~25 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Count |
Percent |
|---|---|---|---|
| http | 5344 | 20.687 | |
| irc | Dancer ircd | 4015 | 15.542 |
| http | SonicWALL | 3703 | 14.334 |
| chat | AIM or ICQ server | 2121 | 8.21 |
| no match | -/- | 1435 | 5.555 |
| http | Microsoft IIS httpd | 1374 | 5.319 |
| http | lighttpd | 1071 | 4.146 |
| http | AIM | 718 | 2.779 |
| http | Apache | 665 | 2.574 |
| ssl | TLS | 276 | 1.068 |
| http | DrcomServer1.0 | 249 | 0.964 |
| http | Apache Tomcat/Coyote JSP engine | 220 | 0.852 |
| http | IBM WebSphere Application Server | 207 | 0.801 |
| http | Boa HTTPd | 206 | 0.797 |
| http | Allegro RomPager | 202 | 0.782 |
| http | GoAhead-Webs httpd | 194 | 0.751 |
| http | Indy | 183 | 0.708 |
| http | nginx | 179 | 0.693 |
| http | Netwave webcam http config | 173 | 0.67 |
| http | thttpd | 149 | 0.577 |
| http | Netwave IP camera http config | 132 | 0.511 |
| http | OpenDNS Guide | 117 | 0.453 |
| ssh | OpenSSH | 108 | 0.418 |
| ssh | 95 | 0.368 | |
| http | GoAhead-Webs | 95 | 0.368 |
| http | mini_httpd | 74 | 0.286 |
| http | uTorrent utserver web interface | 73 | 0.283 |
| http | Avtech AVN801 network camera | 73 | 0.283 |
| vnc | VNC | 65 | 0.252 |
| http | PDR-M800 | 60 | 0.232 |
| http | Jetty | 59 | 0.228 |
| http | Linux | 58 | 0.225 |
| http | ADAM-6000 | 54 | 0.209 |
| telnet | 52 | 0.201 | |
| http-proxy | Squid http proxy | 51 | 0.197 |
| http | Microsoft HTTPAPI httpd | 46 | 0.178 |
| http | GoAhead-Webs embedded httpd | 44 | 0.17 |
| http | Rex media encoder http config | 39 | 0.151 |
| http | uTorrent WebUI | 38 | 0.147 |
| http | Hikvision-Webs | 38 | 0.147 |
| http | uc-httpd | 36 | 0.139 |
| http | WYM httpd | 35 | 0.135 |
| ftp | Microsoft ftpd | 31 | 0.12 |
| http | webserver | 30 | 0.116 |
| shoutcast | SHOUTcast server | 28 | 0.108 |
| http | kangle | 28 | 0.108 |
| http | RemotelyAnywhere remote PC management httpd | 25 | 0.097 |
| http | TwistedWeb httpd | 24 | 0.093 |
| http | Httpd | 23 | 0.089 |
| mysql | MySQL | 22 | 0.085 |
| soap | gSOAP soap | 21 | 0.081 |
| http | Mbedthis-Appweb | 21 | 0.081 |
| http | Gadspot/Avtech AV787 webcam http config | 21 | 0.081 |
| smtp | Microsoft ESMTP | 19 | 0.074 |
| http | GeoVision GeoHttpServer for webcams | 19 | 0.074 |
| http | Engine 12.6.1.372 | 18 | 0.07 |
| http | DVR Systems webcam http interface | 18 | 0.07 |
| ftp | ProFTPD | 18 | 0.07 |
| remoting | MS .NET Remoting services | 17 | 0.066 |
| ice | Internet Communications Engine | 17 | 0.066 |
| http | NAI EPO Agent framework | 17 | 0.066 |
| http | D-Link DIR-300 WAP http admin | 16 | 0.062 |
| http | CherryPy httpd | 16 | 0.062 |
| http | Caucho Resin JSP engine | 16 | 0.062 |
| upnp | Portable SDK for UPnP devices | 15 | 0.058 |
| http | WebLogic httpd | 15 | 0.058 |
| directconnect | Direct Connect P2P | 15 | 0.058 |
| ssh | Dropbear sshd | 14 | 0.054 |
| http-proxy | MikroTik http proxy | 14 | 0.054 |
| http | eHTTP v2.0 | 14 | 0.054 |
| http | dcs-lig-httpd | 14 | 0.054 |
| http | Cross Web Server | 14 | 0.054 |
| http-proxy | F5 BIG-IP load balancer http proxy | 13 | 0.05 |
| http | Network Associates ePolicy Orchestrator | 13 | 0.05 |
| http | Ecam | 13 | 0.05 |
| ftp | vsftpd | 13 | 0.05 |
| http | TornadoServer | 12 | 0.046 |
| http | QNAP TS-219P NAS http config | 11 | 0.043 |
| http | AIM HTTP | 11 | 0.043 |
| ftp | vsftpd (before 2.0.8) or WU-FTPD | 11 | 0.043 |
| vnc | RealVNC Enterprise | 10 | 0.039 |
| smtp | Postfix smtpd | 10 | 0.039 |
| smtp | Microsoft Exchange smtpd | 10 | 0.039 |
| http | SWEM | 10 | 0.039 |
| http-proxy | EZproxy web proxy | 10 | 0.039 |