Feature-Based DNS Traffic Dataset for Heavy Attack Detection

This dataset contains extracted and engineered features from DNS traffic designed to support the analysis and detection of malicious and anomalous DNS behavior, including heavy attack scenarios. It includes lexical characteristics of domain names, DNS resource record statistics, entropy-based measures, infrastructure diversity indicators (such as name servers, IPs, countries, and ASNs), and TTL-related features. Each record represents summarized DNS activity labeled for attack behavior, making the dataset suitable for cybersecurity research, DNS anomaly detection, and machine learning–based intrusion detection studies.