~67 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Version | Info | OS | Devicetype | Count |
Percent |
|---|---|---|---|---|---|---|---|
| netbios-ssn | Nepenthes honeypot netbios-ssn | 25260 | 37.683 | ||||
| http | 11479 | 17.125 | |||||
| no match | 7228 | 10.783 | |||||
| irc | Dancer ircd | 4032 | 6.015 | ||||
| http | SonicWALL | firewall | 3627 | 5.411 | |||
| chat | AIM or ICQ server | 2220 | 3.312 | ||||
| telnet | 2067 | 3.084 | |||||
| telnet | Cisco IOS telnetd | IOS | switch | 2056 | 3.067 | ||
| telnet | Cisco 1721 router telnetd | IOS | router | 1473 | 2.197 | ||
| http-proxy | EZproxy web proxy | 1220 | 1.82 | ||||
| ssl | SSLv3 | 905 | 1.35 | ||||
| http | lighttpd | 1.4.19 | 603 | 0.9 | |||
| http | AIM | 1.0 | 595 | 0.888 | |||
| http | lighttpd | 1.4.29 | 407 | 0.607 | |||
| http | Gateway-Webs | 221 | 0.33 | ||||
| http | WangWnagSimpleServer | 1.0 | 214 | 0.319 | |||
| http | GoAhead-Webs httpd | 159 | 0.237 | ||||
| http | Microsoft IIS httpd | 6.0 | Windows | 142 | 0.212 | ||
| http | Apache | 2.2.3 | (CentOS) | 116 | 0.173 | ||
| http | Apache | 2.2.3 | 101 | 0.151 | |||
| ssh | protocol 1.5 | 94 | 0.14 | ||||
| http | Apache Tomcat/Coyote JSP engine | 1.1 | 89 | 0.133 | |||
| http | Microsoft HTTPAPI httpd | 2.0 | SSDP/UPnP | Windows | 84 | 0.125 | |
| http | Netwave IP camera http config | webcam | 75 | 0.112 | |||
| ftp | Microsoft ftpd | Windows | 74 | 0.11 | |||
| http | Avtech AVN801 network camera | 1.0 | UPnP 1.0 | webcam | 64 | 0.095 | |
| http | thttpd | 2.24 | 63 | 0.094 | |||
| loginserver | L2J loginserver | 61 | 0.091 | ||||
| telnet | Cisco router telnetd | IOS | router | 60 | 0.09 | ||
| http | Microsoft IIS httpd | 55 | 0.082 | ||||
| http | PDR-M800 | 1.0 | 53 | 0.079 | |||
| http | Boa HTTPd | 0.94.14rc21 | 47 | 0.07 | |||
| http | Apache | 38 | 0.057 | ||||
| vnc | VNC | protocol 3.8 | 37 | 0.055 | |||
| telnet | KRASNET! | 36 | 0.054 | ||||
| http | GoAhead-Webs embedded httpd | 35 | 0.052 | ||||
| arcserve | ARCserve Discovery | 33 | 0.049 | ||||
| nntp | INN nntpd | posting ok | 28 | 0.042 | |||
| ftp | ProFTPD | Unix | 27 | 0.04 | |||
| ssh | OpenSSH | 4.3 | protocol 2.0 | 26 | 0.039 | ||
| http-proxy | Squid http proxy | 2.7.STABLE9 | 25 | 0.037 | |||
| http | mini_httpd | 1.19 19dec2003 | 25 | 0.037 | |||
| ftp | 25 | 0.037 | |||||
| http | thttpd | 2.24 26oct2003 | 23 | 0.034 | |||
| http | Apache | 2.2.14 | (Fedora) | 23 | 0.034 | ||
| http | Microsoft IIS httpd | 7.5 | Windows | 21 | 0.031 | ||
| http | Apache | SSL-only mode | 20 | 0.03 |