~33 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Count |
Percent |
|---|---|---|---|
| no match | -/- | 9412 | 28.147 |
| socks5 | 9277 | 27.743 | |
| irc | Dancer ircd | 4017 | 12.013 |
| chat | AIM or ICQ server | 1980 | 5.921 |
| telnet | Cisco telnetd | 1920 | 5.742 |
| irc | Unreal ircd | 1274 | 3.81 |
| irc | InspIRCd | 769 | 2.3 |
| telnet | 704 | 2.105 | |
| http | lighttpd | 596 | 1.782 |
| http | 503 | 1.504 | |
| http | Boa HTTPd | 335 | 1.002 |
| http | Microsoft IIS httpd | 194 | 0.58 |
| ssh | OpenSSH | 157 | 0.47 |
| http | Microsoft HTTPAPI httpd | 142 | 0.425 |
| http | thttpd | 127 | 0.38 |
| http | GoAhead-Webs httpd | 117 | 0.35 |
| ssh | 92 | 0.275 | |
| http | Apache | 76 | 0.227 |
| http | Apache Tomcat/Coyote JSP engine | 74 | 0.221 |
| vnc | VNC | 60 | 0.179 |
| http-proxy | Squid http proxy | 60 | 0.179 |
| irc | 46 | 0.138 | |
| irc | ircu ircd | 42 | 0.126 |
| irc | IRCnet ircd | 37 | 0.111 |
| ftp | Microsoft ftpd | 28 | 0.084 |
| http | Hikvision-Webs | 27 | 0.081 |
| mysql | MySQL | 25 | 0.075 |
| arcserve | ARCserve Discovery | 24 | 0.072 |
| irc | ratbox ircd | 22 | 0.066 |
| http | nginx | 22 | 0.066 |
| smtp | Microsoft ESMTP | 16 | 0.048 |
| radmind | radmind | 16 | 0.048 |
| ftp | 16 | 0.048 | |
| vnc | RealVNC Enterprise | 14 | 0.042 |
| upnp | Microsoft Windows UPnP | 14 | 0.042 |
| ftp | Pure-FTPd | 14 | 0.042 |
| ftp | ProFTPD | 14 | 0.042 |
| ftp | FileZilla ftpd | 13 | 0.039 |
| java-rmi | Java RMI | 11 | 0.033 |
| http-proxy | F5 BIG-IP load balancer http proxy | 11 | 0.033 |
| http | Jetty | 11 | 0.033 |
| http | GeoVision GeoHttpServer for webcams | 11 | 0.033 |
| ssl | TLS | 10 | 0.03 |
| ssh | MikroTik RouterOS sshd | 10 | 0.03 |
| smtp | Microsoft Exchange smtpd | 10 | 0.03 |
| smtp | 10 | 0.03 | |
| http | http server 1.0 | 10 | 0.03 |
| ftp | vsftpd | 10 | 0.03 |