To request access this dataset you will need to login with an IMPACT account. Accounts are free. If you don't have one please register.
This dataset is no longer available and has a current status of 'Withdrawn'.
Please see the catalog for a listing of currently available datasets.

Summary

DS-0322
Kraken Botnet Sinkhole Connection Data
Dataset
Georgia Tech
Georgia Tech
06/01/2010
06/07/2010
43 (lowest rank is 55)

Category & Restrictions

Geolocation Data
Restricted
true

ICC/Researcher    MOA

Description


Kraken Client Connection Data

Client connection data from a Kraken sinkhole. One CSV file per day. Each line contains a timestamp at minute granularity, the IPv4 address of the connecting client (bot), and the number of attempted connections from that IP address in that minute. Number of attempted connections measured by the number of TCP packets received with the TCP SYN flag set. Sorted by time ascending, then by IP ascending.

Additional Details

302.7MB
false
false
malware, spamming, transport layer protocols, transmission control protocol, packets, kraken botnet sinkhole connection data, 322, kraken botnet, georgia tech, ipv4, ip address, domain name system, internet protocol, botnet, network packet, dns sinkhole