~10 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Count |
Percent |
|---|---|---|---|
| irc | Dancer ircd | 3650 | 35.883 |
| chat | AIM or ICQ server | 1755 | 17.253 |
| no match | -/- | 1524 | 14.982 |
| http | WangWnagSimpleServer | 690 | 6.783 |
| http | lighttpd | 372 | 3.657 |
| http | 358 | 3.519 | |
| http | Apache | 297 | 2.92 |
| http | Microsoft IIS httpd | 153 | 1.504 |
| http | thttpd | 121 | 1.19 |
| http | Microsoft HTTPAPI httpd | 119 | 1.17 |
| http | GoAhead-Webs httpd | 103 | 1.013 |
| ibm-mqseries | IBM WebSphere MQ | 79 | 0.777 |
| ssh | 75 | 0.737 | |
| socks5 | 68 | 0.669 | |
| ssh | OpenSSH | 66 | 0.649 |
| http | Boa HTTPd | 56 | 0.551 |
| telnet | 51 | 0.501 | |
| http-proxy | Squid http proxy | 42 | 0.413 |
| vnc | VNC | 39 | 0.383 |
| arcserve | ARCserve Discovery | 37 | 0.364 |
| ftp | Microsoft ftpd | 27 | 0.265 |
| directconnect | Direct Connect P2P | 25 | 0.246 |
| nntp | INN nntpd | 24 | 0.236 |
| mysql | MySQL | 20 | 0.197 |
| upnp | Portable SDK for UPnP | 19 | 0.187 |
| http | Hikvision-Webs | 19 | 0.187 |
| http | BusyBox httpd | 16 | 0.157 |
| ftp | vsftpd (before 2.0.8) or WU-FTPD | 16 | 0.157 |
| ssl | TLS | 15 | 0.147 |
| http | nginx | 15 | 0.147 |
| http-proxy | F5 BIG-IP load balancer http proxy | 13 | 0.128 |
| ftp | FileZilla ftpd | 13 | 0.128 |
| ftp | 13 | 0.128 | |
| ftp | ProFTPD | 12 | 0.118 |
| smtp | 11 | 0.108 | |
| ftp | Pure-FTPd | 11 | 0.108 |