Launch of 'Senda-Radar,' a Purely Domestic IP Investigation and Visualization Product with Probes Optimized for Identifying Devices Used in Japan
Rainforest Co., Ltd. has released 'Senda-Radar,' a tool that automates the collection and visualization of global and LAN IP assets, featuring specialized probes for domestic Japanese hardware and support for AI integration via MCP.
📋 Article Processing Timeline
- 📰 Published: April 28, 2026 at 17:50
- 🔍 Collected: April 28, 2026 at 09:01
- 🤖 AI Analyzed: April 28, 2026 at 10:08 (1h 7m after Collected)
Rainforest Co., Ltd. has launched the purely domestic IP investigation and visualization product 'Senda-Radar.' This solution assists in confirming the status of assets for both global and LAN IPs, with a focus on identifying devices used within Japan.
### About Senda-Radar
Senda-Radar helps in tracking and verifying the status of a wide range of devices, including not only externally facing assets but also branch office routers, IoT devices, network printers, and NAS. It can be operated on-premise, and scanners can be selected from either on-premise or cloud environments. This enables flexible deployment according to an organization's network configuration, security policies, and operational structure. Developed utilizing the expertise from 'Senda Discover,' Senda-Radar integrates tools such as masscan, zgrab2, Playwright, and p0f to automatically collect and visualize information such as service availability, banners, TLS certificates, web interfaces, and OS estimations.
### Features of Senda-Radar
A major differentiator for Senda-Radar is its set of probes optimized for identifying devices used in Japan. The scanner implements LAN-oriented probes such as SNMP, SSDP/UPnP, mDNS, WS-Discovery, IPP, JetDirect, and SMB to assist in the estimation of devices like printers, NAS, routers, and cameras. Furthermore, it incorporates vendor hints for Brother, Canon, Epson, HP, Ricoh, Kyocera, BUFFALO, I-O DATA, Yamaha, NEC Platforms, ELECOM, and others, enabling asset tracking tailored to the actual operational environments in Japan.
Individual probes for MikroTik (API, API SSL, bandwidth-test, Winbox, etc.) are also implemented, providing investigation beyond general port detection. Common probes cover HTTP/HTTPS, SSH, Telnet, email services, router management screens, and SSL-VPN portals, with support for identifying VPN-related hints like OpenVPN, SSTP, PPTP, and WireGuard.
### Visualization UI
The collected and visualized results are presented not just as a simple list of ports, but as a unified dashboard organizing service information, device type estimations, tags, CPE/CVE, certificate info, and exposure risks. This allows operators to easily judge priorities. The interface enables users to check service counts, estimated device types, vendor signals, port-based exposure matrices, and risk info for each service on a single screen per IP address, making it easy to understand what is visible and how to act.
### OpenCTI Enrichment Integration
Senda-Radar can also be utilized for enrichment purposes within OpenCTI. It can add contextual information based on domestic observations as supplementary attributes to IoCs managed as external threat intelligence, strengthening existing IPv4-Addr information. By continuously integrating IP threat information held by 'Senda-Nexus' into OpenCTI, it supports triage and priority judgment for SOC, CSIRT, and MSSP by adding observation contexts such as TCP SYN observations on Darknet, high-speed scan observations, Mirai-related behaviors, product names, ports, paths, commands, observation counts, countries, and ASN.
### AI for Security / MCP Integration
Looking towards the utilization of AI for Security, Senda-Radar supports data provision through MCP (Model Context Protocol). This allows AI agents to access observation data and threat contexts held by Senda-Radar and related platforms through standardized means. This configuration enables AI agents to directly access threat contexts and observation summaries via MCP to perform automated investigations, analysis, and report generation.
### About Senda-Radar
Senda-Radar helps in tracking and verifying the status of a wide range of devices, including not only externally facing assets but also branch office routers, IoT devices, network printers, and NAS. It can be operated on-premise, and scanners can be selected from either on-premise or cloud environments. This enables flexible deployment according to an organization's network configuration, security policies, and operational structure. Developed utilizing the expertise from 'Senda Discover,' Senda-Radar integrates tools such as masscan, zgrab2, Playwright, and p0f to automatically collect and visualize information such as service availability, banners, TLS certificates, web interfaces, and OS estimations.
### Features of Senda-Radar
A major differentiator for Senda-Radar is its set of probes optimized for identifying devices used in Japan. The scanner implements LAN-oriented probes such as SNMP, SSDP/UPnP, mDNS, WS-Discovery, IPP, JetDirect, and SMB to assist in the estimation of devices like printers, NAS, routers, and cameras. Furthermore, it incorporates vendor hints for Brother, Canon, Epson, HP, Ricoh, Kyocera, BUFFALO, I-O DATA, Yamaha, NEC Platforms, ELECOM, and others, enabling asset tracking tailored to the actual operational environments in Japan.
Individual probes for MikroTik (API, API SSL, bandwidth-test, Winbox, etc.) are also implemented, providing investigation beyond general port detection. Common probes cover HTTP/HTTPS, SSH, Telnet, email services, router management screens, and SSL-VPN portals, with support for identifying VPN-related hints like OpenVPN, SSTP, PPTP, and WireGuard.
### Visualization UI
The collected and visualized results are presented not just as a simple list of ports, but as a unified dashboard organizing service information, device type estimations, tags, CPE/CVE, certificate info, and exposure risks. This allows operators to easily judge priorities. The interface enables users to check service counts, estimated device types, vendor signals, port-based exposure matrices, and risk info for each service on a single screen per IP address, making it easy to understand what is visible and how to act.
### OpenCTI Enrichment Integration
Senda-Radar can also be utilized for enrichment purposes within OpenCTI. It can add contextual information based on domestic observations as supplementary attributes to IoCs managed as external threat intelligence, strengthening existing IPv4-Addr information. By continuously integrating IP threat information held by 'Senda-Nexus' into OpenCTI, it supports triage and priority judgment for SOC, CSIRT, and MSSP by adding observation contexts such as TCP SYN observations on Darknet, high-speed scan observations, Mirai-related behaviors, product names, ports, paths, commands, observation counts, countries, and ASN.
### AI for Security / MCP Integration
Looking towards the utilization of AI for Security, Senda-Radar supports data provision through MCP (Model Context Protocol). This allows AI agents to access observation data and threat contexts held by Senda-Radar and related platforms through standardized means. This configuration enables AI agents to directly access threat contexts and observation summaries via MCP to perform automated investigations, analysis, and report generation.