MAVHoney-D46: A 46-Day Multi-Continental Dataset of Real-World Attack Traffic Against MAVLink-Based UAV Communication

MAVHoney-D46 is the first publicly available, multi-continental dataset of real-world network traffic targeting MAVLink-based Unmanned Aerial Vehicle (UAV) Ground Control Stations (GCS). Deployed over 46 days (April 16 – May 31, 2026) across three geographic locations in India and the US, the dataset records 15.4 million log entries across 33,207 connections from 4,330 unique source IPs spanning 40+ countries. The dataset contains region-specific folders (india/, static/, and us/) with logs and CSVs detailing connection sessions, decoded MAVLink traffic, classification intent (SCANNER, RECON, CONTROL), firewall blocks, and concurrent SSH brute-force attempts. To protect threat actor privacy while retaining georegion characteristics, all public IPv4 source addresses are partially masked using a consistent A.B.x.x format. This dataset accompanies the paper "MAVHoney-D46: A 46-Day Multi-Continental Dataset of Real-World Attack Traffic Against MAVLink-Based UAV Communication."