Datasets

TOP > Datasets

YNU-AmpPot Dataset Sample 2021

We provide a sample PCAP file of recent observation by AmpPot. This dataset includes a PCAP file for 1 day on June 9th, 2021 (JST). Please contact us using the following form.

Memcached AmpPot Dataset 2019

We provide artifacts from the following publication. Please send us request from the following form. Make sure that you let us know you are interested in "Memcached" dataset:

Mizuki Kondo, Rui Tanabe, Natsuo Shintani, Daisuke Makita, Katsunari Yoshioka, and Tsutomu Matsumoto, "Amplification Chamber: Dissecting the Attack Infrastructure of Memcached DRDoS Attacks," Proceedings of the 19th Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA2022).

MWS Dataset 2015

We provide PCAP files of AmpPot in MWS Dataset. This dataset includes PCAP files for 7 days from May 31st, 2015 to June 6th, 2015 (JST).

Request Datasets

If you are intrested in the datasets, please send a request from the form below.

(optional) If you are student, input your supervisor's name
Terms of use
  1. You agree not to publicly display or perform, republish, upload, post, transmit, resell, distribute, or otherwise share or make accessible any portions of the Dataset to a third party.
  2. We may modify these Terms of Use from time to time by posting a modified version on [https://sec.ynu.codes/dos/datasets], and all modifications to these Terms of Use will become effective upon your subsequent access and use of the Dataset.
  3. You allow us to include the name of your organization in the list of organizations with whom we shared the Dataset.
  4. Please notify us by sending email to ynugr-dos[atmark]ynu.ac.jp when you publish a research paper and/or an article using the Dataset.
  5. Please cite the Dataset by referring [https://sec.ynu.codes/] in your publication that uses the Dataset.

We will not use your personal information filled in the Request form for any purpose other than responding to your request. Please note that we will publicize the list of organizations to which we have provided the dataset.

Please note that we count attack events based on the target IP addresses. Recent carpet bombing attacks that target wide range of target IP addresses are therefore counted as separate events and creating peaks in the above graph. We are working on aggregating the events.

These results have been obtained through a series of research projects: the commissioned researches (19001(WarpDrive) and 05201) by the National Institute of Information and Communications Technology (NICT), Japan and PRACTICE and MITIGATE supported by the Ministry of Internal Affairs and Communications, Japan.

Copyright (c) Yoshioka Lab, Yokohama National University, All rights reserved.