~60 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Info | OS | Devicetype | Count | Percent |
---|---|---|---|---|---|---|---|
ssh | OpenSSH | 5.1p1 | FreeBSD 20080901; protocol 2.0 | FreeBSD | 11736 | 19.493 | |
http | 10770 | 17.888 | |||||
ssh | OpenSSH | 5.4p1 | FreeBSD 20100308; protocol 2.0 | FreeBSD | 8309 | 13.801 | |
irc | Dancer ircd | 4050 | 6.727 | ||||
http | SonicWALL | firewall | 3695 | 6.137 | |||
http | WangWnagSimpleServer | 1.0 | 2421 | 4.021 | |||
pop3 | qmail pop3d | 2368 | 3.933 | ||||
no match | 2364 | 3.926 | |||||
chat | AIM or ICQ server | 2233 | 3.709 | ||||
pop3 | Zimbra pop3d | 1774 | 2.947 | ||||
ssl | SSLv3 | 965 | 1.603 | ||||
http | AIM | 1.0 | 617 | 1.025 | |||
ssh | OpenSSH | 5.3 | protocol 2.0 | 610 | 1.013 | ||
http | lighttpd | 1.4.19 | 490 | 0.814 | |||
http | lighttpd | 1.4.29 | 435 | 0.723 | |||
socks5 | GSSAPI authentication required | 396 | 0.658 | ||||
pop3 | Dovecot pop3d | 301 | 0.5 | ||||
ssh | OpenSSH | 4.5p1 | FreeBSD 20061110; protocol 2.0 | FreeBSD | 253 | 0.42 | |
ssh | Dropbear sshd | 0.51 | protocol 2.0 | Linux | 241 | 0.4 | |
http | Microsoft IIS httpd | 6.0 | Windows | 166 | 0.276 | ||
pop3 | Qpopper pop3d | 4.0.9 | 150 | 0.249 | |||
pop3 | Courier pop3d | 149 | 0.247 | ||||
pop3 | Qpop pop3d | 3.0.2 | 148 | 0.246 | |||
http | GeoVision GeoHttpServer for webcams | webcam | 128 | 0.213 | |||
http | Boa HTTPd | 0.94.14rc21 | 127 | 0.211 | |||
http | GoAhead-Webs httpd | 117 | 0.194 | ||||
pop3 | Qpopper pop3d | 4.0.5 | 115 | 0.191 | |||
http | Netwave IP camera http config | webcam | 113 | 0.188 | |||
http | Microsoft HTTPAPI httpd | 2.0 | SSDP/UPnP | Windows | 99 | 0.164 | |
pop3 | DavMail pop3d | 3.9.8-1921 | 94 | 0.156 | |||
http | Apache | 2.2.16 | (Debian) DAV/2 SVN/1.6.12 PHP/5.3.10 | 94 | 0.156 | ||
ssh | protocol 1.5 | 93 | 0.154 | ||||
pop3 | MailEnable POP3 Server | Windows | 91 | 0.151 | |||
http | Avtech AVN801 network camera | 1.0 | UPnP 1.0 | webcam | 90 | 0.149 | |
http | Apache Tomcat/Coyote JSP engine | 1.1 | 87 | 0.145 | |||
http | General User | 85 | 0.141 | ||||
http | Microsoft IIS httpd | 77 | 0.128 | ||||
http | Apache | 2.2.9 | (Debian) DAV/2 SVN/1.5.1 PHP/5.2.17 mod_ssl/2.2.9 OpenSSL/0.9.8g | 77 | 0.128 | ||
http | thttpd | 2.24 | 68 | 0.113 | |||
pop3 | JAMES pop3d | 2.3.1 | 63 | 0.105 | |||
http | Apache | 58 | 0.096 | ||||
vnc | VNC | protocol 3.8 | 57 | 0.095 | |||
ssl | TLS | 1.0 | 56 | 0.093 | |||
pop3 | 54 | 0.09 | |||||
http | PDR-M800 | 1.0 | 54 | 0.09 | |||
http | Apache | 2.2.16 | (Debian) DAV/2 SVN/1.6.12 PHP/5.2.17 | 52 | 0.086 | ||
pop3 | CommuniGate Pro | 4.1.8 | 51 | 0.085 | |||
http | Apache | 2.2.16 | DAV/2 SVN/1.6.12 PHP/5.3.10 | 50 | 0.083 | ||
telnet | 48 | 0.08 | |||||
pop3 | Microsoft Exchange 2003 pop3d | 6.5.7638.1 | Windows | 47 | 0.078 | ||
pop3 | Microsoft Exchange 2007-2010 pop3d | Windows | 46 | 0.076 | |||
pop3 | Cubic Circle Cucipop pop3d | 1.31 | 42 | 0.07 | |||
http | lighttpd | 1.4.28 | 41 | 0.068 | |||
http | Apache | 2.2.16 | (Debian) DAV/2 SVN/1.6.12 PHP/5.3.10 mod_ssl/2.2.16 OpenSSL/0.9.8o | 41 | 0.068 | ||
arcserve | ARCserve Discovery | 40 | 0.066 | ||||
remoting | MS .NET Remoting services | 39 | 0.065 | ||||
ftp | Microsoft ftpd | Windows | 36 | 0.06 | |||
pop3 | ipop3d | 2003.83rh | 35 | 0.058 | |||
pop3 | hMailServer pop3d | Windows | 35 | 0.058 | |||
http | thttpd | 2.25b | 35 | 0.058 | |||
http | uc-httpd | 1.0.0 | 33 | 0.055 | |||
nntp | INN nntpd | posting ok | 28 | 0.047 | |||
http | Apache | 2.2.16 | DAV/2 SVN/1.6.12 PHP/5.2.17 | 28 | 0.047 | ||
pop3 | qpopper | 27 | 0.045 | ||||
http | Indy | 9.0.50 | 27 | 0.045 | |||
http | Boa HTTPd | 0.94.13 | 27 | 0.045 | |||
http | Apache | 2.2.16 | DAV/2 SVN/1.6.12 | 27 | 0.045 | ||
http | mini_httpd | 1.19 19dec2003 | 26 | 0.043 | |||
http | Apache | 2.2.16 | DAV/2 SVN/1.6.12 PHP/5.3.10 mod_ssl/2.2.16 OpenSSL/0.9.8o | 26 | 0.043 | ||
http | Apache | 2.2.9 | DAV/2 SVN/1.5.1 PHP/5.2.17 mod_ssl/2.2.9 OpenSSL/0.9.8g | 25 | 0.042 | ||
http-proxy | Squid http proxy | 2.7.STABLE9 | 24 | 0.04 | |||
http | GoAhead-Webs | 23 | 0.038 | ||||
http | Apache | 2.2.3 | (CentOS) | 23 | 0.038 | ||
http | Apache | 2.2.16 | (Debian) DAV/2 SVN/1.6.12 PHP/5.2.17 mod_ssl/2.2.16 OpenSSL/0.9.8o | 23 | 0.038 | ||
xml | 22 | 0.037 | |||||
vnc | RealVNC Enterprise | protocol 4.1 | 22 | 0.037 | |||
rtsp | 22 | 0.037 | |||||
http | uTorrent WebUI | Windows | 22 | 0.037 | |||
http | Hikvision-Webs | 22 | 0.037 | ||||
flexlm | FlexLM license manager | 22 | 0.037 | ||||
irc-proxy | psyBNC | 2.3.1 | 21 | 0.035 | |||
http | thttpd | Panasonic BB-HCM511 IP camera http config | 21 | 0.035 | |||
http | lighttpd | 1.4.20 | 21 | 0.035 | |||
http | Apache | SSL-only mode | 21 | 0.035 | |||
http | SonicWALL firewall http config | firewall | 20 | 0.033 | |||
ftp | 20 | 0.033 | |||||
directconnect | Direct Connect P2P | Windows | 20 | 0.033 |