Data Science, Artificial Intelligence, Open Data, Open Source, Botnet.
ON l.id = r.id AND l.ip < r.ip GROUP BY 1, 2 HAVING COUNT() >= {min_pair_incidents} AND COUNT(DISTINCT site_id) >= {min_pair_sites} Figure 3: IP pairs SQL with experiment parameters In the example, we calculate pairs and features for each pair. In the example, we included the number of incidents