Incident Logs

This dataset is real incident logs taken from an Apache2 server. This server was set up to act like it was under real cyberattacks, such as command injections and backdoor attempts. The logs include many kinds of attack activities, such as attempts of command injection and persistent attact. These logs are unlabeled. They are kept in their original form to better test how the models can understand and explain what’s happening in each case. Acknowledgment This work is supported by Computer Science Department, School of Computer Science, Bina Nusantara University, Jakarta, Indonesia and Research and Technology Transfer Office (RTTO) Bina Nusantara University.