~13 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
irc | Dancer ircd | 3349 | 25.626 |
no match | -/- | 1937 | 14.821 |
http | Microsoft IIS httpd | 1652 | 12.641 |
http | 1101 | 8.425 | |
http | Microsoft HTTPAPI httpd | 1002 | 7.667 |
chat | AIM or ICQ server | 892 | 6.825 |
http | Boa HTTPd | 512 | 3.918 |
http | lighttpd | 300 | 2.296 |
http | nginx | 291 | 2.227 |
ssh | OpenSSH | 281 | 2.15 |
http | Secure Computing Sidewinder firewall http admin | 178 | 1.362 |
remoting | MS .NET Remoting services | 166 | 1.27 |
riak-pbc | Basho Riak | 151 | 1.155 |
ssh | 72 | 0.551 | |
vnc | VNC | 71 | 0.543 |
http | Linksys router http config | 70 | 0.536 |
warcraft | World of Warcraft world server | 68 | 0.52 |
ftp | GlobespanVirata ftpd | 63 | 0.482 |
telnet | 58 | 0.444 | |
ftp | Microsoft ftpd | 50 | 0.383 |
ssl | TLS | 38 | 0.291 |
http | Ubicom | 37 | 0.283 |
http | Motion Camera httpd | 36 | 0.275 |
ssh | MikroTik RouterOS sshd | 29 | 0.222 |
http | MS .NET Remoting httpd | 26 | 0.199 |
ftp | 26 | 0.199 | |
http | WYM httpd | 25 | 0.191 |
http | Router | 25 | 0.191 |
http | D-Link router/Airlink NAS http config | 23 | 0.176 |
arcserve | ARCserve Discovery | 23 | 0.176 |
mysql | MySQL | 21 | 0.161 |
http | TP-LINK Router | 19 | 0.145 |
http | Bentley Geo Web Publisher | 19 | 0.145 |
ftp | FileZilla ftpd | 18 | 0.138 |
http | Router Webserver | 17 | 0.13 |
vnc | RealVNC Enterprise | 15 | 0.115 |
telnet | Cisco 1721 router telnetd | 14 | 0.107 |
http | GoAhead-Webs httpd | 14 | 0.107 |
minecraft | Minecraft game server | 13 | 0.099 |
http | thttpd | 13 | 0.099 |
ftp | Pure-FTPd | 11 | 0.084 |
ftp | ProFTPD | 11 | 0.084 |
secure-socket | CA Secure Socket Adapter | 10 | 0.077 |
ftp | vsftpd | 10 | 0.077 |