~37 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
netbios-ssn | Nepenthes honeypot netbios-ssn | 19929 | 52.607 |
no match | -/- | 5961 | 15.735 |
irc | Dancer ircd | 3490 | 9.213 |
telnet | Cisco IOS telnetd | 1932 | 5.1 |
telnet | 1848 | 4.878 | |
chat | AIM or ICQ server | 1311 | 3.461 |
telnet | Cisco 1721 router telnetd | 850 | 2.244 |
klogin | Kerberized rlogin | 510 | 1.346 |
http | lighttpd | 336 | 0.887 |
http | 282 | 0.744 | |
ssh | OpenSSH | 145 | 0.383 |
http | WangWnagSimpleServer | 144 | 0.38 |
http | Microsoft IIS httpd | 143 | 0.377 |
http | Microsoft HTTPAPI httpd | 106 | 0.28 |
ftp | Microsoft ftpd | 78 | 0.206 |
ssh | 74 | 0.195 | |
telnet | Cisco router telnetd | 56 | 0.148 |
ftp | ProFTPD | 45 | 0.119 |
http | Boa HTTPd | 43 | 0.114 |
arcserve | ARCserve Discovery | 41 | 0.108 |
ftp | 33 | 0.087 | |
vnc | VNC | 32 | 0.084 |
klogin | Solaris kerberized rlogin | 28 | 0.074 |
http | nginx | 27 | 0.071 |
nntp | INN nntpd | 24 | 0.063 |
klogin | Encrypted Kerberized rlogin | 24 | 0.063 |
mysql | MySQL | 19 | 0.05 |
ftp | FileZilla ftpd | 19 | 0.05 |
ftp | vsftpd | 16 | 0.042 |
ftp | Serv-U ftpd | 15 | 0.04 |
ftp | Pure-FTPd | 14 | 0.037 |
smtp | 13 | 0.034 | |
telnet | Frontier Internet * | 12 | 0.032 |
vnc | 10 | 0.026 |