~116 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Info | OS | Devicetype | Count | Percent |
---|---|---|---|---|---|---|---|
socks5 | No authentication; connection failed | 43643 | 37.564 | ||||
no match | 19125 | 16.461 | |||||
socks-proxy | Socks4A | 7727 | 6.651 | ||||
irc | Unreal ircd | 5357 | 4.611 | ||||
irc | Dancer ircd | 4142 | 3.565 | ||||
http | 3729 | 3.21 | |||||
melange | Melange Chat Server | 1.10 | 2724 | 2.345 | |||
chat | AIM or ICQ server | 2569 | 2.211 | ||||
telnet | Cisco telnetd | IOS | router | 2058 | 1.771 | ||
http | Microsoft IIS httpd | 1897 | 1.633 | ||||
irc | InspIRCd | 1095 | 0.942 | ||||
ssh | OpenSSH | 4.3 | protocol 2.0 | 888 | 0.764 | ||
telnet | 787 | 0.677 | |||||
http | Microsoft HTTPAPI httpd | 2.0 | SSDP/UPnP | Windows | 757 | 0.652 | |
vnc | VNC | protocol 3.8 | 728 | 0.627 | |||
irc | ircu ircd | 527 | 0.454 | ||||
http | Apache Tomcat/Coyote JSP engine | 1.1 | 481 | 0.414 | |||
http-proxy | Squid http proxy | 2.7.STABLE9 | 457 | 0.393 | |||
http | GoAhead-Webs httpd | 450 | 0.387 | ||||
http | lighttpd | 1.4.19 | 438 | 0.377 | |||
ssh | OpenSSH | 5.3 | protocol 2.0 | 404 | 0.348 | ||
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | protocol 2.0 | Linux | 394 | 0.339 | |
irc | 379 | 0.326 | |||||
http | Virata-EmWeb | 6.0.1 | 378 | 0.325 | |||
http-proxy | Squid http proxy | 3.1.19 | 357 | 0.307 | |||
vnc | VNC | protocol 3.6 | 351 | 0.302 | |||
ca-mq | CA Message Queuing Server | 349 | 0.3 | ||||
remoting | MS .NET Remoting services | 333 | 0.287 | ||||
http | Boa HTTPd | 0.94.14rc21 | 332 | 0.286 | |||
irc | IRCnet ircd | 286 | 0.246 | ||||
irc | ratbox ircd | 272 | 0.234 | ||||
http-proxy | Squid http proxy | 2.6.STABLE21 | 268 | 0.231 | |||
http | Boa HTTPd | 0.93.15 | 258 | 0.222 | |||
eggdrop | Eggdrop irc bot console | 1.6.18 | botname: Amaralis | 254 | 0.219 | ||
ssh | MikroTik RouterOS sshd | protocol 2.0 | Linux | router | 253 | 0.218 | |
ssl | TLS | 1.0 | 236 | 0.203 | |||
http | Hikvision-Webs | 200 | 0.172 | ||||
http | ProLinux | 1.0 | 197 | 0.17 | |||
http | thttpd | 2.25b | 187 | 0.161 | |||
ssh | OpenSSH | 5.1p1 Debian 5 | protocol 2.0 | Linux | 183 | 0.158 | |
directconnect | Direct Connect P2P | Windows | 175 | 0.151 | |||
vnc | RealVNC Personal | protocol 4.0 | 174 | 0.15 | |||
http | Router | 168 | 0.145 | ||||
vnc | RealVNC Enterprise | protocol 4.1 | 158 | 0.136 | |||
http | PROLinux | 2.0 | 146 | 0.126 | |||
smtp | 141 | 0.121 | |||||
http | lighttpd | 1.4.29 | 140 | 0.12 | |||
http | thttpd | 2.24 | 136 | 0.117 | |||
ftp | Microsoft ftpd | Windows | 132 | 0.114 | |||
ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | Ubuntu Linux; protocol 2.0 | Linux | 130 | 0.112 | |
http | thttpd | 129 | 0.111 | ||||
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | Ubuntu Linux; protocol 2.0 | Linux | 124 | 0.107 | |
ftp | 122 | 0.105 | |||||
irc | IRCnet-based ircd | 116 | 0.1 | ||||
http | TP-LINK Router | 114 | 0.098 | ||||
arcserve | ARCserve Discovery | 114 | 0.098 | ||||
http | nginx | 0.8.33 | 111 | 0.096 | |||
intranetchat | Intranet Chat Server | 108 | 0.093 | ||||
ssh | OpenSSH | 3.9p1 | protocol 1.99 | 102 | 0.088 | ||
http | Boa HTTPd | 0.94.13 | 100 | 0.086 | |||
ssh | protocol 1.5 | 99 | 0.085 | ||||
ssh | OpenSSH | 5.5p1 Debian 6+squeeze1 | protocol 2.0 | Linux | 94 | 0.081 | |
irc | BitlBee IRCd | 94 | 0.081 | ||||
http | micro_httpd | 94 | 0.081 | ||||
http | thttpd | 2.20c 21nov01 | 92 | 0.079 | |||
ovm-manager | Oracle VM Manager | 89 | 0.077 | ||||
telnet | CircleMUD telnetd | 3.0 | 81 | 0.07 | |||
http | nginx | 74 | 0.064 | ||||
vnc | protocol 3 | 70 | 0.06 | ||||
ftp | Serv-U ftpd | 6.4 | Windows | 68 | 0.059 | ||
lexlm | Lexmark language monitor | 66 | 0.057 | ||||
upnp | Microsoft Windows UPnP | Windows | 65 | 0.056 | |||
http | MpVodServer | 1.2 | 65 | 0.056 | |||
ftp | vsftpd | 2.0.8 or later | 64 | 0.055 | |||
ftp | Serv-U ftpd | 6.0 | Windows | 63 | 0.054 | ||
http | http server 1.0 | 62 | 0.053 | ||||
xml | 59 | 0.051 | |||||
http | Microsoft HTTPAPI httpd | 1.0 | SSDP/UPnP | Windows | 58 | 0.05 | |
http | Apache | 2.2.3 | 57 | 0.049 | |||
ssh | OpenSSH | 5.8p1 Debian 1ubuntu3 | Ubuntu Linux; protocol 2.0 | Linux | 55 | 0.047 | |
napster | WinMX or Lopster Napster P2P client | 54 | 0.046 | ||||
mongodb | MongoDB | 4 | 53 | 0.046 | |||
ftp | Pure-FTPd | 53 | 0.046 | ||||
ftp | FileZilla ftpd | Windows | 53 | 0.046 | |||
ssh | OpenSSH | 5.8 | protocol 2.0 | 51 | 0.044 | ||
http | Ubicom | 1.1 | 51 | 0.044 | |||
http | lighttpd | 50 | 0.043 | ||||
socks5 | 49 | 0.042 | |||||
ssh | Dropbear sshd | 0.52 | protocol 2.0 | Linux | 48 | 0.041 | |
ssh | OpenSSH | 2.3.0 mikrotik 2.9 | protocol 1.99 | router | 46 | 0.04 | |
http | Boa httpd | 46 | 0.04 | ||||
ssh | OpenSSH | 5.8p1 Debian 7ubuntu1 | Ubuntu Linux; protocol 2.0 | Linux | 44 | 0.038 | |
http-proxy | Squid http proxy | 2.6.STABLE12 | 44 | 0.038 | |||
http-proxy | MikroTik http proxy | 44 | 0.038 | ||||
ssh | OpenSSH | 5.2 | protocol 2.0 | 43 | 0.037 | ||
ssh | OpenSSH | 5.1 | protocol 2.0 | 41 | 0.035 | ||
jabber | Jabber instant messaging server | Protocol 1.0 | 41 | 0.035 | |||
svnserve | Subversion | 40 | 0.034 | ||||
http-proxy | Squid http proxy | 40 | 0.034 | ||||
http | Apache | 1.3.26 | 40 | 0.034 | |||
http | GeoVision GeoHttpServer for webcams | webcam | 39 | 0.034 | |||
eggdrop | Eggdrop IRC bot console | 1.6.20 | 37 | 0.032 | |||
ssh | WeOnlyDo sshd | 2.1.3 | protocol 2.0 | Windows | 36 | 0.031 | |
http | webserver | 1.0 | 36 | 0.031 | |||
http | MiniServ | 0.01 | Webmin httpd | 35 | 0.03 | ||
http | lighttpd | 1.4.28 | 35 | 0.03 | |||
http | Apache | 2.2.16 | 35 | 0.03 | |||
http | Apache | 2.2.14 | 35 | 0.03 | |||
ftp | FileZilla ftpd | 0.9.41 beta | Windows | 35 | 0.03 | ||
ftp | FileZilla ftpd | 0.9.39 beta | Windows | 35 | 0.03 | ||
irc-proxy | psyBNC | 2.3.1 | 34 | 0.029 | |||
ssh | OpenSSH | 5.5p1 Debian 6 | protocol 2.0 | Linux | 33 | 0.028 | |
ssh | Dropbear sshd | 0.53.1 | protocol 2.0 | Linux | 33 | 0.028 | |
smtp | Postfix smtpd | 33 | 0.028 | ||||
shell | w4ck1ng-shell | 0.3 | **BACKDOOR** | 33 | 0.028 | ||
irc | Hybrid-based ircd | 33 | 0.028 | ||||
eggdrop | Eggdrop IRC bot console | 1.6.21 | 33 | 0.028 | |||
ssh | OpenSSH | 3.6.1p2 | protocol 2.0 | 32 | 0.028 | ||
http | WYM httpd | 1.0 | 32 | 0.028 | |||
vnc | VNC | protocol 3.3 | 29 | 0.025 | |||
ssh | OpenSSH | 5.4p1 | FreeBSD 20100308; protocol 2.0 | FreeBSD | 29 | 0.025 | |
irc-proxy | psyBNC | 2.3.2-7 | 29 | 0.025 | |||
http | uTorrent http admin | 3.0 | 29 | 0.025 | |||
http | Router Webserver | 29 | 0.025 | ||||
http-proxy | Haproxy http proxy | load balancer | 29 | 0.025 | |||
http | Jetty | 8.0.y.z-SNAPSHOT | 29 | 0.025 | |||
http | MiniServ | 1.590 | Webmin httpd | 28 | 0.024 | ||
http | InterSect Alliance SNARE http config | 28 | 0.024 | ||||
http | H3C-Miniware-Webs | 28 | 0.024 | ||||
http | Jetty | 6.1.x | 27 | 0.023 | |||
http | Apache | 2.2.22 | 27 | 0.023 | |||
vnc | Apple remote desktop vnc | Mac OS X | 26 | 0.022 | |||
ssh | OpenSSH | 5.6 | protocol 2.0 | 26 | 0.022 | ||
telnet | Linux telnetd | Linux | 25 | 0.022 | |||
ssh | OpenSSH | 6.0p1 Debian 2 | protocol 2.0 | Linux | 25 | 0.022 | |
ntop-http | Ntop web interface | 3.2 | Linux | 25 | 0.022 | ||
ssh | OpenSSH | 3.9p1 | protocol 2.0 | 24 | 0.021 | ||
ftp | ProFTPD | 24 | 0.021 | ||||
ssh | OpenSSH | 5.1p1 Debian 5ubuntu1 | Ubuntu Linux; protocol 2.0 | Linux | 23 | 0.02 | |
ssh | OpenSSH | 4.5p1 | FreeBSD 20061110; protocol 2.0 | FreeBSD | 23 | 0.02 | |
smtp | Microsoft Exchange smtpd | Windows | 23 | 0.02 | |||
ftp | FileZilla ftpd | 0.9.40 beta | Windows | 23 | 0.02 | ||
vnc | VNC | protocol 3.7 | 22 | 0.019 | |||
ssh | OpenSSH | 5.8p1-hpn13v11 | protocol 2.0 | 22 | 0.019 | ||
ssh | Dropbear sshd | 0.51 | protocol 2.0 | Linux | 22 | 0.019 | |
http | Microsoft ISA httpd | Windows | 22 | 0.019 | |||
http | httpd 1.1 | 22 | 0.019 | ||||
http | AR7 embedded httpd | 22 | 0.019 | ||||
ftp | Synology DiskStation NAS ftpd | storage-misc | 22 | 0.019 | |||
ssh | OpenSSH | 4.7p1 Debian 8ubuntu1.2 | protocol 2.0 | Linux | 21 | 0.018 | |
socks4 | Connection ok | 21 | 0.018 | ||||
openvpn | OpenVPN | 21 | 0.018 | ||||
netbios-ssn | 21 | 0.018 | |||||
http | lighttpd | 1.4.26 | 21 | 0.018 | |||
http | Boa HTTPd | 0.94.11 | 21 | 0.018 | |||
socks5 | Username/password authentication required | 20 | 0.017 | ||||
irc | ngircd | 20 | 0.017 | ||||
http | Linksys router http config | device model BEFSR41 | WAP | 20 | 0.017 | ||
ftp | vsftpd | 2.0.5 | Unix | 20 | 0.017 | ||
ftp | FileZilla ftpd | 0.9.24 beta | Windows | 20 | 0.017 |