~16 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Count |
Percent |
|---|---|---|---|
| irc | Dancer ircd | 4029 | 24.852 |
| no match | -/- | 2659 | 16.401 |
| chat | AIM or ICQ server | 2310 | 14.249 |
| ssl | TLSv1 | 1958 | 12.077 |
| http | WangWnagSimpleServer | 1699 | 10.48 |
| http | 503 | 3.103 | |
| ssl | SSLv3 | 439 | 2.708 |
| http | lighttpd | 416 | 2.566 |
| http | Apache | 347 | 2.14 |
| http | Microsoft IIS httpd | 201 | 1.24 |
| http | thttpd | 195 | 1.203 |
| http | GoAhead-Webs httpd | 142 | 0.876 |
| http | Microsoft HTTPAPI httpd | 137 | 0.845 |
| ssh | OpenSSH | 99 | 0.611 |
| ssh | 95 | 0.586 | |
| http | Boa HTTPd | 95 | 0.586 |
| vnc | VNC | 52 | 0.321 |
| telnet | 52 | 0.321 | |
| http-proxy | Squid http proxy | 52 | 0.321 |
| arcserve | ARCserve Discovery | 39 | 0.241 |
| http | Hikvision-Webs | 38 | 0.234 |
| ftp | Microsoft ftpd | 35 | 0.216 |
| nntp | INN nntpd | 28 | 0.173 |
| mysql | MySQL | 27 | 0.167 |
| http | Apache Tomcat/Coyote JSP engine | 24 | 0.148 |
| ftp | ProFTPD | 22 | 0.136 |
| http | nginx | 21 | 0.13 |
| ftp | vsftpd | 19 | 0.117 |
| smtp | Microsoft ESMTP | 17 | 0.105 |
| ftp | 16 | 0.099 | |
| upnp | Portable SDK for UPnP | 15 | 0.093 |
| remoting | MS .NET Remoting services | 15 | 0.093 |
| ftp | FileZilla ftpd | 15 | 0.093 |
| ftp | Pure-FTPd | 14 | 0.086 |
| smtp | Microsoft Exchange smtpd | 12 | 0.074 |
| vnc | RealVNC Personal | 11 | 0.068 |
| http-proxy | F5 BIG-IP load balancer http proxy | 11 | 0.068 |
| vnc | RealVNC Enterprise | 10 | 0.062 |
| vnc | 10 | 0.062 | |
| smtp | 10 | 0.062 | |
| netbios-ssn | 10 | 0.062 | |
| http | http server 1.0 | 10 | 0.062 |