skip to Main Content

Cybercrime, NCSC could scan all of the internet connected devices in UK

NCSC could scan all of the internet connected devices in UK, The goal is to assess country’s vulnerability to cyber-attacks and to help the owners of Internet-connected systems understand their security posture

The National Cyber Security Center (NCSC) could scan all of the internet connected devices in UK to better protect the country from cyber-attacks. The NCSC stated that as part of the “mission to make the UK the safest place to live and do business online, we are building a data-driven view of ‘the vulnerability of the UK’. This directly supports the UK Government Cyber Security Strategy relating to Understanding UK Cyber risk (Objective 1) and will help us to:

  • better understand the vulnerability and security of the UK;
  • help system owners understand their security posture on a day-to-day basis;
  • respond to shocks (like a widely exploited zero-day vulnerability).

The goal is to assess UK’s vulnerability to cyber-attacks and to help the owners of Internet-connected systems understand their security posture.

The data collected by NCSCS

“Data collected from these scans includes any data sent back when connecting to services and web servers, such as the full HTTP responses (including headers) – The Centre adds -. For other services, this includes data that is sent by the server immediately after a connection has been established or a valid protocol handshake has been completed. NCSCS also records other useful information for each request and response, such as the time and date of the request and the IP addresses of the source and destination endpoints”. All activity is performed on a schedule using standard and freely available network tools running within a dedicated cloud-hosted environment. All connections are made using one of two IP addresses:

  • 18.171.7.246;
  • 35.177.10.231.

Note that these IP addresses are also both assigned to scanner.scanning.service.ncsc.gov.uk with both forward and reverse DNS records.

Back To Top