~10 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Count |
Percent |
|---|---|---|---|
| irc | Dancer ircd | 3696 | 34.445 |
| no match | -/- | 1827 | 17.027 |
| chat | AIM or ICQ server | 1765 | 16.449 |
| http | WangWnagSimpleServer | 784 | 7.307 |
| http | lighttpd | 378 | 3.523 |
| http | 346 | 3.225 | |
| http | Apache | 299 | 2.787 |
| ibm-mqseries | IBM WebSphere MQ | 206 | 1.92 |
| http | Microsoft IIS httpd | 154 | 1.435 |
| http | thttpd | 126 | 1.174 |
| http | Microsoft HTTPAPI httpd | 108 | 1.007 |
| http | GoAhead-Webs httpd | 85 | 0.792 |
| ssh | 79 | 0.736 | |
| http | Boa HTTPd | 60 | 0.559 |
| ssh | OpenSSH | 59 | 0.55 |
| telnet | 47 | 0.438 | |
| vnc | VNC | 44 | 0.41 |
| http-proxy | Squid http proxy | 41 | 0.382 |
| socks5 | 40 | 0.373 | |
| arcserve | ARCserve Discovery | 35 | 0.326 |
| ftp | Microsoft ftpd | 29 | 0.27 |
| nntp | INN nntpd | 26 | 0.242 |
| http | Hikvision-Webs | 26 | 0.242 |
| directconnect | Direct Connect P2P | 21 | 0.196 |
| mysql | MySQL | 20 | 0.186 |
| http | nginx | 19 | 0.177 |
| smtp | Microsoft ESMTP | 16 | 0.149 |
| http | BusyBox httpd | 16 | 0.149 |
| ssl | TLS | 14 | 0.13 |
| ftp | 14 | 0.13 | |
| upnp | Portable SDK for UPnP | 13 | 0.121 |
| http-proxy | F5 BIG-IP load balancer http proxy | 13 | 0.121 |
| ftp | ProFTPD | 13 | 0.121 |
| http | MiniHttpd | 12 | 0.112 |
| ftp | FileZilla ftpd | 12 | 0.112 |
| http | World Client WDaemon httpd | 11 | 0.103 |
| ftp | vsftpd (before 2.0.8) or WU-FTPD | 11 | 0.103 |
| smtp | Microsoft Exchange smtpd | 10 | 0.093 |
| http | MiniServ | 10 | 0.093 |