~12 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Version | Count |
Percent |
|---|---|---|---|---|
| irc | Dancer ircd | 3540 | 29.256 | |
| chat | AIM or ICQ server | 1270 | 10.496 | |
| http | WangWnagSimpleServer | 1.0 | 1233 | 10.19 |
| no match | -/- | -/- | 1140 | 9.421 |
| http | 1135 | 9.38 | ||
| http | lighttpd | 1.4.29 | 461 | 3.81 |
| http | lighttpd | 1.4.19 | 353 | 2.917 |
| http | Microsoft IIS httpd | 339 | 2.802 | |
| ftp | Microsoft ftpd | 272 | 2.248 | |
| http | Microsoft HTTPAPI httpd | 2.0 | 193 | 1.595 |
| irc-proxy | psyBNC | 2.3.2-7 | 191 | 1.579 |
| vnc | VNC | 108 | 0.893 | |
| ssh | 84 | 0.694 | ||
| http | Boa httpd | 81 | 0.669 | |
| http | Boa HTTPd | 0.94.14rc21 | 78 | 0.645 |
| http | thttpd | 2.24 | 66 | 0.545 |
| ftp | 53 | 0.438 | ||
| telnet | 42 | 0.347 | ||
| ssh | OpenSSH | 4.3 | 41 | 0.339 |
| telnet | Cybersitter CLI | 37 | 0.306 | |
| ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | 34 | 0.281 |
| http | thttpd | 2.25b | 34 | 0.281 |
| http-proxy | MikroTik http proxy | 34 | 0.281 | |
| arcserve | ARCserve Discovery | 33 | 0.273 | |
| http | Boa HTTPd | 0.94.13 | 32 | 0.264 |
| ssh | OpenSSH | 5.6 | 29 | 0.24 |
| ftp | vsftpd (before 2.0.8) or WU-FTPD | 29 | 0.24 | |
| http | thttpd | 28 | 0.231 | |
| directconnect | Direct Connect P2P | 25 | 0.207 | |
| http | lighttpd | 24 | 0.198 | |
| openvpn | OpenVPN | 23 | 0.19 | |
| nntp | INN nntpd | 23 | 0.19 | |
| http | Microsoft IIS httpd | 5.1 | 23 | 0.19 |
| ftp | FileZilla ftpd | 0.9.41 beta | 22 | 0.182 |
| irc-proxy | psyBNC | 2.3.1 | 21 | 0.174 |
| ssl | TLS | 1.0 | 19 | 0.157 |
| http | GeoVision GeoHttpServer for webcams | 18 | 0.149 | |
| ftp | Pure-FTPd | 18 | 0.149 | |
| ssh | OpenSSH | 5.3p1 Debian 3ubuntu4 | 17 | 0.14 |
| ssh | OpenSSH | 5.1p1 Debian 5 | 16 | 0.132 |
| ftp | ProFTPD | 1.3.2c | 16 | 0.132 |