~13 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Count |
Percent |
|---|---|---|---|
| irc | Dancer ircd | 4063 | 30.303 |
| chat | AIM or ICQ server | 2333 | 17.4 |
| no match | -/- | 2038 | 15.2 |
| ssl | TLSv1 | 1204 | 8.98 |
| http | 473 | 3.528 | |
| ssl | SSLv3 | 440 | 3.282 |
| http | lighttpd | 417 | 3.11 |
| mysql | MySQL | 360 | 2.685 |
| irc-proxy | psyBNC | 252 | 1.879 |
| http | thttpd | 192 | 1.432 |
| http | Microsoft IIS httpd | 188 | 1.402 |
| http | Microsoft HTTPAPI httpd | 142 | 1.059 |
| http | GoAhead-Webs httpd | 117 | 0.873 |
| ssh | 95 | 0.709 | |
| http-proxy | Squid http proxy | 83 | 0.619 |
| http | Boa HTTPd | 81 | 0.604 |
| http | Apache | 81 | 0.604 |
| maxdb | SAP MaxDB | 80 | 0.597 |
| ssh | OpenSSH | 78 | 0.582 |
| vnc | VNC | 61 | 0.455 |
| telnet | 46 | 0.343 | |
| http | Hikvision-Webs | 34 | 0.254 |
| ftp | Microsoft ftpd | 33 | 0.246 |
| http | Apache Tomcat/Coyote JSP engine | 30 | 0.224 |
| damewaremr | DameWare Mini Remote Control | 29 | 0.216 |
| smtp | Microsoft ESMTP | 21 | 0.157 |
| http | nginx | 17 | 0.127 |
| ftp | vsftpd | 17 | 0.127 |
| ftp | ProFTPD | 14 | 0.104 |
| ftp | 14 | 0.104 | |
| smtp | 13 | 0.097 | |
| ftp | FileZilla ftpd | 13 | 0.097 |
| http-proxy | F5 BIG-IP load balancer http proxy | 12 | 0.089 |
| vnc | RealVNC Enterprise | 11 | 0.082 |
| telnet | Allied Telesis x900-series switch telnetd | 11 | 0.082 |
| arcserve | ARCserve Discovery | 11 | 0.082 |
| smtp | Microsoft Exchange smtpd | 10 | 0.075 |
| http | http server 1.0 | 10 | 0.075 |