"DPR-NIDS2025 (DoS, PortScanning, Remote Code Execution)"

"This dataset was collected from a minimal testbed setup formed to generate genuine data, train Machine Learning and Artificial Intelligence models on it, then use it for further threat hunting models experiments. The setup comprises 3 node machines (Lenovo ThinkCentre) running microservices (ex: mongodb databases, elasticsearch, nginx, apache) connected and orchestrated by a fourth master node. All within the perimeters of Kubernetes cluster belonging to a single LAN. Another attacker node was set outside the LAN of the 4 nodes, conducting 3 attack types, Denial of Service (DoS), PortScanning, and Remote Code Execution (RCE). It is already processed, cleaned, and well balanced, since we had a control over the attacking and monitoring process. Two main files in a CSV format are available for ML\/DL\/LLM training and testing processes."