Synthetic IIoT Network Traffic Dataset — 16% Attacks
Generated Dataset Summary
"Free CC0 synthetic dataset: 10,000 rows of Modbus, OPC UA and DNP3 flows labelled for SCADA intrusion detection. 16% Attacks. Reproducible from its seed."
Generation Notes
Overview
Synthetic OT protocol traffic for SCADA/ICS security research with Modbus, OPC UA, DNP3.
10,000 data points, 9 columns. Config: Attack rate: 16%.
Column Schema
| Column | Description |
|---|---|
Timestamp | ISO 8601 |
Source_IP | Source |
Dest_IP | Dest |
Protocol | OT protocol |
Packet_Size | Bytes |
Device_Role | PLC/HMI/SCADA/RTU |
Function_Code | Protocol FC |
Attack_Type | Attack type |
Label | Normal/Attack |
Mathematical Models
- Normal Traffic:
Periodic polling with protocol-specific patterns - Attacks:
MitM, Replay, False Data Injection, DoS, Recon
Use Cases
- SCADA intrusion detection
- OT protocol analysis
- Industrial network monitoring
Reproducibility
Seed: 3660478114. Reproduction requires the same engine version, parameters, seed, dependencies, and execution environment. IoTSyn v3.1.0.
Sample Data (60 rows · 16 columns)
| # | Timestamp | Source_IP | Dest_IP | Source_Port | Dest_Port | Protocol | Packet_Size | Connection_Duration | Packets_Sent | Bytes_Transferred | Flow_Rate | Device_Role | Function_Code | Attack_Type | Attack_Phase | Label |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | 2026-03-28 13:45:00 | 10.0.1.16 | 10.0.1.22 | 12960 | 20000 | DNP3 | 101 | 0.39 | 7 | 707 | 1,814.42 | PLC | 16 | Normal | none | Normal |
| 2 | 2026-03-28 13:45:10 | 10.0.1.15 | 10.0.1.28 | 61372 | 1883 | MQTT | 160 | 0.23 | 3 | 480 | 2,063.28 | Historian | 0 | Normal | none | Normal |
| 3 | 2026-03-28 13:45:20 | 187.180.129.5 | 10.0.1.20 | 56621 | 502 | Modbus_TCP | 80 | 0.01 | 3 | 240 | 30,207.82 | External | 4 | Reconnaissance | recon | Malicious |
| 4 | 2026-03-28 13:45:30 | 187.180.129.5 | 10.0.1.12 | 6711 | 502 | Modbus_TCP | 50 | 0.02 | 3 | 150 | 9,030.46 | External | 1 | Reconnaissance | recon | Malicious |
| 5 | 2026-03-28 13:45:40 | 187.180.129.5 | 10.0.1.18 | 47494 | 502 | Modbus_TCP | 61 | 0.05 | 2 | 122 | 2,476.13 | External | 16 | Reconnaissance | recon | Malicious |
| 6 | 2026-03-28 13:45:50 | 187.180.129.5 | 10.0.1.14 | 18596 | 502 | Modbus_TCP | 65 | 0.01 | 2 | 130 | 9,015.09 | External | 1 | Reconnaissance | recon | Malicious |
| 7 | 2026-03-28 13:46:00 | 187.180.129.5 | 10.0.1.23 | 5775 | 502 | Modbus_TCP | 49 | 0.03 | 3 | 147 | 4,367.64 | External | 1 | Reconnaissance | recon | Malicious |
| 8 | 2026-03-28 13:46:10 | 187.180.129.5 | 10.0.1.14 | 32133 | 502 | Modbus_TCP | 71 | 0.04 | 2 | 142 | 3,705.10 | External | 3 | Reconnaissance | escalation | Malicious |
| 9 | 2026-03-28 13:46:20 | 187.180.129.5 | 10.0.1.21 | 62585 | 502 | Modbus_TCP | 100 | 0.04 | 3 | 300 | 7,590.33 | External | 16 | Reconnaissance | escalation | Malicious |
| 10 | 2026-03-28 13:46:30 | 187.180.129.5 | 10.0.1.26 | 11569 | 502 | Modbus_TCP | 70 | 0.00 | 3 | 210 | 67,105.88 | External | 16 | Reconnaissance | escalation | Malicious |
Showing first 10 of 60 sample rows
Data Visualization Interactive
Numeric Trends
Category Distribution
Provided Citation
IoTSyn Engine v3.1.0. (2026). IIoT Network Dataset [iotsyn_69d115dc8c6862.91946550] [Data set]. IoTSyn Dataset Generator. https://iotsyn.com/view.php?uid=iotsyn_69d115dc8c6862.91946550
This citation is displayed as supplied. Automatic style conversion is disabled because structured citation metadata is not recorded.
Source metadata: IoTSyn Generated (2026)
Indexed by IoTDataset.com on Apr 04, 2026
Review the Source Record
Confirm the licence, version, access conditions, file format, and provenance at the source before use.