~83 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Version | Count |
Percent |
|---|---|---|---|---|
| netbios-ssn | Nepenthes honeypot netbios-ssn | 25598 | 30.523 | |
| telnet | 18740 | 22.346 | ||
| http | 10487 | 12.505 | ||
| no match | -/- | -/- | 6711 | 8.002 |
| irc | Dancer ircd | 4030 | 4.805 | |
| http | SonicWALL | 3690 | 4.4 | |
| chat | AIM or ICQ server | 2194 | 2.616 | |
| telnet | Cisco IOS telnetd | 2076 | 2.475 | |
| ssl | SSLv3 | 1729 | 2.062 | |
| telnet | Cisco 1721 router telnetd | 1548 | 1.846 | |
| http-proxy | EZproxy web proxy | 1248 | 1.488 | |
| http | AIM | 1.0 | 627 | 0.748 |
| http | lighttpd | 1.4.19 | 441 | 0.526 |
| http | lighttpd | 1.4.29 | 409 | 0.488 |
| http | WangWnagSimpleServer | 1.0 | 258 | 0.308 |
| http | Gateway-Webs | 253 | 0.302 | |
| http | Apache | 2.2.3 | 231 | 0.275 |
| http | Microsoft IIS httpd | 6.0 | 223 | 0.266 |
| http | GoAhead-Webs httpd | 162 | 0.193 | |
| ssl | TLS | 1.0 | 140 | 0.167 |
| ftp | Microsoft ftpd | 117 | 0.14 | |
| http | Microsoft HTTPAPI httpd | 2.0 | 97 | 0.116 |
| ssh | 94 | 0.112 | ||
| http | Apache Tomcat/Coyote JSP engine | 1.1 | 87 | 0.104 |
| http | Microsoft IIS httpd | 85 | 0.101 | |
| http | Netwave IP camera http config | 74 | 0.088 | |
| http | Avtech AVN801 network camera | 1.0 | 71 | 0.085 |
| http | Apache | 2.2.14 | 70 | 0.083 |
| http | thttpd | 2.24 | 62 | 0.074 |
| telnet | Cisco router telnetd | 60 | 0.072 | |
| http | Boa HTTPd | 0.94.14rc21 | 56 | 0.067 |
| http | Apache | 56 | 0.067 | |
| vnc | VNC | 51 | 0.061 | |
| ftp | 50 | 0.06 | ||
| http | PDR-M800 | 1.0 | 48 | 0.057 |
| http | Apache | 2.2.15 | 38 | 0.045 |
| ftp | ProFTPD | 32 | 0.038 | |
| arcserve | ARCserve Discovery | 30 | 0.036 | |
| nntp | INN nntpd | 28 | 0.033 | |
| http | mini_httpd | 1.19 19dec2003 | 27 | 0.032 |
| http | Apache | 2.2.22 | 25 | 0.03 |
| http-proxy | Squid http proxy | 2.7.STABLE9 | 23 | 0.027 |
| http | GoAhead-Webs | 23 | 0.027 | |
| ssh | OpenSSH | 3.8.1p1 Debian 8.sarge.6 | 22 | 0.026 |
| ftp | vsftpd | 2.0.8 or later | 22 | 0.026 |
| ftp | Pure-FTPd | 22 | 0.026 | |
| http | thttpd | 2.24 26oct2003 | 21 | 0.025 |
| http | thttpd | 21 | 0.025 | |
| http | Apache | 2.2.11 | 21 | 0.025 |
| http | Apache | 1.3.37 | 21 | 0.025 |
| http | uTorrent WebUI | 19 | 0.023 | |
| http | thttpd | 2.25b | 19 | 0.023 |
| http | Hikvision-Webs | 19 | 0.023 | |
| http | GoAhead-Webs embedded httpd | 19 | 0.023 | |
| http | Apache | 2.2.17 | 19 | 0.023 |
| http | Apache | 2.2.16 | 19 | 0.023 |
| http | Apache | 2.0.53 | 19 | 0.023 |
| http | Mbedthis-Appweb | 2.0.4 | 17 | 0.02 |
| upnp | Portable SDK for UPnP devices | 1.3.1 | 16 | 0.019 |
| ssh | OpenSSH | 4.3 | 16 | 0.019 |
| http | Apache | 2.2.9 | 16 | 0.019 |
| http | Apache | 1.3.28 | 16 | 0.019 |
| telnet | Frontier Internet * | 15 | 0.018 | |
| http | uc-httpd | 1.0.0 | 15 | 0.018 |