~160 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Count |
Percent |
|---|---|---|---|
| ssl/vmware-auth | VMware Authentication Daemon | 136549 | 85.022 |
| http | 11127 | 6.928 | |
| http | SonicWALL | 3717 | 2.314 |
| chat | AIM or ICQ server | 2221 | 1.383 |
| no match | -/- | 1264 | 0.787 |
| ssl | SSLv3 | 1156 | 0.72 |
| http | lighttpd | 895 | 0.557 |
| http | AIM | 599 | 0.373 |
| http | Apache | 315 | 0.196 |
| http | Microsoft IIS httpd | 298 | 0.186 |
| http | thttpd | 163 | 0.101 |
| ftp | vsftpd (before 2.0.8) or WU-FTPD | 116 | 0.072 |
| ssh | OpenSSH | 113 | 0.07 |
| http | Microsoft HTTPAPI httpd | 113 | 0.07 |
| http | GoAhead-Webs httpd | 105 | 0.065 |
| http | Netwave IP camera http config | 101 | 0.063 |
| ssh | 96 | 0.06 | |
| vnc | VNC | 93 | 0.058 |
| http | Apache Tomcat/Coyote JSP engine | 92 | 0.057 |
| http-proxy | Squid http proxy | 77 | 0.048 |
| http | Avtech AVN801 network camera | 71 | 0.044 |
| telnet | 51 | 0.032 | |
| http | PDR-M800 | 48 | 0.03 |
| http | Boa HTTPd | 48 | 0.03 |
| pop3 | qmail pop3d | 44 | 0.027 |
| http | MiniServ | 44 | 0.027 |
| vmware-auth | VMware Authentication Daemon | 38 | 0.024 |
| arcserve | ARCserve Discovery | 37 | 0.023 |
| http | Mbedthis-Appweb | 32 | 0.02 |
| http | mini_httpd | 24 | 0.015 |
| mysql | MySQL | 22 | 0.014 |
| http | GoAhead-Webs | 22 | 0.014 |
| http | Hikvision-Webs | 21 | 0.013 |
| iss-realsecure | ISS RealSecure IDS ServerSensor | 20 | 0.012 |
| ftp | Microsoft ftpd | 20 | 0.012 |
| vtun | Vtun Virtual Tunnel | 19 | 0.012 |
| http | uTorrent WebUI | 17 | 0.011 |
| http | nginx | 17 | 0.011 |
| ftp | vsftpd | 17 | 0.011 |
| http | uc-httpd | 15 | 0.009 |
| http | Samba SWAT administration server | 15 | 0.009 |
| ftp | 15 | 0.009 | |
| http-proxy | F5 BIG-IP load balancer http proxy | 14 | 0.009 |
| http | LunaServer-Pressario | 14 | 0.009 |
| http | Gadspot/Avtech AV787 webcam http config | 13 | 0.008 |
| ftp | Pure-FTPd | 13 | 0.008 |
| ssh | Cisco SSH | 12 | 0.007 |
| http | Cross Web Server | 12 | 0.007 |
| ftp | Serv-U ftpd | 12 | 0.007 |
| directconnect | Direct Connect P2P | 12 | 0.007 |
| smtp | 11 | 0.007 | |
| http | GeoVision GeoHttpServer for webcams | 11 | 0.007 |
| vnc | RealVNC Enterprise | 10 | 0.006 |
| rtsp | 10 | 0.006 | |
| http | VMware vCenter Converter httpd | 10 | 0.006 |
| http | RemotelyAnywhere remote PC management httpd | 10 | 0.006 |
| ftp | ProFTPD | 10 | 0.006 |
| ftp | FileZilla ftpd | 10 | 0.006 |