~123 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Info | OS | Devicetype | Count | Percent |
---|---|---|---|---|---|---|---|
no match | 34474 | 27.903 | |||||
http | 15686 | 12.696 | |||||
ssl | SSLv3 | 5870 | 4.751 | ||||
irc | Dancer ircd | 4095 | 3.314 | ||||
ssl | TLSv1 | 4058 | 3.284 | ||||
http | SonicWALL | firewall | 3895 | 3.153 | |||
http | MiniServ | 0.01 | Webmin httpd | 3803 | 3.078 | ||
http | Apache | 2754 | 2.229 | ||||
chat | AIM or ICQ server | 2558 | 2.07 | ||||
http | MiniServ | 1.580 | Webmin httpd | 1753 | 1.419 | ||
telnet | 1747 | 1.414 | |||||
http | lighttpd | 1.4.20 | 1659 | 1.343 | |||
http-proxy | Squid http proxy | 1534 | 1.242 | ||||
http | Apache Tomcat/Coyote JSP engine | 1.1 | 1404 | 1.136 | |||
http | Microsoft IIS httpd | 1298 | 1.051 | ||||
http | Apache | SSL-only mode | 1102 | 0.892 | |||
telnet | Cisco router telnetd | IOS | router | 1095 | 0.886 | ||
http | MiniServ | 1.550 | Webmin httpd | 1059 | 0.857 | ||
http | MiniServ | 1.590 | Webmin httpd | 792 | 0.641 | ||
telnet | Cisco 1721 router telnetd | IOS | router | 791 | 0.64 | ||
ssh | OpenSSH | 3.9p1 | protocol 2.0 | 724 | 0.586 | ||
webdav | Tonido WebDAV | 704 | 0.57 | ||||
ssh | Dropbear sshd | 0.52 | protocol 2.0 | Linux | 687 | 0.556 | |
http | AIM | 1.0 | 659 | 0.533 | |||
irc-proxy | psyBNC | 2.3.2-7 | 615 | 0.498 | |||
http | Netwave IP camera http config | webcam | 613 | 0.496 | |||
http | Microsoft IIS httpd | 6.0 | Windows | 538 | 0.435 | ||
http | lighttpd | 1.4.19 | 531 | 0.43 | |||
http | Microsoft HTTPAPI httpd | 2.0 | SSDP/UPnP | Windows | 518 | 0.419 | |
http | Apache | 2.2.22 | (Unix) DAV/2 PHP/5.3.13 | 503 | 0.407 | ||
socks5 | 498 | 0.403 | |||||
ssh | OpenSSH | 4.3 | protocol 2.0 | 494 | 0.4 | ||
http | Apache | 2.2.14 | (FreeBSD) mod_ssl/2.2.14 OpenSSL/0.9.8k DAV/2 PHP/5.3.2 with Suhosin-Patch | 492 | 0.398 | ||
http | MiniServ | 1.570 | Webmin httpd | 489 | 0.396 | ||
ssl | TLS | 1.0 | 449 | 0.363 | |||
http | lighttpd | 1.4.29 | 443 | 0.359 | |||
http-proxy | CCProxy http proxy | unauthorized | Windows | 401 | 0.325 | ||
telnet | Cisco IOS telnetd | IOS | switch | 381 | 0.308 | ||
http | Apache | 2.0.49 | (Unix) mod_ssl/2.0.49 OpenSSL/0.9.7b PHP/4.4.9 | 379 | 0.307 | ||
vnc | VNC | protocol 3.8 | 363 | 0.294 | |||
http | lighttpd | 1.4.18 | 359 | 0.291 | |||
ssh | Dropbear sshd | 0.51 | protocol 2.0 | Linux | 326 | 0.264 | |
http | Boa HTTPd | 0.94.14rc21 | 318 | 0.257 | |||
http | nginx | 0.8.49 | 299 | 0.242 | |||
http | Hikvision-Webs | 293 | 0.237 | ||||
http | lighttpd | 1.4.10 | 278 | 0.225 | |||
http | Microsoft HTTPAPI httpd | 1.0 | SSDP/UPnP | Windows | 272 | 0.22 | |
ftp | 269 | 0.218 | |||||
http | MiniServ | 1.530 | Webmin httpd | 265 | 0.214 | ||
irc-proxy | psyBNC | 2.3.2-9 | 260 | 0.21 | |||
ssh | Dropbear sshd | 0.50 | protocol 2.0 | Linux | 255 | 0.206 | |
http | thttpd | Panasonic BB-HCM511 IP camera http config | 249 | 0.202 | |||
zabbix | Zabbix Monitoring System | 230 | 0.186 | ||||
http | Apache | 2.0.55 | (Trustix Secure Linux/Linux) | 223 | 0.18 | ||
http | SonicWALL firewall http config | firewall | 222 | 0.18 | |||
http | GoAhead-Webs httpd | 219 | 0.177 | ||||
ssh | Dropbear sshd | 0.48 | protocol 2.0 | Linux | 215 | 0.174 | |
http | lighttpd | 1.4.28 | 209 | 0.169 | |||
http | D-Link/Airlink IP webcam http config | 1.0 | webcam | 199 | 0.161 | ||
vnc | protocol 3 | 191 | 0.155 | ||||
ftp | Microsoft ftpd | Windows | 185 | 0.15 | |||
ssh | OpenSSH | 5.3 | protocol 2.0 | 183 | 0.148 | ||
http | mini_httpd | 1.19 19dec2003 | 181 | 0.146 | |||
ssh | OpenSSH | 3.9p1 | protocol 1.99 | 176 | 0.142 | ||
http | VCS-VideoJet-Webserver | 174 | 0.141 | ||||
http | uTorrent WebUI | Windows | 173 | 0.14 | |||
http-proxy | Tinyproxy | 1.7.0 | 162 | 0.131 | |||
ssh | OpenSSH | 4.5p1 | FreeBSD 20061110; protocol 2.0 | FreeBSD | 160 | 0.13 | |
http | thttpd | 2.20b 10oct00 | 155 | 0.125 | |||
irc-proxy | ShroudBNC irc-proxy | 1.1 revision 371 | 153 | 0.124 | |||
telnet | Pocket CMD telnetd | 149 | 0.121 | ||||
teamspeak | TeamSpeak voice communication | 3 | 137 | 0.111 | |||
http | Allegro RomPager | 4.01 | 137 | 0.111 | |||
http | MikroTik router http config | router | 132 | 0.107 | |||
mongodb | MongoDB | 2 | 128 | 0.104 | |||
http | MiniServ | 1.560 | Webmin httpd | 128 | 0.104 | ||
remoting | MS .NET Remoting services | 126 | 0.102 | ||||
http | thttpd | 118 | 0.096 | ||||
rtsp | 117 | 0.095 | |||||
zend-java-bridge | 113 | 0.091 | |||||
telnet | Linux telnetd | Linux | 107 | 0.087 | |||
ice | Internet Communications Engine | 106 | 0.086 | ||||
http | Avtech AVN801 network camera | 1.0 | UPnP 1.0 | webcam | 105 | 0.085 | |
smtp | Postfix smtpd | 104 | 0.084 | ||||
http | lighttpd | 104 | 0.084 | ||||
ssh | protocol 1.5 | 103 | 0.083 | ||||
vnc | VNC | protocol 3.6 | 99 | 0.08 | |||
http | CCcam card sharing system http config | 99 | 0.08 | ||||
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | Ubuntu Linux; protocol 2.0 | Linux | 95 | 0.077 | |
http | WindWeb | 2.0 | 95 | 0.077 | |||
http-proxy | 3proxy http proxy | authentication required | 95 | 0.077 | |||
http | Jetty | 6.1.25 | 95 | 0.077 | |||
telnet | Usually a Cisco/3com switch | IOS | switch | 93 | 0.075 | ||
http-proxy | Haproxy http proxy | load balancer | 91 | 0.074 | |||
http | Microsoft IIS httpd | 7.5 | Windows | 90 | 0.073 | ||
http | lighttpd | 1.4.26 | 89 | 0.072 | |||
vnc | RealVNC Enterprise | protocol 4.1 | 87 | 0.07 | |||
http | Apache | 2.2.3 | (CentOS) | 86 | 0.07 | ||
xml | 84 | 0.068 | |||||
ssh | OpenSSH | 5.4p1 | protocol 1.99 | 84 | 0.068 | ||
http | General User | 83 | 0.067 | ||||
http | monit httpd | 5.3.2 | Unix | 82 | 0.066 | ||
http | nginx | 78 | 0.063 | ||||
http | Httpd | 1.0 | 78 | 0.063 | |||
http | Apache | 2.2.14 | (Ubuntu) | 78 | 0.063 | ||
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | protocol 2.0 | Linux | 77 | 0.062 | |
http | MikroTik router config httpd | RouterOS | router | 77 | 0.062 | ||
vnc | RealVNC Personal | protocol 4.0 | 75 | 0.061 | |||
http | IBM WebSphere Application Server | 7.0 | 74 | 0.06 | |||
http | Draytek Vigor ADSL router webadmin | broadband router | 73 | 0.059 | |||
ssh | OpenSSH | 5.1p1 Debian 5 | protocol 2.0 | Linux | 71 | 0.057 | |
http | TwistedWeb httpd | 10.0.0 | 71 | 0.057 | |||
http | Cross Web Server | 71 | 0.057 | ||||
http | Boa HTTPd | 0.93.15 | 71 | 0.057 | |||
ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | Ubuntu Linux; protocol 2.0 | Linux | 70 | 0.057 | |
http | GoAhead-Webs embedded httpd | 69 | 0.056 | ||||
http | Boa HTTPd | 0.94.13 | 68 | 0.055 | |||
shoutcast-publishing | SHOUTcast publishing port | 66 | 0.053 | ||||
http | Apache | 2.2.16 | (Debian) | 66 | 0.053 | ||
http | webserver | 1.0 | 65 | 0.053 | |||
http | Meridian 64 | 64 | 0.052 | ||||
http | Apache | 2.2.16 | 63 | 0.051 | |||
vnc | VNC | protocol 3.7 | 62 | 0.05 | |||
secure-socket | CA Secure Socket Adapter | 59 | 0.048 | ||||
http | Jetty | 6.1.14 | 58 | 0.047 | |||
http | thttpd | 2.25b 29dec2003 | 57 | 0.046 | |||
http | IBM WebSphere Application Server | 6.1 | 57 | 0.046 | |||
mongodb | MongoDB | 1 | 56 | 0.045 | |||
http | ZNC IRC bouncer http config | 0.097 or later | 55 | 0.045 | |||
http | Mbedthis-Appweb | 2.0.4 | 54 | 0.044 | |||
memcache | memcached | 53 | 0.043 | ||||
http | thttpd | 2.25b | 53 | 0.043 | |||
ssh | OpenSSH | 5.5p1 Debian 6+squeeze1 | protocol 2.0 | Linux | 52 | 0.042 | |
netbios-ssn | 52 | 0.042 | |||||
http | MiniServ | 1.588 | Webmin httpd | 52 | 0.042 | ||
http | MiniServ | 1.540 | Webmin httpd | 52 | 0.042 | ||
http | nginx | 0.7.65 | 51 | 0.041 | |||
telnet | Net+Works Configuration Utility 1.0 | 50 | 0.04 | ||||
ssh | OpenSSH | 4.7 | protocol 2.0 | 50 | 0.04 | ||
http | Mobotix Camera http config | webcam | 48 | 0.039 | |||
http | Apache | 2.2.14 | 47 | 0.038 | |||
ssh | OpenSSH | 5.1 | protocol 2.0 | 46 | 0.037 | ||
http | D-Link DIR-300 WAP http admin | WAP | 46 | 0.037 | |||
http | VCS-VideoJet-Webserver httpd | Bosch VIP X1 video encoder http config | webcam | 45 | 0.036 | ||
http | Apache | 1.3.6 | 45 | 0.036 | |||
ssh | OpenSSH | 5.4 | protocol 2.0 | 43 | 0.035 | ||
http | PDR-M800 | 1.0 | 43 | 0.035 | |||
http | GoAhead-Webs | 43 | 0.035 | ||||
arcserve | ARCserve Discovery | 43 | 0.035 | ||||
http | DD-WRT milli_httpd | Linux | WAP | 42 | 0.034 | ||
time | 32 bits | 41 | 0.033 | ||||
http | Microsoft IIS httpd | 5.0 | Windows | 41 | 0.033 | ||
http | Apache | 2.2.3 | 41 | 0.033 | |||
http | Allegro RomPager | 4.06 | D-Link DWL-2100AP WAP http config | WAP | 40 | 0.032 | |
ssh | OpenSSH | 5.8p1 Debian 7ubuntu1 | Ubuntu Linux; protocol 2.0 | Linux | 39 | 0.032 | |
ssh | OpenSSH | 5.4p1 | FreeBSD 20100308; protocol 2.0 | FreeBSD | 39 | 0.032 | |
soap | gSOAP soap | 2.8 | 39 | 0.032 | |||
http | Apache | 2.2.9 | PHP/5.2.6-1+lenny16 with Suhosin-Patch mod_ssl/2.2.9 OpenSSL/0.9.8g | 39 | 0.032 | ||
http | Microsoft IIS httpd | 7.0 | Windows | 38 | 0.031 | ||
http | micro_httpd | 38 | 0.031 | ||||
ssh | OpenSSH | 5.9 | protocol 2.0 | 37 | 0.03 | ||
ssh | OpenSSH | 5.8 | protocol 2.0 | 37 | 0.03 | ||
http-proxy | Squid http proxy | 3.1.10 | 37 | 0.03 | |||
http-proxy | Squid http proxy | 2.7.STABLE9 | 37 | 0.03 | |||
http | nginx | 1.0.15 | 37 | 0.03 | |||
http | IBM WebSphere Application Server | 6.0 | 37 | 0.03 | |||
upnp | Microsoft Windows UPnP | Windows | 36 | 0.029 | |||
ssh | OpenSSH | 5.1p1 Debian 5ubuntu1 | Ubuntu Linux; protocol 2.0 | Linux | 35 | 0.028 | |
http | GeoVision GeoHttpServer for webcams | webcam | 35 | 0.028 | |||
http | Apache | 2.2.22 | (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0h; SSL-only mode | 35 | 0.028 | ||
http | Apache | 2.0.48 | (Trustix Secure Linux/Linux) | 35 | 0.028 | ||
directconnect | Direct Connect P2P | Windows | 35 | 0.028 | |||
loglogic | LogLogic protocol | security-misc | 34 | 0.028 | |||
http | Transmission BitTorrent management httpd | unauthorized | 34 | 0.028 | |||
http | nginx | 1.0.10 | 34 | 0.028 | |||
http | FLPS | 34 | 0.028 | ||||
http | Apache | 2.2.14 | (Unix) mod_ssl/2.2.14 OpenSSL/0.9.8l mod_perl/2.0.4 Perl/v5.10.0 | 34 | 0.028 | ||
giop | CORBA naming service | 32 | 0.026 | ||||
http | uc-httpd | 1.0.0 | 31 | 0.025 | |||
http | Microsoft IIS httpd | 5.1 | Windows | 31 | 0.025 | ||
ssh | protocol 2.0 | 30 | 0.024 | ||||
socks-proxy | Socks4A | 30 | 0.024 | ||||
soap | gSOAP soap | 2.7 | 30 | 0.024 | |||
http | XEPEG Streamer | 2.0.0 | 30 | 0.024 | |||
http | thttpd | Panasonic BB-HCM511A Network camera http config | webcam | 30 | 0.024 | ||
http | MiniServ | 1.585 | Webmin httpd | 30 | 0.024 | ||
xml-rpc | Apache XML-RPC | 1.0 | 29 | 0.023 | |||
http | TwistedWeb httpd | 8.2.0 | 28 | 0.023 | |||
http | Router | 28 | 0.023 | ||||
http | dcs-lig-httpd | 28 | 0.023 | ||||
ftp | Pure-FTPd | 28 | 0.023 | ||||
ssh | MikroTik RouterOS sshd | protocol 2.0 | Linux | router | 27 | 0.022 | |
http | thttpd | 2.19-MX Jul 1 2010 | WAP | 27 | 0.022 | ||
http-proxy | Microsoft Foundation Class httpd | 1.0 | Windows | 27 | 0.022 | ||
http | Intoto httpd | 1.0 | 27 | 0.022 | |||
vnc | Apple remote desktop vnc | Mac OS X | 26 | 0.021 | |||
telnet | NewCS card sharing system telnetd | 26 | 0.021 | ||||
http | WebLogic httpd | 26 | 0.021 | ||||
http | TP-LINK Router | 26 | 0.021 | ||||
http-proxy | 3Proxy http proxy | 26 | 0.021 | ||||
http | JBoss service httpd | 26 | 0.021 | ||||
http | H3C-Miniware-Webs | 26 | 0.021 | ||||
ftp | vsftpd | 2.0.8 or later | 26 | 0.021 | |||
ssh | OpenSSH | 5.5p1 Debian 6 | protocol 2.0 | Linux | 25 | 0.02 | |
ssh | OpenSSH | 5.0 | protocol 2.0 | 25 | 0.02 | ||
http | JDav server 1.0 | 25 | 0.02 | ||||
http | CherryPy httpd | 3.2.0 | 25 | 0.02 | |||
http | Apache | 2.2.15 | (Red Hat) | 25 | 0.02 | ||
ssh | OpenSSH | 5.5p1 Debian 4ubuntu6 | Ubuntu Linux; protocol 2.0 | Linux | 24 | 0.019 | |
ssh | OpenSSH | 3.6.1p2 | protocol 1.99 | 24 | 0.019 | ||
printer | Panasonic mfpscdl.exe service | 24 | 0.019 | ||||
http | APC SmartUPS http config | power-device | 24 | 0.019 | |||
http | Apache | 2.0.46 | (Red Hat) | 24 | 0.019 | ||
bandwidth-test | MikroTik bandwidth-test server | 24 | 0.019 | ||||
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | webcam | 23 | 0.019 | |||
http | PENNY web server. Signalsync Co. | 23 | 0.019 | ||||
ftp | FileZilla ftpd | 0.9.41 beta | Windows | 23 | 0.019 | ||
ssh | OpenSSH | 5.6 | protocol 2.0 | 22 | 0.018 | ||
ssh | OpenSSH | 5.2 | protocol 2.0 | 22 | 0.018 | ||
ssh | OpenSSH | 5.1p1 | FreeBSD 20080901; protocol 2.0 | FreeBSD | 22 | 0.018 | |
ssh | OpenSSH | 4.3p2 Debian 9etch3 | protocol 2.0 | Linux | 22 | 0.018 | |
http | Oracle WebLogic Server | Servlet 2.5; JSP 2.1 | 22 | 0.018 | |||
http | Jetty | 8.y.z-SNAPSHOT | 22 | 0.018 | |||
http | Businesspass-Passepartout | 22 | 0.018 | ||||
http | Buffalo AirStation http config | WAP | 22 | 0.018 | |||
http | Apache | 2.2.15 | (CentOS) | 22 | 0.018 | ||
ssl | multi-vendor SSL | 21 | 0.017 | ||||
ssl | Microsoft IIS SSL | Windows | 21 | 0.017 | |||
smtp | Microsoft Exchange smtpd | Windows | 21 | 0.017 | |||
ovm-manager | Oracle VM Manager | 21 | 0.017 | ||||
http | Vivotek 3102 Camera http config | webcam | 21 | 0.017 | |||
http | uTorrent utserver web interface | Linux | 21 | 0.017 | |||
http | Cisco IOS http config | IOS | 21 | 0.017 | |||
http | Allegro RomPager | 4.51 UPnP/1.0 | ZyXEL ZyWALL 2 | 21 | 0.017 | ||
ssh | OpenSSH | 5.8p1 Debian 1ubuntu3 | Ubuntu Linux; protocol 2.0 | Linux | 20 | 0.016 | |
http | RemotelyAnywhere remote PC management httpd | 8.0.668 | 20 | 0.016 | |||
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | webcam | 20 | 0.016 | |||
http | Abyss httpd | 2.6.0.0-X1 | AbyssLib/2.6.0.0 | Windows | 20 | 0.016 |