Introduction

Ditecting (Chinese Pinyin:diting, ditecing is spoonerism) is a sacred animal of Kṣitigarbha (the supreme ruler of hell realm in Buddhism) of Han Buddhism. In Han Buddhism and Chinese mythology, "谛听" can detect everything in the world, especially living beings' minds.

It is said that "谛听" is the animal Kṣitigarbha rides, and "谛听"'s prototype is a white dog. Due to Kṣitigarbha sect's doctrine based on filial piety, and dogs have loyal temper, like Manjushri's lion represent transcendent wisdom, and Samantabhadra's white elephant repesent practice and meditation, Kṣitigarbha's "谛听" reperents loyalty in Han Buddhism.

Dr. Yu Yao, who is professor of school of computer science and engineering of Northeastern University (CN), organized his students developed -- Ditecting Cyberspace Search Engine of Industrial Control System Devices (ICS), named from "谛听", whose name have a meaning of detecting everything, aiming to detect exposed ICS devices in the cyberspace, help cybersecurity enterprises with maintaining ICS devices, and trace malicious persons.

You can locate ICS devices, find exposed ports and cybersecurity vulnerabilities by ditecting. You can intuitively aware global ICS cybersecurity situations, and concentrate on ICS issues around you by ditecting. Ditecting aims to offer an open and free ICS research environment, using ditecting adeptly, focusing on ICS cybersecurity, and we can boosting the development of ICS cybersecurity.

Instructions and Tips


Basic query syntax: "query type:keyword" (exclude "");

When you query multiple keywords or types,separating by character "&", every keyworks' logical relationship in the same query type are OR, every keyworks' logical relationship in different query types are AND;

Keywords are case-insensitive.


Query based on ICS protocols


Query based on ICS protocols directly. The syntax is service:protocols' name

for example: explore ICS servers' IP and other information in the world, which are using modbus: service:modbus


Query based on ports


Query based on certain ICS protocols' default ports, The syntax is port:certain port number

for example: explore ICS devices' IP and other information in the world, which are using modbus: port:502


Query based on IP address


Query beaed on given IP, and fuzzy qurey is supported. The syntax is IP:IP address

for example: query a device whose IP address is 225.225.225.0: IP:225.225.225.0

Qurey devices within IP blocks 225.225.*: IP:225.225.*


Query based on scan time


Query based on scan time,and query results' scanning time are after the time which is typed in. The syntax is time:time

for example: explore the results whose scan time are after September, 2015: time:2015.9



Query based on locations


Query based on locations, and query types inluding country(counrties or regions)、 area(regions)、regname(provinces/states)、city(cities)


country: query by countries' name,using the simplest, complete and common countries' name

regname: query by state/province: query basing on some province or district [defunct temporarily]

for example: regname:North Denmark, Aalborg

city:cities's name [defunct temporarily]

for example: city:Shenyang



Query basing on keywords


Query beaed on given IP, and fuzzy qurey is supported. The syntax is keyword:keywords

for example: explore devices produced by Siemens or related to Siemens: keyword:Siemens


Integrated query


Combining query types, you can get precise information

for example: explore servers in US which are produced by Siemens and using port 502: country:US&port:502&keyword:Siemens