CTU Hornet 65 Niner: A network dataset of geographically distributed low-interaction honeypotsMendeley Data

This data article introduces a new network dataset created to help understand how geographical location impacts the quality, type, and amount of incoming network attacks received by honeypots. The dataset consists of 12.4 million network flows collected from nine low-interaction honeypots in nine ci...

Full description

Saved in:
Bibliographic Details
Main Authors: Veronica Valeros, Sebastian Garcia
Format: Article
Language:English
Published: Elsevier 2025-02-01
Series:Data in Brief
Subjects:
Online Access:http://www.sciencedirect.com/science/article/pii/S235234092401223X
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1832576463322218496
author Veronica Valeros
Sebastian Garcia
author_facet Veronica Valeros
Sebastian Garcia
author_sort Veronica Valeros
collection DOAJ
description This data article introduces a new network dataset created to help understand how geographical location impacts the quality, type, and amount of incoming network attacks received by honeypots. The dataset consists of 12.4 million network flows collected from nine low-interaction honeypots in nine cities across the world for 65 days, from April 29th to July 1st, 2024. Each low-interaction honeypot was identically configured to capture incoming attacks using a state-of-the-art network flow collector, Zeek. Honeypots were distributed in nine cities: Amsterdam, Bangalore, Frankfurt, London, New York, San Francisco, Singapore, Toronto, and Sydney. The dataset is in JSON format and contains all types of Zeek network flow files, including protocol-specific logs.
format Article
id doaj-art-366e2d84ddf648618285e0515852ebe8
institution Kabale University
issn 2352-3409
language English
publishDate 2025-02-01
publisher Elsevier
record_format Article
series Data in Brief
spelling doaj-art-366e2d84ddf648618285e0515852ebe82025-01-31T05:11:43ZengElsevierData in Brief2352-34092025-02-0158111261CTU Hornet 65 Niner: A network dataset of geographically distributed low-interaction honeypotsMendeley DataVeronica Valeros0Sebastian Garcia1Corresponding author:; Department of Computer Science, FEL, Czech Technical University in Prague, Technická 2, Prague 126 627, Czech RepublicDepartment of Computer Science, FEL, Czech Technical University in Prague, Technická 2, Prague 126 627, Czech RepublicThis data article introduces a new network dataset created to help understand how geographical location impacts the quality, type, and amount of incoming network attacks received by honeypots. The dataset consists of 12.4 million network flows collected from nine low-interaction honeypots in nine cities across the world for 65 days, from April 29th to July 1st, 2024. Each low-interaction honeypot was identically configured to capture incoming attacks using a state-of-the-art network flow collector, Zeek. Honeypots were distributed in nine cities: Amsterdam, Bangalore, Frankfurt, London, New York, San Francisco, Singapore, Toronto, and Sydney. The dataset is in JSON format and contains all types of Zeek network flow files, including protocol-specific logs.http://www.sciencedirect.com/science/article/pii/S235234092401223XHoneypots datasetCyber securityNetwork attacksGeolocationDistributed attacks
spellingShingle Veronica Valeros
Sebastian Garcia
CTU Hornet 65 Niner: A network dataset of geographically distributed low-interaction honeypotsMendeley Data
Data in Brief
Honeypots dataset
Cyber security
Network attacks
Geolocation
Distributed attacks
title CTU Hornet 65 Niner: A network dataset of geographically distributed low-interaction honeypotsMendeley Data
title_full CTU Hornet 65 Niner: A network dataset of geographically distributed low-interaction honeypotsMendeley Data
title_fullStr CTU Hornet 65 Niner: A network dataset of geographically distributed low-interaction honeypotsMendeley Data
title_full_unstemmed CTU Hornet 65 Niner: A network dataset of geographically distributed low-interaction honeypotsMendeley Data
title_short CTU Hornet 65 Niner: A network dataset of geographically distributed low-interaction honeypotsMendeley Data
title_sort ctu hornet 65 niner a network dataset of geographically distributed low interaction honeypotsmendeley data
topic Honeypots dataset
Cyber security
Network attacks
Geolocation
Distributed attacks
url http://www.sciencedirect.com/science/article/pii/S235234092401223X
work_keys_str_mv AT veronicavaleros ctuhornet65nineranetworkdatasetofgeographicallydistributedlowinteractionhoneypotsmendeleydata
AT sebastiangarcia ctuhornet65nineranetworkdatasetofgeographicallydistributedlowinteractionhoneypotsmendeleydata