~16 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Version | Count |
Percent |
|---|---|---|---|---|
| irc | Dancer ircd | 3705 | 22.722 | |
| telnet | 2632 | 16.141 | ||
| no match | -/- | -/- | 2494 | 15.295 |
| chat | AIM or ICQ server | 1301 | 7.979 | |
| http | 785 | 4.814 | ||
| http | Boa HTTPd | 0.94.14rc21 | 472 | 2.895 |
| http | lighttpd | 1.4.19 | 372 | 2.281 |
| http | WangWnagSimpleServer | 1.0 | 353 | 2.165 |
| http | Microsoft IIS httpd | 303 | 1.858 | |
| http | Boa HTTPd | 0.94.13 | 257 | 1.576 |
| ssh | OpenSSH | 4.0 | 216 | 1.325 |
| http | Microsoft HTTPAPI httpd | 2.0 | 186 | 1.141 |
| http | GoAhead-Webs httpd | 156 | 0.957 | |
| xml | 138 | 0.846 | ||
| http | thttpd | 2.25b | 120 | 0.736 |
| vnc | VNC | 119 | 0.73 | |
| http | Apache | 2.2.16 | 109 | 0.668 |
| http | Boa httpd | 105 | 0.644 | |
| irc-proxy | psyBNC | 2.3.2-7 | 100 | 0.613 |
| ovm-manager | Oracle VM Manager | 99 | 0.607 | |
| ssl | TLS | 1.0 | 85 | 0.521 |
| ssh | 81 | 0.497 | ||
| http | Hikvision-Webs | 79 | 0.484 | |
| ssh | Dropbear sshd | 0.51 | 77 | 0.472 |
| http | thttpd | 2.24 | 73 | 0.448 |
| http | Apache | 1.3.33 | 69 | 0.423 |
| ssl | multi-vendor SSL | 62 | 0.38 | |
| socks5 | 62 | 0.38 | ||
| eggdrop | Eggdrop IRC bot console | 1.6.19 | 57 | 0.35 |
| arcserve | ARCserve Discovery | 57 | 0.35 | |
| http | thttpd | 54 | 0.331 | |
| ftp | Microsoft ftpd | 52 | 0.319 | |
| citrix-ica | Citrix Metaframe XP ICA | 52 | 0.319 | |
| http | VSYS-Webs | 46 | 0.282 | |
| telnet | Precidia serial2ethernet gateway telnetd | 45 | 0.276 | |
| ssh | OpenSSH | 4.3 | 45 | 0.276 |
| remoting | MS .NET Remoting services | 35 | 0.215 | |
| http | Apache Tomcat/Coyote JSP engine | 1.1 | 32 | 0.196 |
| http | http server 1.0 | 28 | 0.172 | |
| http | Apache | 2.2.9 | 25 | 0.153 |
| directconnect | Direct Connect P2P | 25 | 0.153 | |
| nntp | INN nntpd | 24 | 0.147 | |
| secure-socket | CA Secure Socket Adapter | 23 | 0.141 | |
| tandem-print | Sharp printer tandem printing | 22 | 0.135 | |
| http | Varnish | 22 | 0.135 | |
| http-proxy | Squid http proxy | 2.7.STABLE9 | 22 | 0.135 |
| http | Apache | 2.2.3 | 21 | 0.129 |
| http | Apache | 1.3.27 | 21 | 0.129 |
| ftp | vsftpd | 2.0.8 or later | 20 | 0.123 |
| vnc | RealVNC Personal | 19 | 0.117 | |
| ssh | OpenSSH | 3.9p1 | 19 | 0.117 |
| ftp | 19 | 0.117 | ||
| smtp | 18 | 0.11 | ||
| ftp | Pure-FTPd | 18 | 0.11 | |
| http | thttpd | 2.19-MX Jul 1 2010 | 16 | 0.098 |
| openvpn | OpenVPN | 15 | 0.092 | |
| http | Virata-EmWeb | 6.0.1 | 15 | 0.092 |