~123 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Info | OS | Devicetype | Count | Percent |
---|---|---|---|---|---|---|---|
ssl | TLSv1 | 38711 | 31.371 | ||||
no match | 22368 | 18.127 | |||||
http | Apache | SSL-only mode | 21611 | 17.513 | |||
ssl | SSLv3 | 11352 | 9.2 | ||||
irc | Dancer ircd | 3481 | 2.821 | ||||
telnet | Cisco router telnetd | router | 3268 | 2.648 | |||
http | 2436 | 1.974 | |||||
chat | AIM or ICQ server | 1942 | 1.574 | ||||
http | SonicWALL | firewall | 1720 | 1.394 | |||
honeypot | honeyd cmdexe.pl | 1254 | 1.016 | ||||
http | Apache | 2.2.8 | (Ubuntu) PHP/5.2.4-2ubuntu5.24 with Suhosin-Patch | 1133 | 0.918 | ||
eggdrop | Eggdrop IRC bot console | 1.6.20 | 1103 | 0.894 | |||
eggdrop | Eggdrop irc bot console | 1.6.19+ctcpfix | botname: iasi-hack | 789 | 0.639 | ||
ssh | OpenSSH | 4.3 | protocol 2.0 | 508 | 0.412 | ||
http | Microsoft HTTPAPI httpd | 2.0 | SSDP/UPnP | Windows | 478 | 0.387 | |
http | Secure Computing Sidewinder firewall http admin | firewall | 401 | 0.325 | |||
http | lighttpd | 1.4.19 | 394 | 0.319 | |||
eggdrop | Eggdrop IRC bot console | 1.6.21 | 333 | 0.27 | |||
http | AIM | 1.0 | 281 | 0.228 | |||
ssl | TLS | 1.0 | 273 | 0.221 | |||
http | Microsoft IIS httpd | 250 | 0.203 | ||||
http-proxy | Squid http proxy | 237 | 0.192 | ||||
http | thttpd | 2.25b | 166 | 0.135 | |||
http | GoAhead-Webs httpd | 159 | 0.129 | ||||
vnc | VNC | protocol 3.8 | 157 | 0.127 | |||
http | Apache | 2.2.9 | (Debian) PHP/5.2.6-1+lenny9.1+neospire1 with Suhosin-Patch mod_ssl/2.2.9 OpenSSL/0.9.8g | 147 | 0.119 | ||
http | Boa HTTPd | 0.94.14rc21 | 138 | 0.112 | |||
irc-proxy | psyBNC | 2.3.2-6 | 135 | 0.109 | |||
eggdrop | Eggdrop irc bot console | 1.6.18 | botname: T-1000 | 132 | 0.107 | ||
http | ZNC IRC bouncer http config | 0.097 or later | 110 | 0.089 | |||
directconnect | Direct Connect P2P | Windows | 99 | 0.08 | |||
http | Netwave IP camera http config | webcam | 98 | 0.079 | |||
http | lighttpd | 1.4.29 | 98 | 0.079 | |||
ssh | Dropbear sshd | 0.52 | protocol 2.0 | Linux | 92 | 0.075 | |
http | lighttpd | 1.4.28 | 91 | 0.074 | |||
ssh | protocol 1.5 | 86 | 0.07 | ||||
http | Microsoft IIS httpd | 6.0 | Windows | 86 | 0.07 | ||
http | Apache Tomcat/Coyote JSP engine | 1.1 | 86 | 0.07 | |||
http | Jetty | 6.0.x | 84 | 0.068 | |||
http | Apache | 82 | 0.066 | ||||
ovm-manager | Oracle VM Manager | 77 | 0.062 | ||||
backdoor | OptixPro backdoor | **BACKDOOR** | Windows | 76 | 0.062 | ||
eggdrop | Eggdrop irc bot console | 1.6.19 | botname: Tin-Tin | 75 | 0.061 | ||
ssh | OpenSSH | 5.3 | protocol 2.0 | 74 | 0.06 | ||
http | Avtech AVN801 network camera | 1.0 | UPnP 1.0 | webcam | 74 | 0.06 | |
http | Jetty | 7.x.y-SNAPSHOT | 72 | 0.058 | |||
remoting | MS .NET Remoting services | 71 | 0.058 | ||||
irc | Unreal ircd | 71 | 0.058 | ||||
http | thttpd | 2.24 | 69 | 0.056 | |||
http | Microsoft IIS httpd | 5.1 | Windows | 69 | 0.056 | ||
ftp | Microsoft ftpd | Windows | 68 | 0.055 | |||
ripbot | RipBot video encoding server | 66 | 0.053 | ||||
telnet | 65 | 0.053 | |||||
smtp | Microsoft ESMTP | 7.5.7601.17514 | Windows | 65 | 0.053 | ||
http | GeoVision GeoHttpServer for webcams | webcam | 63 | 0.051 | |||
http | Thin | 1.4.1 | codename Chromeo | 62 | 0.05 | ||
ssh | OpenSSH | 5.1p1 Debian 5 | protocol 2.0 | Linux | 59 | 0.048 | |
http | Jetty | 6.1.x | 58 | 0.047 | |||
http | thttpd | 55 | 0.045 | ||||
http-proxy | 3Proxy http proxy | 55 | 0.045 | ||||
http | TBS | R2 UPnP | 52 | 0.042 | |||
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | Ubuntu Linux; protocol 2.0 | Linux | 50 | 0.041 | |
ftp | 48 | 0.039 | |||||
arcserve | ARCserve Discovery | 46 | 0.037 | ||||
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | protocol 2.0 | Linux | 45 | 0.036 | |
http | Draytek Vigor ADSL router webadmin | broadband router | 45 | 0.036 | |||
telnet | Roku SoundBridge telnetd | 3.0.44 | media device | 44 | 0.036 | ||
http | Sockso personal music player httpd | 43 | 0.035 | ||||
ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | Ubuntu Linux; protocol 2.0 | Linux | 42 | 0.034 | |
http | Microsoft IIS httpd | 7.5 | Windows | 42 | 0.034 | ||
shell | w4ck1ng-shell | 0.3 | **BACKDOOR** | 41 | 0.033 | ||
http | Hikvision-Webs | 40 | 0.032 | ||||
http | Apache | 2.2.16 | 40 | 0.032 | |||
ftp | Serv-U ftpd | SSL Required | Windows | 40 | 0.032 | ||
ftp | Pure-FTPd | 40 | 0.032 | ||||
xml | 38 | 0.031 | |||||
http | Oracle Universal Content Management httpd | 38 | 0.031 | ||||
http | mini_httpd | 1.19 19dec2003 | 38 | 0.031 | |||
http | Apache | 2.2.3 | 38 | 0.031 | |||
http | Apache | 2.2.14 | 38 | 0.031 | |||
http | uTorrent WebUI | Windows | 36 | 0.029 | |||
ssl | Microsoft IIS SSL | Windows | 34 | 0.028 | |||
http | Citrix Metaframe ICA Browser | 34 | 0.028 | ||||
ssh | OpenSSH | 5.4p1 | FreeBSD 20100308; protocol 2.0 | FreeBSD | 33 | 0.027 | |
http | Xymphony-WS | 33 | 0.027 | ||||
vnc | RealVNC Enterprise | protocol 4.1 | 31 | 0.025 | |||
upnp | Portable SDK for UPnP | 1.3.1 | Linux 2.6.21; UPnP 1.0 | Linux | 31 | 0.025 | |
ssh | protocol 2.0 | 31 | 0.025 | ||||
netbios-ssn | 31 | 0.025 | |||||
http | Virata-EmWeb | 6.0.1 | 30 | 0.024 | |||
http-proxy | Squid http proxy | 2.7.STABLE9 | 30 | 0.024 | |||
http | lighttpd | 1.4.30 | 30 | 0.024 | |||
http | thttpd | 2.25b 29dec2003 | 28 | 0.023 | |||
http-proxy | Squid http proxy | 2.6.STABLE12 | 28 | 0.023 | |||
http | Mbedthis-Appweb | 2.0.4 | 28 | 0.023 | |||
http | PDR-M800 | 1.0 | 27 | 0.022 | |||
ssh | OpenSSH | 5.5p1 Debian 6+squeeze1 | protocol 2.0 | Linux | 26 | 0.021 | |
http | Boa HTTPd | 0.94.13 | 26 | 0.021 | |||
svnserve | Subversion | 25 | 0.02 | ||||
http | uTorrent utserver web interface | Linux | 25 | 0.02 | |||
http | nginx | 25 | 0.02 | ||||
http | Apache | 2.2.3 | (CentOS) | 25 | 0.02 | ||
http | Allegro RomPager | 4.07 UPnP/1.0 | ZyXEL ZyWALL 2 | 24 | 0.019 | ||
vnc | protocol 3 | 23 | 0.019 | ||||
ssh | OpenSSH | 5.8 | protocol 1.99 | 22 | 0.018 | ||
ssh | MikroTik RouterOS sshd | protocol 2.0 | Linux | router | 22 | 0.018 | |
rsync | protocol version 29 | 22 | 0.018 | ||||
http | Ubicom | 1.1 | 22 | 0.018 | |||
http | Sockso music server | 22 | 0.018 | ||||
http | KskServer | 22 | 0.018 | ||||
openvpn | OpenVPN | 21 | 0.017 | ||||
http | uc-httpd | 1.0.0 | 21 | 0.017 | |||
http | Boa HTTPd | 0.93.15 | 21 | 0.017 | |||
ftp | vsftpd | 2.0.8 or later | 21 | 0.017 | |||
vnc | VNC | protocol 3.6 | 20 | 0.016 | |||
ssh | OpenSSH | 5.9 | protocol 2.0 | 20 | 0.016 |