~28 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
no match | -/- | 13341 | 46.428 |
irc | Dancer ircd | 4066 | 14.15 |
chat | AIM or ICQ server | 2143 | 7.458 |
telnet | Cisco telnetd | 1965 | 6.838 |
irc | Unreal ircd | 1308 | 4.552 |
irc | InspIRCd | 791 | 2.753 |
telnet | 701 | 2.44 | |
http | 648 | 2.255 | |
http | lighttpd | 619 | 2.154 |
http | Boa HTTPd | 346 | 1.204 |
http | Microsoft IIS httpd | 211 | 0.734 |
http | Microsoft HTTPAPI httpd | 135 | 0.47 |
http | thttpd | 132 | 0.459 |
ssh | OpenSSH | 123 | 0.428 |
http | GoAhead-Webs httpd | 119 | 0.414 |
ssh | 96 | 0.334 | |
socks5 | 90 | 0.313 | |
http | Apache Tomcat/Coyote JSP engine | 81 | 0.282 |
http | Apache | 72 | 0.251 |
vnc | VNC | 67 | 0.233 |
http-proxy | Squid http proxy | 61 | 0.212 |
irc | IRCnet ircd | 54 | 0.188 |
irc | 49 | 0.171 | |
irc | ircu ircd | 40 | 0.139 |
mysql | MySQL | 36 | 0.125 |
ftp | Microsoft ftpd | 25 | 0.087 |
http | Hikvision-Webs | 24 | 0.084 |
irc | ratbox ircd | 23 | 0.08 |
http | nginx | 22 | 0.077 |
arcserve | ARCserve Discovery | 21 | 0.073 |
irc-proxy | psyBNC | 18 | 0.063 |
ssl | TLS | 17 | 0.059 |
smtp | Microsoft ESMTP | 17 | 0.059 |
ftp | 17 | 0.059 | |
ftp | ProFTPD | 16 | 0.056 |
telnet | Linux telnetd | 15 | 0.052 |
http | Jetty | 15 | 0.052 |
upnp | Microsoft Windows UPnP | 14 | 0.049 |
http-proxy | F5 BIG-IP load balancer http proxy | 13 | 0.045 |
ftp | Pure-FTPd | 13 | 0.045 |
ftp | FileZilla ftpd | 13 | 0.045 |
vnc | RealVNC Enterprise | 12 | 0.042 |
smtp | 12 | 0.042 | |
ftp | Serv-U ftpd | 11 | 0.038 |
vnc | RealVNC Personal | 10 | 0.035 |
telnet | EPIX Your Worldwide Internet Access | 10 | 0.035 |
smtp | Microsoft Exchange smtpd | 10 | 0.035 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 10 | 0.035 |
ftp | vsftpd | 10 | 0.035 |