~74 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Info | OS | Devicetype | Count | Percent |
---|---|---|---|---|---|---|---|
no match | 39919 | 53.23 | |||||
eggdrop | Eggdrop IRC bot console | 1.6.21 | 4847 | 6.463 | |||
irc | Dancer ircd | 4057 | 5.41 | ||||
eggdrop | Eggdrop IRC bot console | 1.6.20 | 2496 | 3.328 | |||
chat | AIM or ICQ server | 2309 | 3.079 | ||||
http | 1576 | 2.102 | |||||
ssh | OpenSSH | 4.3 | protocol 2.0 | 1301 | 1.735 | ||
http | Microsoft IIS httpd | 1086 | 1.448 | ||||
http | Microsoft HTTPAPI httpd | 2.0 | SSDP/UPnP | Windows | 800 | 1.067 | |
eggdrop | Eggdrop irc bot console | 628 | 0.837 | ||||
http | Boa HTTPd | 0.94.14rc21 | 565 | 0.753 | |||
http | lighttpd | 1.4.19 | 471 | 0.628 | |||
http | lighttpd | 1.4.29 | 427 | 0.569 | |||
mysql | MySQL | unauthorized | 400 | 0.533 | |||
mysql | MySQL | 5.5.25-cll | 396 | 0.528 | |||
http | Boa httpd | 337 | 0.449 | ||||
mysql | MySQL | 3.23.57 | 313 | 0.417 | |||
http | GoAhead-Webs httpd | 261 | 0.348 | ||||
vnc | VNC | protocol 3.8 | 239 | 0.319 | |||
ssh | Dropbear sshd | 0.52 | protocol 2.0 | Linux | 227 | 0.303 | |
ftp | 226 | 0.301 | |||||
http | WangWnagSimpleServer | 1.0 | 221 | 0.295 | |||
irc-proxy | psyBNC | 2.3.2-7 | 217 | 0.289 | |||
http-proxy | Squid http proxy | 2.7.STABLE8 | 187 | 0.249 | |||
remoting | MS .NET Remoting services | 180 | 0.24 | ||||
ssl | TLS | 1.0 | 178 | 0.237 | |||
eggdrop | Eggdrop irc bot console | 1.6.19+ctcpfix | botname: unknown | 174 | 0.232 | ||
telnet | utelnetd | Unix | 173 | 0.231 | |||
http | Apache Tomcat/Coyote JSP engine | 1.1 | 160 | 0.213 | |||
vnc | VNC | protocol 3.6 | 149 | 0.199 | |||
http-proxy | Squid http proxy | 2.7.STABLE9 | 148 | 0.197 | |||
irc-proxy | psyBNC | 2.3.1 | 147 | 0.196 | |||
http | thttpd | 2.25b | 144 | 0.192 | |||
http-proxy | Fortech Proxy+ http admin | 4.00 Build 402 | Windows | 144 | 0.192 | ||
openvpn | OpenVPN | 143 | 0.191 | ||||
http | thttpd | 2.24 | 140 | 0.187 | |||
ssh | Dropbear sshd | 0.51 | protocol 2.0 | Linux | 138 | 0.184 | |
ssh | OpenSSH | 3.9p1 | protocol 2.0 | 136 | 0.181 | ||
ftp | Microsoft ftpd | Windows | 133 | 0.177 | |||
http | thttpd | 132 | 0.176 | ||||
http | Boa HTTPd | 0.94.13 | 129 | 0.172 | |||
eggdrop | Eggdrop irc bot console | 1.6.18 | botname: bitchX | 117 | 0.156 | ||
ssh | OpenSSH | 5.1p1 Debian 5 | protocol 2.0 | Linux | 114 | 0.152 | |
ssh | OpenSSH | 5.3 | protocol 2.0 | 113 | 0.151 | ||
http-proxy | Fortech Proxy+ http admin | 4.00 Build 402 | 2 concurrent users allowed | Windows | 113 | 0.151 | |
insight-manager | Consul InSight Manager | 105 | 0.14 | ||||
eggdrop | Eggdrop irc bot console | 1.6.19+Gentoo | botname: Wanker | 103 | 0.137 | ||
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | protocol 2.0 | Linux | 102 | 0.136 | |
directconnect | Direct Connect P2P | Windows | 101 | 0.135 | |||
ssh | protocol 1.5 | 100 | 0.133 | ||||
telnet | 89 | 0.119 | |||||
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | Ubuntu Linux; protocol 2.0 | Linux | 85 | 0.113 | |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 85 | 0.113 | ||||
ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | Ubuntu Linux; protocol 2.0 | Linux | 84 | 0.112 | |
http | Xymphony-WS | 81 | 0.108 | ||||
eggdrop | Eggdrop irc bot console | 1.6.19 | botname: Tin-Tin | 81 | 0.108 | ||
arcserve | ARCserve Discovery | 78 | 0.104 | ||||
mysql | MySQL | 5.0.51b-community-nt | 77 | 0.103 | |||
ssh | OpenSSH | 5.8p1-hpn13v10 | protocol 2.0 | 76 | 0.101 | ||
http-proxy | Squid http proxy | 2.6.STABLE20 | 75 | 0.1 | |||
http | Virata-EmWeb | 6.0.1 | 74 | 0.099 | |||
http | Hikvision-Webs | 73 | 0.097 | ||||
ftp | Pure-FTPd | 72 | 0.096 | ||||
http | lighttpd | 1.4.26 | 69 | 0.092 | |||
ssh | OpenSSH | 3.4p1 | protocol 1.99 | 67 | 0.089 | ||
http | World Client WDaemon httpd | 4.0 | Alt-N MDaemon webmail | Windows | 65 | 0.087 | |
telnet | Linux telnetd | Linux | 64 | 0.085 | |||
http-proxy | Squid http proxy | 2.6.STABLE21 | 62 | 0.083 | |||
http | Router | 60 | 0.08 | ||||
vnc | RealVNC Personal | protocol 4.0 | 59 | 0.079 | |||
telnet | foobar2000 remote control telnetd | 1.0.2 | Windows | 59 | 0.079 | ||
svnserve | Subversion | 58 | 0.077 | ||||
beep | 58 | 0.077 | |||||
ssh | MikroTik RouterOS sshd | protocol 2.0 | Linux | router | 57 | 0.076 | |
eggdrop | Eggdrop irc bot console | 1.6.19+ctcpfix | botname: Mari | 57 | 0.076 | ||
netbios-ssn | 56 | 0.075 | |||||
http | TP-LINK Router | 55 | 0.073 | ||||
ssh | OpenSSH | 5.5p1 Debian 6+squeeze1 | protocol 2.0 | Linux | 54 | 0.072 | |
ssh | OpenSSH | 2.3.0 mikrotik 2.9 | protocol 1.99 | router | 54 | 0.072 | |
rsync | protocol version 30 | 54 | 0.072 | ||||
ftp | vsftpd | 2.0.8 or later | 54 | 0.072 | |||
ssh | OpenSSH | 3.9p1 | protocol 1.99 | 49 | 0.065 | ||
ssh | OpenSSH | 3.6.1p2 | protocol 2.0 | 49 | 0.065 | ||
ssh | Force10 switch sshd | protocol 2.0 | 47 | 0.063 | |||
telnet | foobar2000 remote control telnetd | 1.0.1 | Windows | 46 | 0.061 | ||
http | Boa HTTPd | 0.94.14rc20 | 46 | 0.061 | |||
eggdrop | Eggdrop IRC bot console | 45 | 0.06 | ||||
http-proxy | MikroTik http proxy | 44 | 0.059 | ||||
vnc | RealVNC Enterprise | protocol 4.1 | 42 | 0.056 | |||
ssh | OpenSSH | 5.8p1 Debian 7ubuntu1 | Ubuntu Linux; protocol 2.0 | Linux | 42 | 0.056 | |
http | http server 1.0 | 42 | 0.056 | ||||
ssh | OpenSSH | 5.4p1 | FreeBSD 20100308; protocol 2.0 | FreeBSD | 41 | 0.055 | |
ssh | OpenSSH | 5.5 | protocol 2.0 | 39 | 0.052 | ||
ssh | OpenSSH | 5.6 | protocol 2.0 | 38 | 0.051 | ||
ssh | OpenSSH | 4.7p1 Debian 12 | protocol 2.0 | Linux | 38 | 0.051 | |
http | Apache | 2.2.3 | 38 | 0.051 | |||
http | GeoVision GeoHttpServer for webcams | webcam | 36 | 0.048 | |||
http | Apache | 2.2.16 | 36 | 0.048 | |||
http | Apache | 2.0.55 | DAV/2 | 35 | 0.047 | ||
mysql | MySQL | 5.1.41-3ubuntu12 | 34 | 0.045 | |||
ssh | OpenSSH | 5.8p2_hpn13v11 | FreeBSD 20110503; protocol 2.0 | FreeBSD | 33 | 0.044 | |
ssh | Cisco SSH | 1.25 | protocol 2.0 | IOS | 33 | 0.044 | |
smtp | Postfix smtpd | 32 | 0.043 | ||||
ftp | Serv-U ftpd | 6.4 | Windows | 32 | 0.043 | ||
ssh | OpenSSH | 5.1 | protocol 2.0 | 31 | 0.041 | ||
http | lighttpd | 31 | 0.041 | ||||
http | Panasonic webcam http config | webcam | 30 | 0.04 | |||
http | Cross Web Server | 30 | 0.04 | ||||
mysql | MySQL | 5.0.51a-community-nt | 29 | 0.039 | |||
http | webserver | 1.0 | 29 | 0.039 | |||
ssh | protocol 2.0 | 28 | 0.037 | ||||
ssh | OpenSSH | 5.8 | protocol 2.0 | 28 | 0.037 | ||
ssh | OpenSSH | 5.2 | protocol 2.0 | 28 | 0.037 | ||
nntp | INN nntpd | posting ok | 28 | 0.037 | |||
http-proxy | Squid http proxy | 3.1.10 | 28 | 0.037 | |||
http | Microsoft IIS httpd | 5.1 | Windows | 28 | 0.037 | ||
ftp | FileZilla ftpd | 0.9.41 beta | Windows | 28 | 0.037 | ||
upnp | Microsoft Windows UPnP | Windows | 26 | 0.035 | |||
http | thttpd | 2.19-MX Jul 1 2010 | WAP | 26 | 0.035 | ||
http | Apache | 2.2.16 | mod_ssl/2.2.16 OpenSSL/1.0.0a mod_python/3.3.1-ts Python/2.5.4 | 26 | 0.035 | ||
http | Apache | 2.0.63 | PHP/5.2.6 | 26 | 0.035 | ||
ssh | OpenSSH | 5.5p1 Debian 6 | protocol 2.0 | Linux | 25 | 0.033 | |
smtp | 25 | 0.033 | |||||
http-proxy | Squid http proxy | 3.2.0.8 | 25 | 0.033 | |||
http-proxy | Squid http proxy | 2.6.STABLE12 | 25 | 0.033 | |||
http | Microsoft IIS httpd | 5.0 | Windows | 25 | 0.033 | ||
xml | 24 | 0.032 | |||||
ssh | OpenSSH | 5.8p1 Debian 1ubuntu3 | Ubuntu Linux; protocol 2.0 | Linux | 24 | 0.032 | |
ssh | Dropbear sshd | 0.53.1 | protocol 2.0 | Linux | 24 | 0.032 | |
http | WYM httpd | 1.0 | 24 | 0.032 | |||
http | lighttpd | 1.4.20 | 24 | 0.032 | |||
telnet | NewCS card sharing system telnetd | 23 | 0.031 | ||||
http | lighttpd | 1.4.28 | 23 | 0.031 | |||
mysql | MySQL | 5.1.45-enterprise-commercial-pro | 22 | 0.029 | |||
http-proxy | Squid http proxy | 22 | 0.029 | ||||
ftp | FileZilla ftpd | 0.9.40 beta | Windows | 21 | 0.028 | ||
ssh | OpenSSH | 5.1p1 | FreeBSD 20080901; protocol 2.0 | FreeBSD | 20 | 0.027 | |
http | Boa HTTPd | 0.94.11 | 20 | 0.027 | |||
http | Apache | 2.2.17 | 20 | 0.027 | |||
http | Apache | 2.2.14 | 20 | 0.027 |