~14 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Count | Percent |
---|---|---|---|---|
chat | AIM or ICQ server | 2280 | 16.033 | |
http | 2015 | 14.169 | ||
ssl | SSLv3 | 1921 | 13.508 | |
no match | -/- | -/- | 1602 | 11.265 |
http | SonicWALL | 752 | 5.288 | |
klogin | HP-UX kerberized rlogin | 677 | 4.761 | |
imap | Courier Imapd | 638 | 4.486 | |
klogin | AIX kerberized rlogin | 471 | 3.312 | |
http | lighttpd | 1.4.19 | 436 | 3.066 |
http | Apache | 2.2.8 | 387 | 2.721 |
klogin | Kerberized rlogin | 368 | 2.588 | |
http | Router | 271 | 1.906 | |
http | Microsoft IIS httpd | 205 | 1.442 | |
http | Microsoft HTTPAPI httpd | 2.0 | 144 | 1.013 |
http | GoAhead-Webs httpd | 118 | 0.83 | |
ssh | 102 | 0.717 | ||
http | lighttpd | 1.4.29 | 98 | 0.689 |
http | AIM | 1.0 | 95 | 0.668 |
ssh | OpenSSH | 5.8 | 76 | 0.534 |
http | thttpd | 2.24 | 71 | 0.499 |
vnc | VNC | 63 | 0.443 | |
telnet | 56 | 0.394 | ||
login | Tru64 Unix logind | 56 | 0.394 | |
arcserve | ARCserve Discovery | 55 | 0.387 | |
ssl | TLS | 1.0 | 51 | 0.359 |
http | Boa HTTPd | 0.94.14rc21 | 39 | 0.274 |
http | Apache Tomcat/Coyote JSP engine | 1.1 | 31 | 0.218 |
http | Apache | 28 | 0.197 | |
ftp | 28 | 0.197 | ||
http | thttpd | 2.25b | 23 | 0.162 |
http-proxy | Squid http proxy | 2.7.STABLE9 | 23 | 0.162 |
http | Apache | 2.2.3 | 23 | 0.162 |
ssh | OpenSSH | 4.3 | 20 | 0.141 |
http-proxy | Squid http proxy | 2.6.STABLE12 | 20 | 0.141 |
ftp | Microsoft ftpd | 20 | 0.141 | |
smtp | 19 | 0.134 | ||
login | 19 | 0.134 | ||
http | Hikvision-Webs | 18 | 0.127 | |
ssl | Microsoft IIS SSL | 17 | 0.12 | |
smtp | Postfix smtpd | 16 | 0.113 | |
http | TP-LINK WA500G WAP http config | 16 | 0.113 | |
http | thttpd | 16 | 0.113 | |
http | Avtech AVN801 network camera | 1.0 | 16 | 0.113 |
ftp | Pure-FTPd | 16 | 0.113 | |
http | Apache | 2.2.14 | 15 | 0.105 |