IVRE

IVRE (Instrument de Veille sur les Réseaux Extérieurs) is a self-hosted network reconnaissance framework that functions as a private Shodan/Censys alternative. It integrates three data collection approaches: active scanning (wrapping Nmap, Masscan, and ZGrab2), passive network traffic analysis (using Zeek/Bro, p0f, and Argus), and flow analysis. All data is stored in MongoDB and searchable through a web interface, Python API, or CLI. IVRE enables organizations to build and maintain their own internet-wide scan datasets, correlate active and passive intelligence, and track infrastructure changes over time.