~84 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Info | OS | Devicetype | Count | Percent |
---|---|---|---|---|---|---|---|
telnet | Netgear broadband router or ZyXel VoIP adapter telnetd | 39992 | 47.514 | ||||
http | 10356 | 12.304 | |||||
no match | 4741 | 5.633 | |||||
irc | Dancer ircd | 4025 | 4.782 | ||||
http | SonicWALL | firewall | 3642 | 4.327 | |||
http | Microsoft HTTPAPI httpd | 2.0 | SSDP/UPnP | Windows | 3554 | 4.223 | |
irc-proxy | psyBNC | 2.3.2-7 | 3499 | 4.157 | |||
chat | AIM or ICQ server | 2209 | 2.625 | ||||
eggdrop | Eggdrop IRC bot console | 1.6.21 | 1884 | 2.238 | |||
http | streamts (ps) | 1811 | 2.152 | ||||
irc-proxy | psyBNC | 2.3.2-9 | 658 | 0.782 | |||
http | AIM | 1.0 | 646 | 0.768 | |||
irc-proxy | psyBNC | 2.3.2-4 | 561 | 0.667 | |||
irc-proxy | psyBNC | 2.3.1 | 452 | 0.537 | |||
http | lighttpd | 1.4.19 | 409 | 0.486 | |||
irc-proxy | psyBNC | 2.3BETA | 358 | 0.425 | |||
http | ServerView Remote Management iRMC S3 Webserver | 236 | 0.28 | ||||
http | lighttpd | 1.4.29 | 198 | 0.235 | |||
http | Microsoft IIS httpd | 6.0 | Windows | 124 | 0.147 | ||
http-proxy | Squid http proxy | 3.1.19 | 115 | 0.137 | |||
ssh | OpenSSH | 5.1p1 | FreeBSD 20080901; protocol 2.0 | FreeBSD | 110 | 0.131 | |
http | GoAhead-Webs httpd | 100 | 0.119 | ||||
http | Apache Tomcat/Coyote JSP engine | 1.1 | 99 | 0.118 | |||
irc-proxy | ShroudBNC irc-proxy | 1.1 revision 371 | 97 | 0.115 | |||
ssh | protocol 1.5 | 95 | 0.113 | ||||
http | ZNC IRC bouncer http config | 0.097 or later | 85 | 0.101 | |||
ssh | OpenSSH | 4.3 | protocol 2.0 | 76 | 0.09 | ||
http-proxy | Squid http proxy | 69 | 0.082 | ||||
irc-proxy | psyBNC | 2.2.1 | 62 | 0.074 | |||
telnet | 60 | 0.071 | |||||
ssh | OpenSSH | 4.5p1 | FreeBSD 20061110; protocol 2.0 | FreeBSD | 60 | 0.071 | |
ssh | Dropbear sshd | 0.52 | protocol 2.0 | Linux | 60 | 0.071 | |
http | uTorrent WebUI | Windows | 59 | 0.07 | |||
http | Apache | 59 | 0.07 | ||||
http | Netwave IP camera http config | webcam | 57 | 0.068 | |||
ssh | OpenSSH | 5.3 | protocol 2.0 | 56 | 0.067 | ||
http | Avtech AVN801 network camera | 1.0 | UPnP 1.0 | webcam | 53 | 0.063 | |
smtp | Postfix smtpd | 51 | 0.061 | ||||
irc | Unreal ircd | 51 | 0.061 | ||||
vnc | VNC | protocol 3.8 | 50 | 0.059 | |||
http | DrayTek Vigor 2800-series ADSL router httpd | broadband router | 49 | 0.058 | |||
http | ZNC IRC bouncer httpd | 0.090 - 0.096 | 48 | 0.057 | |||
ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | Ubuntu Linux; protocol 2.0 | Linux | 46 | 0.055 | |
irc-proxy | psyBNC | 2.3.2-6BETA5 | 43 | 0.051 | |||
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | protocol 2.0 | Linux | 41 | 0.049 | |
irc-proxy | ShroudBNC irc-proxy | 1.2 revision 1080 | 39 | 0.046 | |||
http-proxy | Squid http proxy | 3.1.16 | 38 | 0.045 | |||
http | GoAhead-Webs | 38 | 0.045 | ||||
irc-proxy | psyBNC | Login Failed | 37 | 0.044 | |||
ftp | 37 | 0.044 | |||||
http-proxy | 3Proxy http proxy | 36 | 0.043 | ||||
http | PDR-M800 | 1.0 | 34 | 0.04 | |||
http | FLPS | 33 | 0.039 | ||||
http | Icecast streaming media server | 32 | 0.038 | ||||
directconnect | Direct Connect P2P | Windows | 31 | 0.037 | |||
shell | w4ck1ng-shell | 0.3 | **BACKDOOR** | 30 | 0.036 | ||
http | Boa HTTPd | 0.94.14rc21 | 30 | 0.036 | |||
http | Apache | SSL-only mode | 26 | 0.031 | |||
ssh | OpenSSH | 5.1p1 Debian 5 | protocol 2.0 | Linux | 25 | 0.03 | |
meterpreter | Metasploit meterpreter metsvc | **BACKDOOR** | 25 | 0.03 | |||
http | Hikvision-Webs | 24 | 0.029 | ||||
http | Microsoft IIS httpd | 7.5 | Windows | 23 | 0.027 | ||
http | Apache | 2.2.3 | (CentOS) | 23 | 0.027 | ||
ssh | OpenSSH | 4.4 | protocol 2.0 | 22 | 0.026 | ||
irc-proxy | ShroudBNC irc-proxy | 1.2 revision 1045 | 22 | 0.026 | |||
sip | mini_httpd/1.19 19dec2003 | Status: 501 Not Implemented | 21 | 0.025 | |||
ftp | Microsoft ftpd | Windows | 21 | 0.025 |