~274 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Count | Percent |
---|---|---|---|---|
ssh | OpenSSH | 5.3 | 197508 | 72.022 |
ssh | OpenSSH | 4.3 | 25764 | 9.395 |
http | 10190 | 3.716 | ||
ssh | Cisco/3com IPSSHd | 1.12.0 | 9218 | 3.361 |
http | SonicWALL | 3690 | 1.346 | |
chat | AIM or ICQ server | 2216 | 0.808 | |
ssh | MikroTik RouterOS sshd | 1983 | 0.723 | |
ssh | OpenSSH | 5.1p1 Debian 6ubuntu2 | 1752 | 0.639 |
no match | -/- | -/- | 1261 | 0.46 |
ssh | Dropbear sshd | 0.51 | 1208 | 0.441 |
ssh | OpenSSH | 5.8p1 Debian 7ubuntu1 | 960 | 0.35 |
ssl | SSLv3 | 885 | 0.323 | |
ssh | OpenSSH | 5.1p1 Debian 5 | 738 | 0.269 |
ssh | 730 | 0.266 | ||
ssh | OpenSSH | 4.5p1 | 639 | 0.233 |
ssh | OpenSSH | 2.3.0 mikrotik 2.9 | 619 | 0.226 |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | 609 | 0.222 |
http | AIM | 1.0 | 593 | 0.216 |
ssh | Dropbear sshd | 0.52 | 571 | 0.208 |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu6 | 549 | 0.2 |
ssh | OpenSSH | 3.9p1 | 538 | 0.196 |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | 499 | 0.182 |
http | lighttpd | 1.4.29 | 434 | 0.158 |
http | lighttpd | 1.4.19 | 403 | 0.147 |
ssh | OpenSSH | 5.8p2_hpn13v11 | 392 | 0.143 |
http | 3ware 3DM2 Serial RAID http config | 2.0 | 381 | 0.139 |
ssh | Bitvise WinSSHD | 4.13 | 364 | 0.133 |
ssh | OpenSSH | 5.4p1 | 321 | 0.117 |
ftp | vsftpd | 2.0.8 or later | 276 | 0.101 |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze1 | 271 | 0.099 |
ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | 250 | 0.091 |
ssh | OpenSSH | 5.2 | 240 | 0.088 |
ssh | OpenSSH | 5.1 | 235 | 0.086 |
ssh | OpenSSH | 4.2 | 228 | 0.083 |
ssh | OpenSSH | 5.1p1 | 213 | 0.078 |
ssh | OpenSSH | 4.3p2 Debian 9 | 202 | 0.074 |
http | Netwave IP camera http config | 180 | 0.066 | |
http | Microsoft IIS httpd | 6.0 | 180 | 0.066 |
ssh | OpenSSH | 5.8p1 Debian 1ubuntu3 | 175 | 0.064 |
ssh | OpenSSH | 5.8 | 156 | 0.057 |
ssh | OpenSSH | 5.6 | 151 | 0.055 |
ssh | OpenSSH | 4.7p1 Debian 8ubuntu3 | 140 | 0.051 |
http | lighttpd | 138 | 0.05 | |
ssh | OpenSSH | 5.5p1 Debian 6 | 132 | 0.048 |
http | CCProxy | 130 | 0.047 | |
ssh | OpenSSH | 4.3p2 Debian 9etch3 | 129 | 0.047 |
ssh | OpenSSH | 4.7 | 127 | 0.046 |
ssh | OpenSSH | 5.5 | 117 | 0.043 |
ssh | OpenSSH | 6.0 | 114 | 0.042 |
http | GoAhead-Webs httpd | 108 | 0.039 | |
ssh | lshd secure shell | 2.0.4 | 102 | 0.037 |
http | Microsoft HTTPAPI httpd | 2.0 | 95 | 0.035 |
ssh | OpenSSH | 5.5p1 Debian 4ubuntu6 | 90 | 0.033 |
ssh | OpenSSH | 3.5p1 | 88 | 0.032 |
http | Apache Tomcat/Coyote JSP engine | 1.1 | 81 | 0.03 |
http | Avtech AVN801 network camera | 1.0 | 78 | 0.028 |
ssh | OpenSSH | 5.2p1 | 75 | 0.027 |
ssh | OpenSSH | 3.8.1p1 | 74 | 0.027 |
ssh | OpenSSH | 5.9 | 73 | 0.027 |
ssh | OpenSSH | 5.0 | 73 | 0.027 |
http | Microsoft IIS httpd | 71 | 0.026 | |
http | Apache | 2.2.9 | 68 | 0.025 |
ssh | OpenSSH | 5.4 | 67 | 0.024 |
ssh | OpenSSH | 4.5 | 67 | 0.024 |
http | lighttpd | 1.4.26 | 66 | 0.024 |
http | 3ware | 2.0 | 66 | 0.024 |
ssh | OpenSSH | 3.7.1p2 | 61 | 0.022 |
ftp | Microsoft ftpd | 61 | 0.022 | |
ssh | OpenSSH | 4.6 | 60 | 0.022 |
ssh | OpenSSH | 5.4p1_hpn13v11 | 59 | 0.022 |
sftp | ProFTPD mod_sftp | 0.9.8 | 59 | 0.022 |
http | Apache | 58 | 0.021 | |
ssh | OpenSSH | 4.7p1 Debian 8ubuntu1.2 | 56 | 0.02 |
vnc | VNC | 54 | 0.02 | |
http-proxy | CCProxy http proxy | 54 | 0.02 | |
http | PDR-M800 | 1.0 | 54 | 0.02 |
ssh | OpenSSH | 5.9p1-hpn13v11 | 52 | 0.019 |
ssh | Dropbear sshd | 0.53.1 | 51 | 0.019 |
http | thttpd | 2.24 | 51 | 0.019 |
telnet | 50 | 0.018 | ||
ssh | OpenSSH | 3.6.1p2 | 48 | 0.018 |
ssh | OpenSSH | 5.8p1-hpn13v10 | 47 | 0.017 |
ssh | WeOnlyDo sshd | 2.1.3 | 42 | 0.015 |
http-proxy | Squid http proxy | 2.6.STABLE12 | 42 | 0.015 |
http | Boa HTTPd | 0.94.14rc21 | 42 | 0.015 |
ssh | OpenSSH | 3.4p1 | 40 | 0.015 |
http | thttpd | 2.25b | 40 | 0.015 |
ssh | Dropbear sshd | 2011.54 | 38 | 0.014 |
ftp | 38 | 0.014 | ||
ssh | Cisco SSH | 1.25 | 37 | 0.013 |
http | Apache | 2.2.3 | 37 | 0.013 |
ssh | Dropbear sshd | 0.45 | 36 | 0.013 |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu4 | 35 | 0.013 |
http | Apache | 2.2.14 | 35 | 0.013 |
arcserve | ARCserve Discovery | 35 | 0.013 | |
http | thttpd | 34 | 0.012 | |
ssh | OpenSSH | 4.1 | 32 | 0.012 |
ssh | SCS sshd | 3.2.9.1 | 31 | 0.011 |
ssh | OpenSSH | 3.8.1p1 Debian 8.sarge.4 | 31 | 0.011 |
http | thttpd | 2.24 26oct2003 | 31 | 0.011 |
ssh | OpenSSH | 3.8.1p1 Debian 8.sarge.6 | 30 | 0.011 |
ssh | OpenSSH | 4.3p2 | 29 | 0.011 |
http | accwizs | 29 | 0.011 | |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 29 | 0.011 | |
ssh | Dropbear sshd | 0.50 | 28 | 0.01 |
http | mini_httpd | 1.19 19dec2003 | 28 | 0.01 |
ssh | OpenSSH | 5.8p2-hpn13v11 | 27 | 0.01 |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu3 | 26 | 0.009 |
ssh | Dropbear sshd | 0.48 | 26 | 0.009 |
sftp | ProFTPD mod_sftp | 0.9.7 | 26 | 0.009 |
http-proxy | Squid http proxy | 2.7.STABLE9 | 24 | 0.009 |
http | Boa HTTPd | 0.93.15 | 24 | 0.009 |
http | Apache | 2.2.22 | 24 | 0.009 |
ssh | OpenSSH | 4.0 | 23 | 0.008 |
ssh | OpenSSH | 3.4p1 Debian krb5 3.4p1-0woody4 | 23 | 0.008 |
http | GeoVision GeoHttpServer for webcams | 23 | 0.008 | |
ssh | Bitvise WinSSHD | 5.26 | 22 | 0.008 |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu5 | 20 | 0.007 |
ssh | OpenSSH | 5.1p1 Debian 5ubuntu1 | 20 | 0.007 |
http | Hikvision-Webs | 20 | 0.007 | |
ssh | OpenSSH | 5.5p1 Debian 4ubuntu4 | 19 | 0.007 |
ssh | DrayTek Vigor 2820n ADSL router sshd | 2.0 | 19 | 0.007 |
http | Mbedthis-Appweb | 2.0.4 | 19 | 0.007 |
http | dcs-lig-httpd | 19 | 0.007 | |
http | Boa HTTPd | 0.94.13 | 19 | 0.007 |
ssh | OpenSSH | 5.8p2 | 18 | 0.007 |
ssh | OpenSSH | 5.5p1 Debian 4ubuntu5 | 18 | 0.007 |
http | uc-httpd | 1.0.0 | 18 | 0.007 |
http | Indy | 9.00.10 | 18 | 0.007 |
http | GoAhead-Webs | 18 | 0.007 | |
http | Cross Web Server | 18 | 0.007 | |
http | Apache | 2.2.16 | 18 | 0.007 |
ssh | OpenSSH | 3.8p1 Debian 1:3.8p1-3 | 17 | 0.006 |
ssh | Dropbear sshd | 0.49 | 17 | 0.006 |
http | Gadspot/Avtech AV787 webcam http config | 17 | 0.006 | |
ssh | OpenSSH | 4.3p2 Debian 9etch2 | 16 | 0.006 |
ssh | OpenSSH | 3.1p1 | 16 | 0.006 |
ssh | HP Integrated Lights-Out mpSSH | 0.1.0 | 16 | 0.006 |
http | uTorrent WebUI | 16 | 0.006 | |
directconnect | Direct Connect P2P | 16 | 0.006 | |
ssh | OpenSSH | 4.4 | 15 | 0.005 |
ssh | OpenSSH | 3.6.1p2-pwexp22 | 15 | 0.005 |
http | Microsoft IIS httpd | 7.5 | 15 | 0.005 |
http | Microsoft IIS httpd | 5.1 | 15 | 0.005 |
http | GoAhead-Webs | 2.5.0 | 15 | 0.005 |
ftp | Pure-FTPd | 15 | 0.005 |