IIoT Network Traffic — 16% Attacks [10K rows] #ec08
Abstract
"Synthetic Network Security dataset with 10,000 data points. 9 columns. Config: Attack rate: 16%. CC0 licensed."
Description
Overview
Synthetic OT protocol traffic for SCADA/ICS security research with Modbus, OPC UA, DNP3.
10,000 data points, 9 columns. Config: Attack rate: 16%.
Column Schema
| Column | Description |
|---|---|
Timestamp | ISO 8601 |
Source_IP | Source |
Dest_IP | Dest |
Protocol | OT protocol |
Packet_Size | Bytes |
Device_Role | PLC/HMI/SCADA/RTU |
Function_Code | Protocol FC |
Attack_Type | Attack type |
Label | Normal/Attack |
Mathematical Models
- Normal Traffic:
Periodic polling with protocol-specific patterns - Attacks:
MitM, Replay, False Data Injection, DoS, Recon
Use Cases
- SCADA intrusion detection
- OT protocol analysis
- Industrial network monitoring
Reproducibility
Seed: 3660478114. Same seed + parameters = identical output. IoTSyn v3.1.
Sample Data (60 rows · 16 columns)
| # | Timestamp | Source_IP | Dest_IP | Source_Port | Dest_Port | Protocol | Packet_Size | Connection_Duration | Packets_Sent | Bytes_Transferred | Flow_Rate | Device_Role | Function_Code | Attack_Type | Attack_Phase | Label |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | 2026-03-28 13:45:00 | 10.0.1.16 | 10.0.1.22 | 12960 | 20000 | DNP3 | 101 | 0.39 | 7 | 707 | 1,814.42 | PLC | 16 | Normal | none | Normal |
| 2 | 2026-03-28 13:45:10 | 10.0.1.15 | 10.0.1.28 | 61372 | 1883 | MQTT | 160 | 0.23 | 3 | 480 | 2,063.28 | Historian | 0 | Normal | none | Normal |
| 3 | 2026-03-28 13:45:20 | 187.180.129.5 | 10.0.1.20 | 56621 | 502 | Modbus_TCP | 80 | 0.01 | 3 | 240 | 30,207.82 | External | 4 | Reconnaissance | recon | Malicious |
| 4 | 2026-03-28 13:45:30 | 187.180.129.5 | 10.0.1.12 | 6711 | 502 | Modbus_TCP | 50 | 0.02 | 3 | 150 | 9,030.46 | External | 1 | Reconnaissance | recon | Malicious |
| 5 | 2026-03-28 13:45:40 | 187.180.129.5 | 10.0.1.18 | 47494 | 502 | Modbus_TCP | 61 | 0.05 | 2 | 122 | 2,476.13 | External | 16 | Reconnaissance | recon | Malicious |
| 6 | 2026-03-28 13:45:50 | 187.180.129.5 | 10.0.1.14 | 18596 | 502 | Modbus_TCP | 65 | 0.01 | 2 | 130 | 9,015.09 | External | 1 | Reconnaissance | recon | Malicious |
| 7 | 2026-03-28 13:46:00 | 187.180.129.5 | 10.0.1.23 | 5775 | 502 | Modbus_TCP | 49 | 0.03 | 3 | 147 | 4,367.64 | External | 1 | Reconnaissance | recon | Malicious |
| 8 | 2026-03-28 13:46:10 | 187.180.129.5 | 10.0.1.14 | 32133 | 502 | Modbus_TCP | 71 | 0.04 | 2 | 142 | 3,705.10 | External | 3 | Reconnaissance | escalation | Malicious |
| 9 | 2026-03-28 13:46:20 | 187.180.129.5 | 10.0.1.21 | 62585 | 502 | Modbus_TCP | 100 | 0.04 | 3 | 300 | 7,590.33 | External | 16 | Reconnaissance | escalation | Malicious |
| 10 | 2026-03-28 13:46:30 | 187.180.129.5 | 10.0.1.26 | 11569 | 502 | Modbus_TCP | 70 | 0.00 | 3 | 210 | 67,105.88 | External | 16 | Reconnaissance | escalation | Malicious |
Showing first 10 of 60 sample rows
Data Visualization Interactive
Numeric Trends
Category Distribution
Cite This Dataset
IoTSyn Generated (2026). IIoT Network Traffic — 16% Attacks [10K rows] #ec08. [Dataset]. IoTSyn Generated. https://iotsyn.com/view.php?uid=iotsyn_69d115dc8c6862.91946550
Source: IoTSyn Generated (2026)
Indexed by IoTDataset.com on Apr 04, 2026
Ready to Start Your Research?
Download this dataset directly from the official repository and start building your next breakthrough project.