~28 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
socks5 | 10602 | 37.633 | |
irc | Dancer ircd | 3694 | 13.112 |
irc | Unreal ircd | 2959 | 10.503 |
no match | -/- | 2183 | 7.749 |
telnet | Cisco telnetd | 1807 | 6.414 |
chat | AIM or ICQ server | 1473 | 5.229 |
telnet | 688 | 2.442 | |
irc | InspIRCd | 671 | 2.382 |
http | lighttpd | 607 | 2.155 |
http | 475 | 1.686 | |
irc | ircu ircd | 270 | 0.958 |
irc | 233 | 0.827 | |
irc | ratbox ircd | 176 | 0.625 |
http | Microsoft IIS httpd | 164 | 0.582 |
http | thttpd | 134 | 0.476 |
http | Microsoft HTTPAPI httpd | 115 | 0.408 |
http | GoAhead-Webs httpd | 99 | 0.351 |
ssh | OpenSSH | 92 | 0.327 |
http | Boa HTTPd | 89 | 0.316 |
http | Apache Tomcat/Coyote JSP engine | 85 | 0.302 |
ssh | 80 | 0.284 | |
http | Apache | 69 | 0.245 |
eggdrop | Eggdrop IRC bot console | 57 | 0.202 |
http-proxy | Squid http proxy | 54 | 0.192 |
irc | IRCnet ircd | 46 | 0.163 |
vnc | VNC | 42 | 0.149 |
irc | Hybrid-based ircd | 33 | 0.117 |
ssh | SCS sshd | 26 | 0.092 |
mysql | MySQL | 25 | 0.089 |
ftp | Microsoft ftpd | 25 | 0.089 |
http | Hikvision-Webs | 22 | 0.078 |
http | nginx | 18 | 0.064 |
ftp | 17 | 0.06 | |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 16 | 0.057 |
smtp | Microsoft ESMTP | 15 | 0.053 |
upnp | Microsoft Windows UPnP | 14 | 0.05 |
http-proxy | MikroTik http proxy | 13 | 0.046 |
http-proxy | F5 BIG-IP load balancer http proxy | 13 | 0.046 |
ftp | ProFTPD | 12 | 0.043 |
ftp | FileZilla ftpd | 11 | 0.039 |
teamspeak | TeamSpeak voice communication | 10 | 0.035 |
smtp | Microsoft Exchange smtpd | 10 | 0.035 |
smtp | 10 | 0.035 | |
http | WebLogic httpd | 10 | 0.035 |
http | http server 1.0 | 10 | 0.035 |
http | GeoVision GeoHttpServer for webcams | 10 | 0.035 |
arcserve | ARCserve Discovery | 10 | 0.035 |