Merit Logo Merit IconSet
Skip to content

International Distributed Network Telescope

Seeing the Internet's Background Noise to Better Understand Emerging Threats

The International Distributed Network Telescope (INDNT) is a collaborative cybersecurity research infrastructure that collects and analyzes unsolicited Internet traffic from unused address space contributed by universities, research and education networks, and research organizations across the United States and beyond. By combining distributed telescope deployments into a single national platform, the INDNT provides researchers with unprecedented visibility into Internet-scale scanning activity, malware propagation, denial-of-service campaigns, and emerging cyber threats while creating high-quality datasets that support cybersecurity research, artificial intelligence, and network science. The INDNT and associated projects have been awarded multiple grants by the National Science Foundation over the past 20 years to meet these objectives.

Whether you are interested in contributing unused address space, conducting research, or developing new cybersecurity tools, INDNT provides a collaborative environment where institutions work together to improve understanding of the global Internet ecosystem.

Why INDNT Matters

Internet threats evolve faster than traditional cybersecurity datasets can capture them. INDNT provides continuously collected, real-world observations that enable researchers to:

  1. Detect emerging attack campaigns before they become widespread.

  2. Study global Internet scanning behavior.

  3. Develop and evaluate machine learning models for threat detection.

  4. Understand long-term trends in Internet abuse.

  5. Support reproducible cybersecurity research through shared datasets.

  6. Advance national cyber resilience through collaborative science.

Because the platform is entirely passive, INDNT captures authentic Internet behavior without interfering with production systems or interacting with malicious actors.

Available Data Sets

INDNT maintains several complementary datasets that support different research applications.

Network Telescope Packet Capture (PCAP)

Raw packet captures provide detailed records of unsolicited Internet traffic directed toward participating telescope networks. These datasets support protocol analysis, malware research, traffic characterization, and forensic investigations.

Event Data

Processed event datasets transform raw packet captures into structured records that are easier to analyze for large-scale statistical studies, visualization, and machine learning workflows.

Flow and Summary Data

Aggregated datasets provide longitudinal views of Internet activity, allowing researchers to examine trends over time while reducing storage and computational requirements.

AI-Ready Research Datasets

As part of ongoing research initiatives, INDNT is developing curated datasets specifically designed for artificial intelligence and machine learning applications. These datasets include enriched metadata, standardized formats, and labeling pipelines that support reproducible research.

Historical Archive

INDNT builds upon one of the world’s longest-running academic network telescope collections, preserving decades of Internet observations that allow researchers to study how Internet threats have evolved.

Research Applications

Researchers are using INDNT data to investigate topics including:

  1. Threat intelligence

  2. Internet scanning behavior

  3. Malware propagation

  4. Distributed denial-of-service activity

  5. Artificial intelligence for cybersecurity

  6. Autonomous threat detection

  7. Internet measurement

  8. Network resilience

  9. Cyber situational awareness

  10. Security operations research

Become a Data Contributor

INDNT continues to expand through partnerships with universities, research institutions, regional research and education networks, and other organizations with routable but unused IPv4 address space.

Participating institutions contribute telescope data while maintaining control of their own infrastructure. Merit Research guides deployment, data collection, and integration into the national platform.

Contributors help strengthen the national cybersecurity research community while enabling new discoveries that benefit the broader Internet.

Potential contributors include:

  1. Universities

  2. Regional and state research and education networks

  3. National laboratories

  4. Government research organizations

  5. Cybersecurity research centers

Access Data

Qualified researchers may request access to INDNT datasets for academic, nonprofit, and approved collaborative research projects.

It appears your browser is blocking access to our web forms.
Please see this support article for more information.