~22 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Version | Count |
Percent |
|---|---|---|---|---|
| http-proxy | Squid http proxy | 2.6.STABLE21 | 4681 | 20.492 |
| irc | Dancer ircd | 4044 | 17.703 | |
| http | 2662 | 11.653 | ||
| chat | AIM or ICQ server | 2046 | 8.957 | |
| telnet | Cisco telnetd | 1769 | 7.744 | |
| http | Microsoft IIS httpd | 1650 | 7.223 | |
| no match | -/- | -/- | 1588 | 6.952 |
| telnet | 743 | 3.253 | ||
| http | Secure Computing Sidewinder firewall http admin | 700 | 3.064 | |
| http | lighttpd | 1.4.19 | 417 | 1.826 |
| http | lighttpd | 1.4.29 | 168 | 0.735 |
| http | Microsoft HTTPAPI httpd | 2.0 | 129 | 0.565 |
| http | GoAhead-Webs httpd | 119 | 0.521 | |
| ssh | 95 | 0.416 | ||
| http | thttpd | 2.24 | 73 | 0.32 |
| vnc | VNC | 69 | 0.302 | |
| http | Apache Tomcat/Coyote JSP engine | 1.1 | 67 | 0.293 |
| http | Boa HTTPd | 0.94.14rc21 | 38 | 0.166 |
| socks5 | 36 | 0.158 | ||
| http-proxy | Squid http proxy | 2.7.STABLE9 | 31 | 0.136 |
| http | thttpd | 28 | 0.123 | |
| http | Hikvision-Webs | 23 | 0.101 | |
| ftp | 23 | 0.101 | ||
| netbios-ssn | 22 | 0.096 | ||
| ftp | Microsoft ftpd | 22 | 0.096 | |
| http | thttpd | 2.25b | 21 | 0.092 |
| http | CCProxy | 21 | 0.092 | |
| ssh | OpenSSH | 4.3 | 19 | 0.083 |
| arcserve | ARCserve Discovery | 19 | 0.083 | |
| uptime-agent | up.time server monitor | 18 | 0.079 | |
| http-proxy | Squid http proxy | 3.1.10 | 17 | 0.074 |