~123 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
ssl | TLSv1 | 38711 | 31.371 |
http | Apache | 23541 | 19.077 |
no match | -/- | 22368 | 18.127 |
ssl | SSLv3 | 11352 | 9.2 |
irc | Dancer ircd | 3481 | 2.821 |
telnet | Cisco router telnetd | 3268 | 2.648 |
http | 2497 | 2.024 | |
chat | AIM or ICQ server | 1942 | 1.574 |
http | SonicWALL | 1720 | 1.394 |
eggdrop | Eggdrop IRC bot console | 1444 | 1.17 |
honeypot | honeyd cmdexe.pl | 1254 | 1.016 |
ssh | OpenSSH | 1243 | 1.007 |
eggdrop | Eggdrop irc bot console | 1076 | 0.872 |
http | lighttpd | 657 | 0.532 |
http | Jetty | 546 | 0.442 |
http | Microsoft HTTPAPI httpd | 488 | 0.395 |
http | Microsoft IIS httpd | 472 | 0.383 |
http | Secure Computing Sidewinder firewall http admin | 401 | 0.325 |
http | thttpd | 390 | 0.316 |
http-proxy | Squid http proxy | 342 | 0.277 |
http | AIM | 281 | 0.228 |
ssl | TLS | 273 | 0.221 |
http | Boa HTTPd | 205 | 0.166 |
vnc | VNC | 187 | 0.152 |
irc-proxy | psyBNC | 168 | 0.136 |
http | GoAhead-Webs httpd | 167 | 0.135 |
ssh | Dropbear sshd | 129 | 0.105 |
ssh | 117 | 0.095 | |
http | ZNC IRC bouncer http config | 110 | 0.089 |
http | nginx | 107 | 0.087 |
directconnect | Direct Connect P2P | 99 | 0.08 |
http | Netwave IP camera http config | 98 | 0.079 |
http | Apache Tomcat/Coyote JSP engine | 88 | 0.071 |
smtp | Microsoft ESMTP | 85 | 0.069 |
mysql | MySQL | 80 | 0.065 |
ovm-manager | Oracle VM Manager | 77 | 0.062 |
backdoor | OptixPro backdoor | 76 | 0.062 |
http | Avtech AVN801 network camera | 74 | 0.06 |
remoting | MS .NET Remoting services | 71 | 0.058 |
irc | Unreal ircd | 71 | 0.058 |
ftp | Microsoft ftpd | 71 | 0.058 |
http | Thin | 68 | 0.055 |
telnet | 66 | 0.053 | |
ripbot | RipBot video encoding server | 66 | 0.053 |
http | GeoVision GeoHttpServer for webcams | 63 | 0.051 |
ftp | Serv-U ftpd | 63 | 0.051 |
telnet | Roku SoundBridge telnetd | 56 | 0.045 |
http-proxy | 3Proxy http proxy | 55 | 0.045 |
http | TBS | 52 | 0.042 |
ftp | 48 | 0.039 | |
http | MiniServ | 46 | 0.037 |
arcserve | ARCserve Discovery | 46 | 0.037 |
http | Draytek Vigor ADSL router webadmin | 45 | 0.036 |
http | Mbedthis-Appweb | 44 | 0.036 |
http | AdSubtract httpd | 44 | 0.036 |
ftp | FileZilla ftpd | 44 | 0.036 |
http | Sockso personal music player httpd | 43 | 0.035 |
http | Allegro RomPager | 42 | 0.034 |
shell | w4ck1ng-shell | 41 | 0.033 |
http | Virata-EmWeb | 41 | 0.033 |
ftp | Pure-FTPd | 41 | 0.033 |
http | Hikvision-Webs | 40 | 0.032 |
xml | 38 | 0.031 | |
kerberos | Heimdal Kerberos | 38 | 0.031 |
http | Oracle Universal Content Management httpd | 38 | 0.031 |
http | mini_httpd | 38 | 0.031 |
http | uTorrent WebUI | 36 | 0.029 |
ssl | Microsoft IIS SSL | 34 | 0.028 |
http | Citrix Metaframe ICA Browser | 34 | 0.028 |
http | Xymphony-WS | 33 | 0.027 |
ftp | ProFTPD | 33 | 0.027 |
vnc | RealVNC Enterprise | 31 | 0.025 |
upnp | Portable SDK for UPnP | 31 | 0.025 |
netbios-ssn | 31 | 0.025 | |
http | PDR-M800 | 27 | 0.022 |
svnserve | Subversion | 25 | 0.02 |
rsync | 25 | 0.02 | |
http | uTorrent utserver web interface | 25 | 0.02 |
http | Router | 25 | 0.02 |
ftp | vsftpd | 25 | 0.02 |
vnc | 24 | 0.019 | |
ssh | MikroTik RouterOS sshd | 22 | 0.018 |
http | Ubicom | 22 | 0.018 |
http | Sockso music server | 22 | 0.018 |
http | KskServer | 22 | 0.018 |
openvpn | OpenVPN | 21 | 0.017 |
http | uc-httpd | 21 | 0.017 |
smtp | Sendmail | 19 | 0.015 |
http | Microsoft ISA httpd | 19 | 0.015 |
http | DirectAdmin Daemon v1.41.0 | 19 | 0.015 |
vnc | RealVNC Personal | 18 | 0.015 |
meterpreter | Metasploit meterpreter | 18 | 0.015 |
java-rmi | Java RMI | 18 | 0.015 |
http | iKeyGuard | 18 | 0.015 |
http | GoAhead-Webs | 18 | 0.015 |
http | DirectAdmin Daemon v1.41.1 | 18 | 0.015 |
http | ADTRAN | 18 | 0.015 |
http | uhttpd | 17 | 0.014 |
http-proxy | MikroTik http proxy | 17 | 0.014 |
http-proxy | CCProxy http proxy | 17 | 0.014 |
http | Intoto httpd | 17 | 0.014 |
http | Gadspot/Avtech AV787 webcam http config | 17 | 0.014 |
http | Apache Tomcat | 17 | 0.014 |
jetdirect | JetDirect | 16 | 0.013 |
http | WangWnagSimpleServer | 16 | 0.013 |
http | monocle | 16 | 0.013 |
http | Cross Web Server | 16 | 0.013 |
smtp | 15 | 0.012 | |
http-proxy | EZproxy web proxy | 15 | 0.012 |
http | Linksys router http config | 15 | 0.012 |
http | libwww-perl-daemon httpd | 15 | 0.012 |
http | DVR Systems webcam http interface | 15 | 0.012 |
telnet | Draytek Vigor ADSL router telnetd | 14 | 0.011 |
irc-proxy | ShroudBNC irc-proxy | 14 | 0.011 |
http | Ubicom httpd | 14 | 0.011 |
http | SonicWALL firewall http config | 14 | 0.011 |
ssh | Cisco SSH | 13 | 0.011 |
socks5 | 13 | 0.011 | |
smtp | Microsoft Exchange smtpd | 13 | 0.011 |
http | DD-WRT milli_httpd | 13 | 0.011 |
zabbix | Zabbix Monitoring System | 12 | 0.01 |
vnc | Apple remote desktop vnc | 12 | 0.01 |
socks-proxy | Socks4A | 12 | 0.01 |
upnp | Portable SDK for UPnP devices | 11 | 0.009 |
telnet | VLC media player telnetd | 11 | 0.009 |
http-proxy | F5 BIG-IP load balancer http proxy | 11 | 0.009 |
dominoconsole | Lotus Domino Console | 11 | 0.009 |
ssh | Bitvise WinSSHD | 10 | 0.008 |
mongodb | MongoDB | 10 | 0.008 |
http | WYM httpd | 10 | 0.008 |
http | World Client WDaemon httpd | 10 | 0.008 |
http | WEBrick httpd | 10 | 0.008 |
http | TwistedWeb httpd | 10 | 0.008 |
http | Transmission BitTorrent management httpd | 10 | 0.008 |
http | Sagem F@st router httpd | 10 | 0.008 |
http | go1984 httpd | 10 | 0.008 |
http | ESET NOD32 anti-virus update httpd | 10 | 0.008 |
http | CherryPy httpd | 10 | 0.008 |
http | CCcam card sharing system http config | 10 | 0.008 |
http | Boa httpd | 10 | 0.008 |