~13 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
irc | Dancer ircd | 3594 | 25.721 |
no match | -/- | 2191 | 15.68 |
chat | AIM or ICQ server | 1569 | 11.229 |
ssl | SSLv3 | 1520 | 10.878 |
flexlm | FlexLM license manager | 762 | 5.453 |
http | 534 | 3.822 | |
ncacn_http | Microsoft Windows RPC over HTTP | 497 | 3.557 |
http | Boa HTTPd | 465 | 3.328 |
http | thttpd | 363 | 2.598 |
http | lighttpd | 355 | 2.541 |
http-proxy | Squid http proxy | 172 | 1.231 |
http | Microsoft IIS httpd | 163 | 1.167 |
http | GoAhead-Webs httpd | 153 | 1.095 |
landesk | LANDesk Management Suite | 142 | 1.016 |
remoting | MS .NET Remoting services | 113 | 0.809 |
http | Microsoft HTTPAPI httpd | 100 | 0.716 |
ssh | 79 | 0.565 | |
ssh | OpenSSH | 78 | 0.558 |
http | Apache | 72 | 0.515 |
ssl | TLSv1 | 58 | 0.415 |
achat | AChat chat system | 55 | 0.394 |
telnet | 48 | 0.344 | |
vnc | VNC | 43 | 0.308 |
http | WangWnagSimpleServer | 42 | 0.301 |
arcserve | ARCserve Discovery | 36 | 0.258 |
http | TimesTen httpd | 34 | 0.243 |
mysql | MySQL | 33 | 0.236 |
ftp | Microsoft ftpd | 32 | 0.229 |
http | Apache Tomcat/Coyote JSP engine | 31 | 0.222 |
giop | omniORB omniNames | 28 | 0.2 |
giop | CORBA naming service | 22 | 0.157 |
nntp | INN nntpd | 21 | 0.15 |
ftp | vsftpd | 20 | 0.143 |
http | Hikvision-Webs | 18 | 0.129 |
ftp | 18 | 0.129 | |
smtp | 17 | 0.122 | |
http | nginx | 15 | 0.107 |
ftp | Pure-FTPd | 13 | 0.093 |
smtp | RaidenMAILD smtpd | 12 | 0.086 |
sdlog | RSA SecureID Ace Server | 12 | 0.086 |
http | GoAhead-Webs | 12 | 0.086 |
ssl | Microsoft IIS SSL | 11 | 0.079 |
ftp | Check Point Firewall-1 ftpd | 11 | 0.079 |
progress | Progress Database | 10 | 0.072 |
http | http server 1.0 | 10 | 0.072 |
ftp | ProFTPD | 10 | 0.072 |
ftp | FileZilla ftpd | 10 | 0.072 |