~27 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Count |
Percent |
|---|---|---|---|
| telnet | Cisco router telnetd | 3840 | 13.75 |
| http | 3556 | 12.733 | |
| irc | Dancer ircd | 3517 | 12.594 |
| http | SonicWALL | 3408 | 12.203 |
| no match | -/- | 1808 | 6.474 |
| chat | AIM or ICQ server | 1668 | 5.973 |
| http | Tor directory | 1630 | 5.837 |
| telnet | Cisco IOS telnetd | 1206 | 4.318 |
| http | lighttpd | 905 | 3.241 |
| telnet | 801 | 2.868 | |
| http | AIM | 678 | 2.428 |
| http | Apache | 467 | 1.672 |
| telnet | Cisco 1721 router telnetd | 412 | 1.475 |
| http | Microsoft IIS httpd | 391 | 1.4 |
| http | Apache Tomcat/Coyote JSP engine | 348 | 1.246 |
| http | Jetty | 209 | 0.748 |
| http | PunkBuster http config | 201 | 0.72 |
| http | Secure Computing Sidewinder firewall http admin | 200 | 0.716 |
| shoutcast | SHOUTcast server | 183 | 0.655 |
| http | Tor built-in httpd | 144 | 0.516 |
| http | DrcomServer1.0 | 130 | 0.465 |
| http | MMBD-ADB | 121 | 0.433 |
| http | Boa HTTPd | 92 | 0.329 |
| ssh | 78 | 0.279 | |
| http | Netwave IP camera http config | 78 | 0.279 |
| http | thttpd | 70 | 0.251 |
| http | GoAhead-Webs | 70 | 0.251 |
| http | nginx | 66 | 0.236 |
| ssh | OpenSSH | 62 | 0.222 |
| http | Avtech AVN801 network camera | 57 | 0.204 |
| http | Tiny WebServer | 52 | 0.186 |
| http-proxy | Squid http proxy | 42 | 0.15 |
| http | mini_httpd | 42 | 0.15 |
| http | PDR-M800 | 38 | 0.136 |
| vnc | VNC | 37 | 0.132 |
| http | Allegro RomPager | 37 | 0.132 |
| http | GoAhead-Webs httpd | 31 | 0.111 |
| http | Mathopd httpd | 26 | 0.093 |
| redis | Redis key-value store | 25 | 0.09 |
| http-proxy | Haproxy http proxy | 25 | 0.09 |
| http | Oracle Application Server 10g httpd | 24 | 0.086 |
| http | GoAhead-Webs embedded httpd | 23 | 0.082 |
| ssl | TLS | 21 | 0.075 |
| http | Mobotix Camera http config | 19 | 0.068 |
| http | Hikvision-Webs | 19 | 0.068 |
| mysql | MySQL | 18 | 0.064 |
| http | Gadspot/Avtech AV787 webcam http config | 17 | 0.061 |
| http | TwistedWeb httpd | 16 | 0.057 |
| http | Tracd | 16 | 0.057 |
| http | Mbedthis-Appweb | 16 | 0.057 |
| ftp | Microsoft ftpd | 16 | 0.057 |
| telnet | the BCC terminal server | 15 | 0.054 |
| smtp | Microsoft ESMTP | 15 | 0.054 |
| http | IM | 15 | 0.054 |
| http | bywifi | 15 | 0.054 |
| vnc | RealVNC Enterprise | 14 | 0.05 |
| http | WebLogic httpd | 14 | 0.05 |
| http | uc-httpd | 14 | 0.05 |
| http | Cisco IOS http config | 14 | 0.05 |
| ftp | 14 | 0.05 | |
| http-proxy | F5 BIG-IP load balancer http proxy | 13 | 0.047 |
| http | Microsoft HTTPAPI httpd | 13 | 0.047 |
| http | Icecast streaming media server | 13 | 0.047 |
| http | Cross Web Server | 13 | 0.047 |
| java-rmi | Java RMI | 12 | 0.043 |
| http | uTorrent WebUI | 12 | 0.043 |
| http | TrackerCam-HttpSvr | 12 | 0.043 |
| http | DVR Systems webcam http interface | 12 | 0.043 |
| http | AIM HTTP | 12 | 0.043 |
| http-proxy | EZproxy web proxy | 11 | 0.039 |
| http | MS .NET Remoting | 11 | 0.039 |
| ftp | vsftpd (before 2.0.8) or WU-FTPD | 11 | 0.039 |
| ftp | ProFTPD | 11 | 0.039 |
| upnp | Portable SDK for UPnP devices | 10 | 0.036 |
| http | RemotelyAnywhere remote PC management httpd | 10 | 0.036 |