~74 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Count | Percent |
---|---|---|---|---|
no match | -/- | -/- | 39919 | 53.23 |
eggdrop | Eggdrop IRC bot console | 1.6.21 | 4847 | 6.463 |
irc | Dancer ircd | 4057 | 5.41 | |
eggdrop | Eggdrop IRC bot console | 1.6.20 | 2496 | 3.328 |
chat | AIM or ICQ server | 2309 | 3.079 | |
http | 1604 | 2.139 | ||
ssh | OpenSSH | 4.3 | 1309 | 1.745 |
http | Microsoft IIS httpd | 1086 | 1.448 | |
http | Microsoft HTTPAPI httpd | 2.0 | 800 | 1.067 |
eggdrop | Eggdrop irc bot console | 628 | 0.837 | |
http | Boa HTTPd | 0.94.14rc21 | 565 | 0.753 |
http | lighttpd | 1.4.19 | 472 | 0.629 |
http | lighttpd | 1.4.29 | 427 | 0.569 |
vnc | VNC | 412 | 0.549 | |
mysql | MySQL | 410 | 0.547 | |
mysql | MySQL | 5.5.25-cll | 396 | 0.528 |
eggdrop | Eggdrop irc bot console | 1.6.19+ctcpfix | 365 | 0.487 |
http | Boa httpd | 337 | 0.449 | |
eggdrop | Eggdrop irc bot console | 1.6.17 | 333 | 0.444 |
mysql | MySQL | 3.23.57 | 313 | 0.417 |
eggdrop | Eggdrop irc bot console | 1.6.18 | 273 | 0.364 |
eggdrop | Eggdrop irc bot console | 1.6.19 | 267 | 0.356 |
http | GoAhead-Webs httpd | 261 | 0.348 | |
http-proxy | Fortech Proxy+ http admin | 4.00 Build 402 | 257 | 0.343 |
ssh | Dropbear sshd | 0.52 | 227 | 0.303 |
ftp | 226 | 0.301 | ||
http | WangWnagSimpleServer | 1.0 | 221 | 0.295 |
irc-proxy | psyBNC | 2.3.2-7 | 217 | 0.289 |
http-proxy | Squid http proxy | 2.7.STABLE8 | 187 | 0.249 |
ssh | OpenSSH | 3.9p1 | 185 | 0.247 |
remoting | MS .NET Remoting services | 180 | 0.24 | |
ssl | TLS | 1.0 | 178 | 0.237 |
telnet | utelnetd | 174 | 0.232 | |
http | Apache Tomcat/Coyote JSP engine | 1.1 | 160 | 0.213 |
http-proxy | Squid http proxy | 2.7.STABLE9 | 148 | 0.197 |
irc-proxy | psyBNC | 2.3.1 | 147 | 0.196 |
http | thttpd | 2.25b | 144 | 0.192 |
openvpn | OpenVPN | 143 | 0.191 | |
http | thttpd | 2.24 | 140 | 0.187 |
ssh | Dropbear sshd | 0.51 | 138 | 0.184 |
http | thttpd | 134 | 0.179 | |
ftp | Microsoft ftpd | 133 | 0.177 | |
http | Boa HTTPd | 0.94.13 | 129 | 0.172 |
ssh | 128 | 0.171 | ||
http | WEBrick httpd | 1.3.1 | 120 | 0.16 |
ssh | OpenSSH | 5.1p1 Debian 5 | 115 | 0.153 |
ssh | OpenSSH | 5.3 | 113 | 0.151 |
eggdrop | Eggdrop irc bot console | 1.6.19+Gentoo | 112 | 0.149 |
insight-manager | Consul InSight Manager | 105 | 0.14 | |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | 102 | 0.136 |
directconnect | Direct Connect P2P | 101 | 0.135 | |
telnet | 91 | 0.121 | ||
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | 85 | 0.113 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 85 | 0.113 | |
ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | 84 | 0.112 |
http | Xymphony-WS | 81 | 0.108 | |
http | Apache | 2.2.16 | 78 | 0.104 |
arcserve | ARCserve Discovery | 78 | 0.104 | |
mysql | MySQL | 5.0.51b-community-nt | 77 | 0.103 |
ssh | OpenSSH | 5.8p1-hpn13v10 | 76 | 0.101 |
http-proxy | Squid http proxy | 2.6.STABLE20 | 75 | 0.1 |
http | Virata-EmWeb | 6.0.1 | 74 | 0.099 |
http | Hikvision-Webs | 73 | 0.097 | |
ftp | Pure-FTPd | 72 | 0.096 | |
http | lighttpd | 1.4.26 | 69 | 0.092 |
ssh | OpenSSH | 3.4p1 | 67 | 0.089 |
http | World Client WDaemon httpd | 4.0 | 65 | 0.087 |
telnet | Linux telnetd | 64 | 0.085 | |
http-proxy | Squid http proxy | 2.6.STABLE21 | 62 | 0.083 |
ssh | OpenSSH | 2.3.0 mikrotik 2.9 | 60 | 0.08 |
http | Router | 60 | 0.08 | |
vnc | RealVNC Personal | 59 | 0.079 | |
telnet | foobar2000 remote control telnetd | 1.0.2 | 59 | 0.079 |
svnserve | Subversion | 58 | 0.077 | |
beep | 58 | 0.077 | ||
ssh | OpenSSH | 3.6.1p2 | 57 | 0.076 |
ssh | MikroTik RouterOS sshd | 57 | 0.076 | |
netbios-ssn | 56 | 0.075 | ||
rsync | 55 | 0.073 | ||
http | TP-LINK Router | 55 | 0.073 | |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze1 | 54 | 0.072 |
ftp | vsftpd | 2.0.8 or later | 54 | 0.072 |
ssh | Force10 switch sshd | 47 | 0.063 | |
telnet | foobar2000 remote control telnetd | 1.0.1 | 46 | 0.061 |
http | Boa HTTPd | 0.94.14rc20 | 46 | 0.061 |
eggdrop | Eggdrop IRC bot console | 45 | 0.06 | |
http-proxy | MikroTik http proxy | 44 | 0.059 | |
eggdrop | Eggdrop irc bot console | 1.6.19+SSL | 43 | 0.057 |
vnc | RealVNC Enterprise | 42 | 0.056 | |
ssh | OpenSSH | 5.8p1 Debian 7ubuntu1 | 42 | 0.056 |
http | http server 1.0 | 42 | 0.056 | |
ssh | OpenSSH | 5.4p1 | 41 | 0.055 |
http | Apache | 2.2.3 | 40 | 0.053 |
ssh | OpenSSH | 5.5 | 39 | 0.052 |
ssh | Cisco SSH | 1.25 | 39 | 0.052 |
ssh | OpenSSH | 5.6 | 38 | 0.051 |
ssh | OpenSSH | 4.7p1 Debian 12 | 38 | 0.051 |
http | GeoVision GeoHttpServer for webcams | 36 | 0.048 | |
ssh | OpenSSH | 5.1 | 35 | 0.047 |
http | Apache | 2.0.55 | 35 | 0.047 |
mysql | MySQL | 5.1.41-3ubuntu12 | 34 | 0.045 |
ssh | OpenSSH | 5.8p2_hpn13v11 | 33 | 0.044 |
ssh | OpenSSH | 5.2 | 32 | 0.043 |
smtp | Postfix smtpd | 32 | 0.043 | |
http | Apache | 2.0.63 | 32 | 0.043 |
ftp | Serv-U ftpd | 6.4 | 32 | 0.043 |
ssh | OpenSSH | 5.8 | 31 | 0.041 |
http | lighttpd | 31 | 0.041 | |
http | Panasonic webcam http config | 30 | 0.04 | |
http | Cross Web Server | 30 | 0.04 | |
mysql | MySQL | 5.0.51a-community-nt | 29 | 0.039 |
http | webserver | 1.0 | 29 | 0.039 |
nntp | INN nntpd | 28 | 0.037 | |
http-proxy | Squid http proxy | 3.1.10 | 28 | 0.037 |
http | Microsoft IIS httpd | 5.1 | 28 | 0.037 |
ftp | FileZilla ftpd | 0.9.41 beta | 28 | 0.037 |
upnp | Microsoft Windows UPnP | 26 | 0.035 | |
ssh | OpenSSH | 5.5p1 Debian 6 | 26 | 0.035 |
http | thttpd | 2.19-MX Jul 1 2010 | 26 | 0.035 |
smtp | 25 | 0.033 | ||
http-proxy | Squid http proxy | 3.2.0.8 | 25 | 0.033 |
http-proxy | Squid http proxy | 2.6.STABLE12 | 25 | 0.033 |
http | Microsoft IIS httpd | 5.0 | 25 | 0.033 |
xml | 24 | 0.032 | ||
ssh | OpenSSH | 5.8p1 Debian 1ubuntu3 | 24 | 0.032 |
ssh | Dropbear sshd | 0.53.1 | 24 | 0.032 |
http | WYM httpd | 1.0 | 24 | 0.032 |
http | lighttpd | 1.4.20 | 24 | 0.032 |
dominoconsole | Lotus Domino Console | 24 | 0.032 | |
telnet | NewCS card sharing system telnetd | 23 | 0.031 | |
http | Linksys router http config | 23 | 0.031 | |
http | lighttpd | 1.4.28 | 23 | 0.031 |
http | Apache | 2.2.17 | 23 | 0.031 |
http | Apache | 2.2.14 | 23 | 0.031 |
mysql | MySQL | 5.1.45-enterprise-commercial-pro | 22 | 0.029 |
http-proxy | Squid http proxy | 22 | 0.029 | |
ssh | OpenSSH | 5.1p1 | 21 | 0.028 |
ssh | OpenSSH | 4.3p2 | 21 | 0.028 |
ftp | FileZilla ftpd | 0.9.40 beta | 21 | 0.028 |
http | Boa HTTPd | 0.94.11 | 20 | 0.027 |
http | Apache | 2.2.9 | 20 | 0.027 |
ssh | Dropbear sshd | 0.49 | 19 | 0.025 |
http | Ubicom | 1.1 | 19 | 0.025 |
bandwidth-test | MikroTik bandwidth-test server | 19 | 0.025 | |
napster | WinMX or Lopster Napster P2P client | 18 | 0.024 | |
http | Apache | 2.2.22 | 18 | 0.024 |
http-proxy | Squid http proxy | 2.7.STABLE7 | 17 | 0.023 |
http | nginx | 17 | 0.023 | |
http | Microsoft ISA httpd | 17 | 0.023 | |
http | Jetty | 8.0.y.z-SNAPSHOT | 17 | 0.023 |
http | Apache | 2.2.15 | 17 | 0.023 |
ssh | OpenSSH | 6.0 | 16 | 0.021 |
socks5 | 16 | 0.021 | ||
smtp | Microsoft ESMTP | 6.0.3790.4675 | 16 | 0.021 |
printer | 16 | 0.021 | ||
mysql | MySQL | 5.0.84 | 16 | 0.021 |
meterpreter | Metasploit meterpreter | 16 | 0.021 | |
http-proxy | Squid http proxy | 2.7.STABLE3 | 16 | 0.021 |
http | Jetty | 6.1.22 | 16 | 0.021 |
ssh | OpenSSH | 5.9 | 15 | 0.02 |
ssh | OpenSSH | 4.7p1 Debian 8ubuntu1.2 | 15 | 0.02 |
http | Digifort Enterprise 6.5 httpd | 15 | 0.02 | |
ftp | FileZilla ftpd | 0.9.39 beta | 15 | 0.02 |