Available Dataset

Dataset-1 (IoT honeypot: Malware binaries ) ##UPDATED!!##

This dataset includes malware binaries captured by IoTPOT and its updated versions.
  • Dataset A
    • 4,000 executable files captured by IoTPOT between 2016/10/02 and 2017/10/02
  • Dataset B
    • 1,276 executable files captured by X-Pot between 2020/3/15 and 2020/5/20
    • 284 executable files captured by X-Pot between 2020/6/22 and 2020/7/21
  • Dataset C
    • 86,496 executable files captured by IoTPOT between 2018/09/14 and 2020/05/20
  • Dataset D
    • 124,799 executable files captured by IoTPOT between 2020/05/21 and 2022/12/31
    • 17,290 executable files captured by X-Pot between 2020/11/21 and 2022/12/31
  • Dataset E
    • 26,325 executable files captured by IoTPOT between 2023/01/01 and 2023/12/31
    • 5,299 executable files captured by X-Pot between 2023/01/01 and 2023/12/31
  • (NEW!!)Dataset F
    • 15,967 executable files captured by IoTPOT between 2024/01/01 and 2024/12/31
    • 4,820 executable files captured by X-Pot between 2024/01/01 and 2024/12/31
Filetype of Dataset F-1(IoTPOT)
Filetype Quantity
ELF(ARM) 6410
ELF(MIPS) 3098
ELF(PowerPC) 1293
ELF(Intel 80386) 0
ELF(Renesas SH) 1520
ELF(m68k) 1470
shell script 803
ELF(x86) 200
ELF(SPARC) 16
Python 0
ELF(others) 1157
PE32 0
Perl 0
Filetype of Dataset F-2(X-Pot)
Filetype Quantity
ELF(ARM) 1721
ELF(MIPS) 1075
ELF(PowerPC) 237
ELF(Intel 80386) 0
ELF(Renesas SH) 244
ELF(m68k) 221
shell script 400
ELF(x86) 285
ELF(SPARC) 139
Python 4
ELF(others) 469
PE32 18
Perl 7

The details of our honeypots are described in the following papers.

  • Seiya Kato, Rui Tanabe, Katsunari Yoshioka, Tsutomu Matsumoto, "Adaptive Observation of Emerging Cyber Attacks targeting Various IoT Devices," IFIP/IEEE International Symposium on Integrated Network Management (IM), 2021.
  • Rui Tanabe, Tatsuya Tamai, Akira Fujita, Ryoichi Isawa, Katsunari Yoshioka, Tsutomu Matsumoto, Carlos Ganan and Michel Van Eeten, "Disposable Botnets: Examining the Anatomy of IoT Botnet Infrastructure," Proc. International Conference on Availability, Reliability, and Security (ARES2020), 2020.
  • Yin Minn Pa Pa, Shogo Suzuki, Katsunari Yoshioka, and Tsutomu Matsumoto, Takahiro Kasama, Christian Rossow, "IoTPOT: Analysing the Rise of IoT Compromises," 9th USENIX Workshop on Offensive Technologies (USENIX WOOT 2015), 2015.

Dataset-2 (IoT honeypot: Malware download URLs)

This dataset includes URLs used for malware distribution observed by IoTPOT and its updated versions.

2,979,218 malware download URLs observed by IoTPOT between 2018-09-14 and 2019-12-31