~19 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Count | Percent |
---|---|---|---|---|
irc | Dancer ircd | 4034 | 20.517 | |
no match | -/- | -/- | 3744 | 19.042 |
socks5 | 3039 | 15.456 | ||
http | WangWnagSimpleServer | 1.0 | 2069 | 10.523 |
chat | AIM or ICQ server | 2043 | 10.391 | |
http | 943 | 4.796 | ||
http | lighttpd | 1.4.19 | 410 | 2.085 |
http | Microsoft IIS httpd | 314 | 1.597 | |
http | Microsoft HTTPAPI httpd | 2.0 | 226 | 1.149 |
http | lighttpd | 1.4.29 | 187 | 0.951 |
irc-proxy | psyBNC | 2.3.2-7 | 127 | 0.646 |
http | GoAhead-Webs httpd | 126 | 0.641 | |
http | Boa HTTPd | 0.94.14rc21 | 114 | 0.58 |
socks4 | Connection rejected or failed; connections possibly ok | 105 | 0.534 | |
ssh | 92 | 0.468 | ||
http | Apache Tomcat/Coyote JSP engine | 1.1 | 85 | 0.432 |
http | thttpd | 2.24 | 79 | 0.402 |
giop | CORBA naming service | 78 | 0.397 | |
remoting | MS .NET Remoting services | 63 | 0.32 | |
directconnect | Direct Connect P2P | 59 | 0.3 | |
http | thttpd | 2.25b | 58 | 0.295 |
telnet | 56 | 0.285 | ||
vnc | VNC | 53 | 0.27 | |
arcserve | ARCserve Discovery | 53 | 0.27 | |
http | Hikvision-Webs | 42 | 0.214 | |
giop | omniORB omniNames | 36 | 0.183 | |
ftp | Microsoft ftpd | 36 | 0.183 | |
ssl | TLS | 1.0 | 28 | 0.142 |
http | MS .NET Remoting httpd | 28 | 0.142 | |
ftp | 28 | 0.142 | ||
nntp | INN nntpd | 26 | 0.132 | |
http | thttpd | 25 | 0.127 | |
http-proxy | Squid http proxy | 2.7.STABLE9 | 24 | 0.122 |
http | Boa HTTPd | 0.94.13 | 24 | 0.122 |
http | lighttpd | 1.4.20 | 22 | 0.112 |
http | Apache | 2.2.3 | 21 | 0.107 |
http | Network Camera | 20 | 0.102 | |
http | GeoVision GeoHttpServer for webcams | 18 | 0.092 | |
ssh | OpenSSH | 4.3 | 17 | 0.086 |
ftp | Pure-FTPd | 16 | 0.081 | |
smtp | 15 | 0.076 |