~84 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Count | Percent |
---|---|---|---|---|
telnet | Netgear broadband router or ZyXel VoIP adapter telnetd | 39992 | 47.514 | |
http | 10401 | 12.357 | ||
no match | -/- | -/- | 4741 | 5.633 |
irc | Dancer ircd | 4025 | 4.782 | |
http | SonicWALL | 3642 | 4.327 | |
http | Microsoft HTTPAPI httpd | 2.0 | 3554 | 4.223 |
irc-proxy | psyBNC | 2.3.2-7 | 3499 | 4.157 |
chat | AIM or ICQ server | 2209 | 2.625 | |
eggdrop | Eggdrop IRC bot console | 1.6.21 | 1884 | 2.238 |
http | streamts (ps) | 1811 | 2.152 | |
irc-proxy | psyBNC | 2.3.2-9 | 658 | 0.782 |
http | AIM | 1.0 | 646 | 0.768 |
irc-proxy | psyBNC | 2.3.2-4 | 561 | 0.667 |
irc-proxy | psyBNC | 2.3.1 | 452 | 0.537 |
http | lighttpd | 1.4.19 | 410 | 0.487 |
irc-proxy | psyBNC | 2.3BETA | 358 | 0.425 |
http | ServerView Remote Management iRMC S3 Webserver | 236 | 0.28 | |
http | lighttpd | 1.4.29 | 198 | 0.235 |
http | Microsoft IIS httpd | 6.0 | 124 | 0.147 |
http-proxy | Squid http proxy | 3.1.19 | 115 | 0.137 |
ssh | OpenSSH | 5.1p1 | 110 | 0.131 |
http | GoAhead-Webs httpd | 103 | 0.122 | |
http | Apache Tomcat/Coyote JSP engine | 1.1 | 102 | 0.121 |
ssh | 98 | 0.116 | ||
irc-proxy | ShroudBNC irc-proxy | 1.1 revision 371 | 97 | 0.115 |
http | ZNC IRC bouncer http config | 0.097 or later | 85 | 0.101 |
http | Apache | 85 | 0.101 | |
ssh | OpenSSH | 4.3 | 76 | 0.09 |
http-proxy | Squid http proxy | 69 | 0.082 | |
vnc | VNC | 65 | 0.077 | |
irc-proxy | psyBNC | 2.2.1 | 62 | 0.074 |
ssh | OpenSSH | 4.5p1 | 61 | 0.072 |
telnet | 60 | 0.071 | ||
ssh | Dropbear sshd | 0.52 | 60 | 0.071 |
http | uTorrent WebUI | 59 | 0.07 | |
http | Netwave IP camera http config | 57 | 0.068 | |
ssh | OpenSSH | 5.3 | 56 | 0.067 |
http | Avtech AVN801 network camera | 1.0 | 53 | 0.063 |
smtp | Postfix smtpd | 51 | 0.061 | |
irc | Unreal ircd | 51 | 0.061 | |
ssh | OpenSSH | 4.4 | 49 | 0.058 |
http | DrayTek Vigor 2800-series ADSL router httpd | 49 | 0.058 | |
http | ZNC IRC bouncer httpd | 0.090 - 0.096 | 48 | 0.057 |
http | Apache | 2.2.14 | 48 | 0.057 |
irc-proxy | psyBNC | 47 | 0.056 | |
ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | 46 | 0.055 |
irc-proxy | psyBNC | 2.3.2-6BETA5 | 43 | 0.051 |
http | Apache | 2.2.22 | 43 | 0.051 |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | 41 | 0.049 |
http | GoAhead-Webs | 40 | 0.048 | |
irc-proxy | ShroudBNC irc-proxy | 1.2 revision 1080 | 39 | 0.046 |
http-proxy | Squid http proxy | 3.1.16 | 38 | 0.045 |
ftp | 37 | 0.044 | ||
http-proxy | 3Proxy http proxy | 36 | 0.043 | |
http | Apache | 2.2.3 | 36 | 0.043 |
http | Apache | 1.3.28 | 35 | 0.042 |
http | PDR-M800 | 1.0 | 34 | 0.04 |
http | FLPS | 33 | 0.039 | |
http | Icecast streaming media server | 32 | 0.038 | |
directconnect | Direct Connect P2P | 31 | 0.037 | |
shell | w4ck1ng-shell | 0.3 | 30 | 0.036 |
http | Boa HTTPd | 0.94.14rc21 | 30 | 0.036 |
http | Apache | 2.2.15 | 28 | 0.033 |
ssh | OpenSSH | 5.1p1 Debian 5 | 25 | 0.03 |
meterpreter | Metasploit meterpreter metsvc | 25 | 0.03 | |
http | Hikvision-Webs | 24 | 0.029 | |
http | Microsoft IIS httpd | 7.5 | 23 | 0.027 |
http | Apache | 2.2.16 | 23 | 0.027 |
irc-proxy | ShroudBNC irc-proxy | 1.2 revision 1045 | 22 | 0.026 |
sip | mini_httpd/1.19 19dec2003 | 21 | 0.025 | |
http | Apache | 2.2.9 | 21 | 0.025 |
ftp | Microsoft ftpd | 21 | 0.025 | |
ssh | SCS sshd | 2.0.13 | 19 | 0.023 |
http | nginx | 19 | 0.023 | |
ssh | AllegroSoft RomSShell sshd | 4.61 | 18 | 0.021 |
ftp | Pure-FTPd | 18 | 0.021 | |
http-proxy | Squid http proxy | 2.7.STABLE9 | 17 | 0.02 |
http | mini_httpd | 1.19 19dec2003 | 17 | 0.02 |
http | Microsoft IIS httpd | 5.1 | 17 | 0.02 |
http | Microsoft IIS httpd | 17 | 0.02 | |
http | Intoto httpd | 1.0 | 17 | 0.02 |
ssh | OpenSSH | 5.8p2_hpn13v11 | 16 | 0.019 |
http | thttpd | 16 | 0.019 | |
sip | thttpd/2.25b 29dec2003 | 15 | 0.018 | |
http | GeoVision GeoHttpServer for webcams | 15 | 0.018 |