  Today, telecommunication service providers (telcos) are exposed to
cyber-attacks executed by compromised IoT devices connected to their customers'
networks. Such attacks might have severe effects not only on the target of
attacks but also on the telcos themselves. To mitigate those risks we propose a
machine learning based method that can detect devices of specific vulnerable
IoT models connected behind a domestic NAT, thereby identifying home networks
that pose a risk to the telco's infrastructure and availability of services. As
part of the effort to preserve the domestic customers' privacy, our method
relies on NetFlow data solely, refraining from inspecting the payload. To
promote future research in this domain we share our novel dataset, collected in
our lab from numerous and various commercial IoT devices.
