2019年の IoT ボット観測状況

**Executive summary:** This IIJ honeypot report summarizes 2019 observations of dominant IoT botnets (Mirai and its many variants, Hajime, and qBot families), highlighting shifts in targeted ports and infection vectors, exploitation of known device vulnerabilities (e.g., CVE-2017-17215, CVE-2014-8361), large-scale infections by fbot/estella/moobot families used in high-impact DDoS incidents, and the limited usefulness of a publicly leaked Telnet credential list.