~11 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Count |
Percent |
|---|---|---|---|
| irc | Dancer ircd | 3598 | 30.75 |
| no match | -/- | 3035 | 25.938 |
| chat | AIM or ICQ server | 1272 | 10.871 |
| ssh | OpenSSH | 1095 | 9.358 |
| http | 462 | 3.948 | |
| http | lighttpd | 336 | 2.872 |
| http | Microsoft IIS httpd | 232 | 1.983 |
| http | Microsoft HTTPAPI httpd | 136 | 1.162 |
| telnet | 117 | 1.0 | |
| http | nginx | 106 | 0.906 |
| http | Boa HTTPd | 99 | 0.846 |
| ssh | 79 | 0.675 | |
| sdlog | RSA SecureID Ace Server | 73 | 0.624 |
| vnc | VNC | 58 | 0.496 |
| arcserve | ARCserve Discovery | 44 | 0.376 |
| ssl | TLS | 43 | 0.367 |
| progress | Progress Database | 42 | 0.359 |
| telnet | Allied Telesis x900-series switch telnetd | 37 | 0.316 |
| ftp | Microsoft ftpd | 36 | 0.308 |
| ssh | Dropbear sshd | 31 | 0.265 |
| ssh | Cisco SSH | 31 | 0.265 |
| ovm-manager | Oracle VM Manager | 31 | 0.265 |
| ftp | 28 | 0.239 | |
| xml | 25 | 0.214 | |
| telnet | Cisco 1721 router telnetd | 25 | 0.214 |
| smtp | Postfix smtpd | 24 | 0.205 |
| openvpn | OpenVPN | 24 | 0.205 |
| nntp | INN nntpd | 23 | 0.197 |
| geovision-audio | Geovision webcam audio | 23 | 0.197 |
| pppctl | pppctld | 22 | 0.188 |
| mysql | MySQL | 22 | 0.188 |
| irc-proxy | psyBNC | 21 | 0.179 |
| ssl | TLSv1 | 19 | 0.162 |
| http | MiniServ | 18 | 0.154 |
| telnet | NewCS card sharing system telnetd | 17 | 0.145 |
| http | WangWnagSimpleServer | 15 | 0.128 |
| ftp | FileZilla ftpd | 15 | 0.128 |
| telnet | SMC SMC2870W Wireless Ethernet Bridge | 13 | 0.111 |
| ftp | ProFTPD | 13 | 0.111 |
| remoting | MS .NET Remoting services | 12 | 0.103 |
| ftp | vsftpd | 11 | 0.094 |
| ftp | Serv-U ftpd | 10 | 0.085 |
| directconnect | Direct Connect P2P | 10 | 0.085 |