~123 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Count | Percent |
---|---|---|---|---|
ssl | TLSv1 | 38711 | 31.371 | |
no match | -/- | -/- | 22368 | 18.127 |
http | Apache | 21695 | 17.581 | |
ssl | SSLv3 | 11352 | 9.2 | |
irc | Dancer ircd | 3481 | 2.821 | |
telnet | Cisco router telnetd | 3268 | 2.648 | |
http | 2497 | 2.024 | ||
chat | AIM or ICQ server | 1942 | 1.574 | |
http | SonicWALL | 1720 | 1.394 | |
honeypot | honeyd cmdexe.pl | 1254 | 1.016 | |
http | Apache | 2.2.8 | 1152 | 0.934 |
eggdrop | Eggdrop IRC bot console | 1.6.20 | 1103 | 0.894 |
eggdrop | Eggdrop irc bot console | 1.6.19+ctcpfix | 802 | 0.65 |
ssh | OpenSSH | 4.3 | 513 | 0.416 |
http | Microsoft HTTPAPI httpd | 2.0 | 478 | 0.387 |
http | Secure Computing Sidewinder firewall http admin | 401 | 0.325 | |
http | lighttpd | 1.4.19 | 394 | 0.319 |
eggdrop | Eggdrop IRC bot console | 1.6.21 | 333 | 0.27 |
http | AIM | 1.0 | 281 | 0.228 |
http | Jetty | 5.1.x | 279 | 0.226 |
ssl | TLS | 1.0 | 273 | 0.221 |
http | Microsoft IIS httpd | 253 | 0.205 | |
http-proxy | Squid http proxy | 237 | 0.192 | |
http | Apache | 2.2.9 | 210 | 0.17 |
vnc | VNC | 187 | 0.152 | |
http | GoAhead-Webs httpd | 167 | 0.135 | |
http | thttpd | 2.25b | 166 | 0.135 |
eggdrop | Eggdrop irc bot console | 1.6.18 | 140 | 0.113 |
http | Boa HTTPd | 0.94.14rc21 | 138 | 0.112 |
irc-proxy | psyBNC | 2.3.2-6 | 135 | 0.109 |
ssh | 117 | 0.095 | ||
http | ZNC IRC bouncer http config | 0.097 or later | 110 | 0.089 |
eggdrop | Eggdrop irc bot console | 1.6.19 | 102 | 0.083 |
directconnect | Direct Connect P2P | 99 | 0.08 | |
http | Netwave IP camera http config | 98 | 0.079 | |
http | lighttpd | 1.4.29 | 98 | 0.079 |
ssh | Dropbear sshd | 0.52 | 92 | 0.075 |
http | lighttpd | 1.4.28 | 91 | 0.074 |
http | Apache Tomcat/Coyote JSP engine | 1.1 | 88 | 0.071 |
http | Microsoft IIS httpd | 6.0 | 86 | 0.07 |
http | Jetty | 6.0.x | 84 | 0.068 |
http | Apache | 2.2.3 | 78 | 0.063 |
http | Apache | 2.2.14 | 78 | 0.063 |
ovm-manager | Oracle VM Manager | 77 | 0.062 | |
backdoor | OptixPro backdoor | 76 | 0.062 | |
ssh | OpenSSH | 5.3 | 74 | 0.06 |
http | Avtech AVN801 network camera | 1.0 | 74 | 0.06 |
http | thttpd | 73 | 0.059 | |
http | Jetty | 7.x.y-SNAPSHOT | 72 | 0.058 |
remoting | MS .NET Remoting services | 71 | 0.058 | |
irc | Unreal ircd | 71 | 0.058 | |
http | thttpd | 2.24 | 69 | 0.056 |
http | Microsoft IIS httpd | 5.1 | 69 | 0.056 |
ftp | Microsoft ftpd | 68 | 0.055 | |
telnet | 66 | 0.053 | ||
ripbot | RipBot video encoding server | 66 | 0.053 | |
smtp | Microsoft ESMTP | 7.5.7601.17514 | 65 | 0.053 |
http | GeoVision GeoHttpServer for webcams | 63 | 0.051 | |
http | Thin | 1.4.1 | 62 | 0.05 |
http | Apache | 2.2.16 | 60 | 0.049 |
ssh | OpenSSH | 5.1p1 Debian 5 | 59 | 0.048 |
http | Jetty | 6.1.x | 58 | 0.047 |
http-proxy | 3Proxy http proxy | 55 | 0.045 | |
http | TBS | R2 UPnP | 52 | 0.042 |
http | Apache | 2.2.22 | 51 | 0.041 |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | 50 | 0.041 |
ftp | 48 | 0.039 | ||
arcserve | ARCserve Discovery | 46 | 0.037 | |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | 45 | 0.036 |
http | Draytek Vigor ADSL router webadmin | 45 | 0.036 | |
telnet | Roku SoundBridge telnetd | 3.0.44 | 44 | 0.036 |
http | Sockso personal music player httpd | 43 | 0.035 | |
ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | 42 | 0.034 |
http | Microsoft IIS httpd | 7.5 | 42 | 0.034 |
shell | w4ck1ng-shell | 0.3 | 41 | 0.033 |
http | Hikvision-Webs | 40 | 0.032 | |
ftp | Serv-U ftpd | 40 | 0.032 | |
ftp | Pure-FTPd | 40 | 0.032 | |
xml | 38 | 0.031 | ||
ssh | OpenSSH | 5.8 | 38 | 0.031 |
kerberos | Heimdal Kerberos | 38 | 0.031 | |
http | Oracle Universal Content Management httpd | 38 | 0.031 | |
http | mini_httpd | 1.19 19dec2003 | 38 | 0.031 |
http | uTorrent WebUI | 36 | 0.029 | |
ssl | Microsoft IIS SSL | 34 | 0.028 | |
http | Citrix Metaframe ICA Browser | 34 | 0.028 | |
ssh | OpenSSH | 5.4p1 | 33 | 0.027 |
http | Xymphony-WS | 33 | 0.027 | |
http | Virata-EmWeb | 6.0.1 | 33 | 0.027 |
vnc | RealVNC Enterprise | 31 | 0.025 | |
upnp | Portable SDK for UPnP | 1.3.1 | 31 | 0.025 |
netbios-ssn | 31 | 0.025 | ||
http-proxy | Squid http proxy | 2.7.STABLE9 | 30 | 0.024 |
http | lighttpd | 1.4.30 | 30 | 0.024 |
http | thttpd | 2.25b 29dec2003 | 28 | 0.023 |
http-proxy | Squid http proxy | 2.6.STABLE12 | 28 | 0.023 |
http | Mbedthis-Appweb | 2.0.4 | 28 | 0.023 |
http | PDR-M800 | 1.0 | 27 | 0.022 |
http | Apache | 2.2.15 | 27 | 0.022 |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze1 | 26 | 0.021 |
http | Boa HTTPd | 0.94.13 | 26 | 0.021 |
svnserve | Subversion | 25 | 0.02 | |
rsync | 25 | 0.02 | ||
http | uTorrent utserver web interface | 25 | 0.02 | |
http | Router | 25 | 0.02 | |
http | nginx | 25 | 0.02 | |
vnc | 24 | 0.019 | ||
http | Allegro RomPager | 4.07 UPnP/1.0 | 24 | 0.019 |
ssh | MikroTik RouterOS sshd | 22 | 0.018 | |
http | Ubicom | 1.1 | 22 | 0.018 |
http | Sockso music server | 22 | 0.018 | |
http | KskServer | 22 | 0.018 | |
ssh | OpenSSH | 5.2 | 21 | 0.017 |
openvpn | OpenVPN | 21 | 0.017 | |
http | uc-httpd | 1.0.0 | 21 | 0.017 |
http | Boa HTTPd | 0.93.15 | 21 | 0.017 |
ftp | vsftpd | 2.0.8 or later | 21 | 0.017 |
ssh | OpenSSH | 5.9 | 20 | 0.016 |
http | Microsoft ISA httpd | 19 | 0.015 | |
http | DirectAdmin Daemon v1.41.0 | 19 | 0.015 | |
http | Apache | 2.2.21 | 19 | 0.015 |
http | Apache | 2.2.17 | 19 | 0.015 |
vnc | RealVNC Personal | 18 | 0.015 | |
ssh | OpenSSH | 5.8p1 Debian 7ubuntu1 | 18 | 0.015 |
meterpreter | Metasploit meterpreter | 18 | 0.015 | |
http | nginx | 1.2.1 | 18 | 0.015 |
http | MiniServ | 1.550 | 18 | 0.015 |
http | iKeyGuard | 1.0 | 18 | 0.015 |
http | DirectAdmin Daemon v1.41.1 | 18 | 0.015 | |
http | ADTRAN | 18 | 0.015 | |
ssh | OpenSSH | 3.9p1 | 17 | 0.014 |
http-proxy | MikroTik http proxy | 17 | 0.014 | |
http-proxy | CCProxy http proxy | 17 | 0.014 | |
http | Intoto httpd | 1.0 | 17 | 0.014 |
http | Gadspot/Avtech AV787 webcam http config | 17 | 0.014 | |
http | Apache Tomcat | 3.2.4 | 17 | 0.014 |
ssh | OpenSSH | 6.0p1 Debian 2 | 16 | 0.013 |
jetdirect | JetDirect | 16 | 0.013 | |
http | WangWnagSimpleServer | 1.0 | 16 | 0.013 |
http | monocle | 0.17 | 16 | 0.013 |
http | lighttpd | 16 | 0.013 | |
http | GoAhead-Webs | 16 | 0.013 | |
http | Cross Web Server | 16 | 0.013 | |
ftp | FileZilla ftpd | 0.9.41 beta | 16 | 0.013 |
smtp | 15 | 0.012 | ||
http | uhttpd | 1.0.0 | 15 | 0.012 |
http-proxy | EZproxy web proxy | 15 | 0.012 | |
http | Microsoft IIS httpd | 7.0 | 15 | 0.012 |
http | Linksys router http config | 15 | 0.012 | |
http | DVR Systems webcam http interface | 15 | 0.012 |