To request access this dataset you will need to login with an IMPACT account. Accounts are free. If you don't have one please register.
This dataset is no longer available and has a current status of 'Withdrawn'.
Please see the catalog for a listing of currently available datasets.

Summary

DS-0242
Longitudinal Darknet 35/8
Dataset
Merit Network, Inc.
Merit Network, Inc.
10/05/2005
Data collection is ongoing
47 (lowest rank is 56)

Category & Restrictions

Blackhole Address Space Data
Restricted
true

ICC/Researcher MOA including the following additional terms:




1. Researcher shall not transfer, extract, or duplicate the provided data (or a subset thereof) outside the servers of the Data Host that house the data, without written authorization from Merit Network IMPACT PI team. Researcher agrees that derivative information from the provided data can be transferred and used, in accordance with the Researcher obligations and other terms of this Agreement, only if sensitive information (including IP addresses) has been anonymized and removed.




2. Researcher agrees that the computing resources (such as a virtual machine's processing power, memory and network bandwidth) provided by the Data Host to the Researcher for downloading or processing the data are shared resources. Researcher thus agrees that the service for access to the requested data would be on a best effort basis. Should a virtual machine gets allocated by the Data Host to the Researcher for processing the requested data, the Researcher's account on that machine should remain active for a period not exceeding 6 months, unless otherwise agreed with the Data Provider and Data Host.




3. The Researcher agrees that s/he will not attempt to probe or communicate in any way with a machine (or a human subject operating the machine) identified in the shared data. For example, the Researcher must not attempt to connect or send messages to any IP address present in the disclosed data.




4. The Data Provider reserves the right to audit any derived results from the provided dataset to ascertain that these results are in accordance with the Researcher's obligations regarding the terms of this Agreement.      ICC/Researcher MOA including the following additional term:    Researcher agrees that the computing resources (such as a virtual machine's processing power, memory and network bandwidth) provided by the Data Host to the Researcher for downloading or processing the data are shared resources. Researcher thus agrees that the service for access to the requested data would be on a best effort basis. Should a virtual machine gets allocated by the Data Host to the Researcher for processing the requested data, the Researcher's account on that machine should remain active for a period not exceeding 6 months, unless otherwise agreed with the Data Provider and Data Host.

Description


Network telescope data from 35/8 block

This dataset captures unsolicited traffic, as recorded by Merit's 35/8 darknet. Darknet data (also known as Internet background radiation) consist of Internet packets that arrive to an unused Internet space, and are therefore usually associated with malicious activities such as horizontal Internet scanning, malware propagation, and "backscatter" from distributed denial of service (DDoS) attacks. This dataset is provided in the CAIDA Corsaro "flowtuple" format (see https://www.caida.org/tools/measurement/corsaro/ ).    Researchers can use this dataset to identify scanners, check for evidence of DDoS activity (e.g., in the case of a TCP SYN flood attack with a spoofed source IP, the victim will reply with a TCP SYN-ACK to the spoofed IP; if the spoofed IP happened to be within the 35/8 address space, our darknet will capture the SYN-ACK replies) or extract other nefarious activities and network misconfigurations.
This dataset is the subject of ongoing measurement and data collection. As such the data is continuously growing. Researchers who are granted access will be able to download updates for a period of one year after their request.

Additional Details

18.2TB
Size is growing as more data is collected
false
true
network, merit, darknet, 242, longitudinal darknet 35/8, longitudinal, merit network, inc., 2005, telescope, block, space, dataset, spoofed, syn, corsaro, ddos, caida, tcp, ack, activities, malware, arrive, service, tools, blackhole, measurement, radiation, malicious, happened, blackhole address space data, org, identify, attack, captures, victim, unsolicited, scanning, activity, scanners, format, evidence, misconfigurations, researchers, traffic, reply, https, flowtuple, horizontal, consist, packets, backscatter, distributed, denial, attacks, unused, background, replies, nefarious, extract, propagation, flood, check, capture, source