Seen Time Dataset of Malicious DNS IPs (October 2021)

This collection consists of two complementary datasets focused on the seen time records of IP addresses involved in DNS-related attacks targeting port 53, identified in October 2021. The datasets were constructed using open-source intelligence (OSINT) sources and enriched with historical data from AbuseIPDB.

Raw Data

Description: This dataset includes the full historical seen time records for all IP addresses linked to DNS-related attacks on port 53, as identified by OSINT in October 2021. The data, sourced from AbuseIPDB, encompasses 173 IP addresses before preprocessing, providing a comprehensive view of the observed malicious activities.

Preprocessed Data

Description: This dataset provides the preprocessed seen time records for IP addresses involved in DNS-related attacks on port 53, sourced from OSINT and enriched with data from AbuseIPDB. The preprocessed dataset narrows the focus to 111 IP addresses, each with at least 20 seen time records, offering a high-quality subset for detailed cybersecurity analysis and research into DNS attack trends.