of this Agreement, only if sensitive information (including IP addresses) has been anonymized and removed.




2. Researcher agrees that the computing resources (such as a virtual machine's processing power, memory and network bandwidth) provided by the Data Host to the Researcher for downloading or processing the data are shared resources. Researcher thus agrees that the service for access to the requested data would be on a best effort basis. Should a virtual machine gets allocated by the Data Host to the Researcher for processing the requested data, the Researcher's account on that machine should remain active for a period not exceeding 6 months, unless otherwise agreed with the Data Provider and Data Host.




3. The Researcher agrees that s/he will not attempt to probe or communicate in any way with a machine (or a human subject operating the machine) identified in the shared data. For example, the Researcher must not attempt to connect or send messages to any IP address present in the disclosed data.




4. The Data Provider reserves the right to audit any derived results from the provided dataset to ascertain that these results are in accordance with the Researcher's obligations regarding the terms of the ICC/Researcher MOA agreement including the following additional term: Researcher agrees that the computing resources (such as a virtual machine's processing power, memory and network bandwidth) provided by the Data Host to the Researcher for downloading or processing the data are shared resources. Researcher thus agrees that the service for access to the requested data would be on a best effort basis. Should a virtual machine gets allocated by the Data Host to the Researcher for processing the requested data, the Researcher's account on that machine should remain active for a period not exceeding 6 months, unless otherwise agreed with the Data Provider and Data Host.

Description


Network scanners from Darknet monitor

Summary of scanning activities observed at Merit's darknet monitor. The dataset includes: 1) the IP addresses that have been observed in the darknet monitor to perform scanning, 2) the amount of unsolicited packets that these IPs transmitted. This dataset is updated daily. A scanner is defined as an IP that has transmitted more than X amount of packets into Merit's NET35 darknet space (X is a configurable threshold currently set to 1000 packets). REMARKS: 1) this dataset may also include backscatter activity or other types of traffic associated with network misconfiguration or other user errors. In other words, the fact that an origin IP has sent more than 1000 packets does not necessarily mean its performing scanning, 2) this dataset does not differentiate between malicious and benign scanning (e.g., for research purposes). Researchers interested compiling their own list of scanners, using their own definition of scanning, may request access to Merit's darknet dataset ("Longitudinal Darknet 35/8").
This dataset is the subject of ongoing measurement and data collection. As such the data is continuously growing. Researchers who are granted access will be able to download updates for a period of one year after their request.

Additional Details

4.0GB
Size is growing as more data is collected
false
true
merit, network, darknet, scanners, dataset, merit telescope darknet scanners dataset, 654, telescope, merit network, inc., 2011, monitor, scanning, packets, amount, 1000, space, transmitted, observed, perform, remarks, configurable, blackhole, malicious, user, benign, definition, unsolicited, activities, summary, include, blackhole address space data, types, performing, origin, includes, backscatter, researchers, traffic, defined, scanner, differentiate, misconfiguration, threshold, list, ips, activity, access, net35, request, errors, updated, longitudinal, daily, purposes, compiling