~136 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Version | Count |
Percent |
|---|---|---|---|---|
| socks-proxy | Socks4A | 46756 | 34.223 | |
| no match | -/- | -/- | 23352 | 17.092 |
| irc | Unreal ircd | 17685 | 12.944 | |
| socks5 | 10663 | 7.805 | ||
| irc | Dancer ircd | 4652 | 3.405 | |
| lexlm | Lexmark language monitor | 3376 | 2.471 | |
| chat | AIM or ICQ server | 2528 | 1.85 | |
| http | 2521 | 1.845 | ||
| irc | BitlBee IRCd | 2265 | 1.658 | |
| eggdrop | Eggdrop IRC bot console | 1.6.21 | 2237 | 1.637 |
| irc | InspIRCd | 2116 | 1.549 | |
| telnet | Cisco telnetd | 2050 | 1.5 | |
| irc | ircu ircd | 1917 | 1.403 | |
| smtp | Postfix smtpd | 1591 | 1.165 | |
| irc | IRCnet ircd | 1475 | 1.08 | |
| irc-proxy | psyBNC | 2.3BETA | 790 | 0.578 |
| irc | ngircd | 789 | 0.578 | |
| telnet | 697 | 0.51 | ||
| irc | IRCnet-based ircd | 656 | 0.48 | |
| irc | ratbox ircd | 647 | 0.474 | |
| irc | 574 | 0.42 | ||
| http | lighttpd | 1.4.29 | 459 | 0.336 |
| http | lighttpd | 1.4.19 | 431 | 0.315 |
| http-proxy | Squid http proxy | 2.7.STABLE9 | 374 | 0.274 |
| irc | Hybrid-based ircd | 280 | 0.205 | |
| http | Microsoft IIS httpd | 280 | 0.205 | |
| http | Microsoft HTTPAPI httpd | 2.0 | 247 | 0.181 |
| irc-proxy | psyBNC | 2.3.2-4 | 233 | 0.171 |
| vnc | VNC | 176 | 0.129 | |
| http | thttpd | 2.24 | 143 | 0.105 |
| irc-proxy | ShroudBNC irc-proxy | 1.1 revision 371 | 141 | 0.103 |
| irc | Minbif ircd | 134 | 0.098 | |
| http | GoAhead-Webs httpd | 129 | 0.094 | |
| irc-proxy | psyBNC | 2.3.1 | 125 | 0.091 |
| ssh | 124 | 0.091 | ||
| irc-proxy | ShroudBNC irc-proxy | 1.2 revision 1080 | 123 | 0.09 |
| http | nginx | 0.8.33 | 109 | 0.08 |
| http | Boa HTTPd | 0.94.14rc21 | 93 | 0.068 |
| irc-proxy | psyBNC | 2.3.2-7 | 88 | 0.064 |
| ssh | OpenSSH | 4.3 | 84 | 0.061 |
| ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | 83 | 0.061 |
| http | Virata-EmWeb | 6.0.1 | 74 | 0.054 |
| http | Apache Tomcat/Coyote JSP engine | 1.1 | 72 | 0.053 |
| http | Microsoft HTTPAPI httpd | 1.0 | 67 | 0.049 |
| ftp | Microsoft ftpd | 45 | 0.033 | |
| irc-proxy | dircproxy | 43 | 0.031 | |
| directconnect | Direct Connect P2P | 42 | 0.031 | |
| socks4 | Connection ok | 40 | 0.029 | |
| irc-proxy | psyBNC | 2.2.1 | 40 | 0.029 |
| http | thttpd | 2.25b | 39 | 0.029 |
| ftp | 39 | 0.029 | ||
| upnp | Microsoft Windows UPnP | 37 | 0.027 | |
| irc-proxy | psyBNC | 2.3.2-9 | 36 | 0.026 |
| ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | 35 | 0.026 |
| http | thttpd | 34 | 0.025 | |
| shoutcast-publishing | SHOUTcast publishing port | 33 | 0.024 | |
| arcserve | ARCserve Discovery | 33 | 0.024 | |
| vnc | RealVNC Personal | 32 | 0.023 | |
| http-proxy | Squid http proxy | 32 | 0.023 | |
| ssh | OpenSSH | 5.1p1 Debian 5 | 31 | 0.023 |
| vnc | RealVNC Enterprise | 28 | 0.02 | |
| ssl | TLS | 1.0 | 28 | 0.02 |
| http | Hikvision-Webs | 28 | 0.02 | |
| http | Apache | 2.2.3 | 28 | 0.02 |
| ssh | OpenSSH | 5.3 | 26 | 0.019 |
| mysql | MySQL | 25 | 0.018 | |
| telnet | Linux telnetd | 24 | 0.018 | |
| napster | WinMX or Lopster Napster P2P client | 24 | 0.018 | |
| http | http server 1.0 | 23 | 0.017 | |
| ftp | ProFTPD | 22 | 0.016 | |
| http | lighttpd | 21 | 0.015 | |
| ssh | SCS sshd | 2.0.13 | 20 | 0.015 |
| ssh | OpenSSH | 5.0 | 20 | 0.015 |
| http-proxy | Squid http proxy | 2.6.STABLE12 | 20 | 0.015 |
| ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | 19 | 0.014 |
| ssh | OpenSSH | 5.5p1 Debian 6+squeeze1 | 19 | 0.014 |
| http-proxy | MikroTik http proxy | 19 | 0.014 | |
| http | Boa HTTPd | 0.94.13 | 19 | 0.014 |
| ssh | OpenSSH | 5.8 | 18 | 0.013 |
| secure-socket | CA Secure Socket Adapter | 18 | 0.013 | |
| http | lighttpd | 1.4.20 | 18 | 0.013 |
| http | GeoVision GeoHttpServer for webcams | 18 | 0.013 | |
| xml | 16 | 0.012 | ||
| ftp | Pure-FTPd | 16 | 0.012 | |
| smtp | 15 | 0.011 |