Seen Time Dataset of Malicious DNS IPs (October 2021)

This collection consists of two complementary datasets focused on the seen time records of IP addresses involved in DNS-related attacks targeting port 53, identified in October 2021. The datasets were constructed using open-source intelligence (OSINT) sources and enriched with historical data from AbuseIPDB.

Raw Data

Description: This dataset includes the full historical seen time records for all IP addresses linked to DNS-related attacks on port 53, as identified by OSINT in October 2021. The data, sourced from AbuseIPDB, encompasses 173 IP addresses before preprocessing, providing a comprehensive view of the observed malicious activities.

Preprocessed Data

Description: This dataset provides the preprocessed seen time records for IP addresses involved in DNS-related attacks on port 53, sourced from OSINT and enriched with data from AbuseIPDB. The preprocessed dataset narrows the focus to 111 IP addresses, each with at least 20 seen time records, offering a high-quality subset for detailed cybersecurity analysis and research into DNS attack trends.

本数据集集合包含两个互补的数据集，聚焦于2021年10月识别出的、针对53端口的DNS相关攻击所涉及IP地址的可见时间记录。该数据集通过开源情报（open-source intelligence, OSINT）源构建，并结合了AbuseIPDB提供的历史数据进行丰富。

原始数据

描述：本数据集包含2021年10月经由开源情报识别出的、所有与53端口DNS相关攻击关联的IP地址的完整历史可见时间记录。该数据取自AbuseIPDB，预处理前共包含173个IP地址，可全面展现观测到的恶意活动全貌。

预处理后数据

描述：本数据集提供了经预处理的、针对53端口DNS相关攻击所涉IP地址的可见时间记录，数据源自开源情报并结合AbuseIPDB的数据进行了丰富。预处理后的数据集筛选出111个IP地址，每个地址均至少包含20条可见时间记录，可为DNS攻击趋势的详细网络安全分析与研究提供高质量的子集样本。