~123 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Count | Percent |
---|---|---|---|---|
no match | -/- | -/- | 34474 | 27.902 |
http | 16009 | 12.957 | ||
ssl | SSLv3 | 5870 | 4.751 | |
irc | Dancer ircd | 4095 | 3.314 | |
ssl | TLSv1 | 4058 | 3.284 | |
http | SonicWALL | 3899 | 3.156 | |
http | Apache | 3866 | 3.129 | |
http | MiniServ | 0.01 | 3803 | 3.078 |
chat | AIM or ICQ server | 2558 | 2.07 | |
telnet | 1840 | 1.489 | ||
http | MiniServ | 1.580 | 1753 | 1.419 |
http | lighttpd | 1.4.20 | 1659 | 1.343 |
http-proxy | Squid http proxy | 1534 | 1.242 | |
http | Apache Tomcat/Coyote JSP engine | 1.1 | 1419 | 1.148 |
http | Microsoft IIS httpd | 1302 | 1.054 | |
telnet | Cisco router telnetd | 1096 | 0.887 | |
http | MiniServ | 1.550 | 1059 | 0.857 |
ssh | OpenSSH | 3.9p1 | 900 | 0.728 |
http | MiniServ | 1.590 | 792 | 0.641 |
telnet | Cisco 1721 router telnetd | 791 | 0.64 | |
webdav | Tonido WebDAV | 704 | 0.57 | |
http | Apache | 2.2.14 | 697 | 0.564 |
ssh | Dropbear sshd | 0.52 | 687 | 0.556 |
http | AIM | 1.0 | 659 | 0.533 |
http | Apache | 2.2.22 | 639 | 0.517 |
irc-proxy | psyBNC | 2.3.2-7 | 615 | 0.498 |
http | Netwave IP camera http config | 613 | 0.496 | |
vnc | VNC | 546 | 0.442 | |
http | Microsoft IIS httpd | 6.0 | 538 | 0.435 |
http | lighttpd | 1.4.19 | 532 | 0.431 |
http | Microsoft HTTPAPI httpd | 2.0 | 518 | 0.419 |
socks5 | 502 | 0.406 | ||
ssh | OpenSSH | 4.3 | 498 | 0.403 |
http | MiniServ | 1.570 | 489 | 0.396 |
ssl | TLS | 1.0 | 449 | 0.363 |
http | lighttpd | 1.4.29 | 443 | 0.359 |
http | thttpd | 414 | 0.335 | |
http-proxy | CCProxy http proxy | 404 | 0.327 | |
http | Apache | 2.0.49 | 387 | 0.313 |
telnet | Cisco IOS telnetd | 381 | 0.308 | |
http | lighttpd | 1.4.18 | 359 | 0.291 |
ssh | Dropbear sshd | 0.51 | 326 | 0.264 |
http | Boa HTTPd | 0.94.14rc21 | 318 | 0.257 |
http | nginx | 0.8.49 | 299 | 0.242 |
http | Hikvision-Webs | 293 | 0.237 | |
http | lighttpd | 1.4.10 | 278 | 0.225 |
http | Microsoft HTTPAPI httpd | 1.0 | 272 | 0.22 |
ftp | 269 | 0.218 | ||
http | MiniServ | 1.530 | 265 | 0.214 |
irc-proxy | psyBNC | 2.3.2-9 | 260 | 0.21 |
ssh | Dropbear sshd | 0.50 | 255 | 0.206 |
http | GoAhead-Webs httpd | 248 | 0.201 | |
zabbix | Zabbix Monitoring System | 230 | 0.186 | |
http | Apache | 2.0.55 | 226 | 0.183 |
http | SonicWALL firewall http config | 222 | 0.18 | |
ssh | Dropbear sshd | 0.48 | 215 | 0.174 |
http | lighttpd | 1.4.28 | 209 | 0.169 |
http | D-Link/Airlink IP webcam http config | 1.0 | 199 | 0.161 |
http | Apache | 2.2.9 | 194 | 0.157 |
vnc | 192 | 0.155 | ||
ftp | Microsoft ftpd | 185 | 0.15 | |
ssh | OpenSSH | 5.3 | 184 | 0.149 |
http | mini_httpd | 1.19 19dec2003 | 181 | 0.146 |
http | Apache | 2.2.3 | 175 | 0.142 |
http | VCS-VideoJet-Webserver | 174 | 0.141 | |
http | uTorrent WebUI | 173 | 0.14 | |
http | Apache | 2.2.16 | 171 | 0.138 |
http-proxy | Tinyproxy | 1.7.0 | 162 | 0.131 |
ssh | OpenSSH | 4.5p1 | 161 | 0.13 |
http | thttpd | 2.20b 10oct00 | 155 | 0.125 |
irc-proxy | ShroudBNC irc-proxy | 1.1 revision 371 | 153 | 0.124 |
telnet | Pocket CMD telnetd | 149 | 0.121 | |
teamspeak | TeamSpeak voice communication | 3 | 137 | 0.111 |
http | Allegro RomPager | 4.01 | 137 | 0.111 |
ssh | 136 | 0.11 | ||
http | MikroTik router http config | 132 | 0.107 | |
mongodb | MongoDB | 2 | 128 | 0.104 |
http | MiniServ | 1.560 | 128 | 0.104 |
remoting | MS .NET Remoting services | 127 | 0.103 | |
ssh | OpenSSH | 5.4p1 | 123 | 0.1 |
rtsp | 117 | 0.095 | ||
papouch-tme | Papouch TME Ethernet thermometer | 116 | 0.094 | |
zend-java-bridge | 113 | 0.091 | ||
telnet | Linux telnetd | 107 | 0.087 | |
smtp | Postfix smtpd | 106 | 0.086 | |
ice | Internet Communications Engine | 106 | 0.086 | |
http | Avtech AVN801 network camera | 1.0 | 105 | 0.085 |
http-proxy | 3proxy http proxy | 104 | 0.084 | |
http | lighttpd | 104 | 0.084 | |
http | CCcam card sharing system http config | 99 | 0.08 | |
http | WindWeb | 2.0 | 97 | 0.079 |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | 95 | 0.077 |
http | Jetty | 6.1.25 | 95 | 0.077 |
http-proxy | Haproxy http proxy | 91 | 0.074 | |
http | Microsoft IIS httpd | 7.5 | 90 | 0.073 |
http | lighttpd | 1.4.26 | 89 | 0.072 |
vnc | RealVNC Enterprise | 87 | 0.07 | |
xml | 84 | 0.068 | ||
http | Apache | 2.2.17 | 83 | 0.067 |
http | monit httpd | 5.3.2 | 82 | 0.066 |
http | nginx | 78 | 0.063 | |
http | Httpd | 1.0 | 78 | 0.063 |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | 77 | 0.062 |
http | MikroTik router config httpd | 77 | 0.062 | |
http | Apache | 2.2.15 | 77 | 0.062 |
vnc | RealVNC Personal | 75 | 0.061 | |
http | IBM WebSphere Application Server | 7.0 | 74 | 0.06 |
http | Draytek Vigor ADSL router webadmin | 73 | 0.059 | |
ssh | OpenSSH | 5.1p1 Debian 5 | 72 | 0.058 |
http | TwistedWeb httpd | 10.0.0 | 71 | 0.057 |
http | Cross Web Server | 71 | 0.057 | |
http | Boa HTTPd | 0.93.15 | 71 | 0.057 |
ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | 70 | 0.057 |
http | GoAhead-Webs embedded httpd | 69 | 0.056 | |
http | Boa HTTPd | 0.94.13 | 68 | 0.055 |
shoutcast-publishing | SHOUTcast publishing port | 66 | 0.053 | |
http | webserver | 1.0 | 65 | 0.053 |
secure-socket | CA Secure Socket Adapter | 59 | 0.048 | |
http | Jetty | 6.1.14 | 58 | 0.047 |
http | thttpd | 2.25b 29dec2003 | 57 | 0.046 |
http | IBM WebSphere Application Server | 6.1 | 57 | 0.046 |
mongodb | MongoDB | 1 | 56 | 0.045 |
http | ZNC IRC bouncer http config | 0.097 or later | 55 | 0.045 |
ssh | OpenSSH | 4.7 | 54 | 0.044 |
http | Mbedthis-Appweb | 2.0.4 | 54 | 0.044 |
memcache | memcached | 53 | 0.043 | |
http | thttpd | 2.25b | 53 | 0.043 |
http | Apache | 2.2.21 | 53 | 0.043 |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze1 | 52 | 0.042 |
netbios-ssn | 52 | 0.042 | ||
http | MiniServ | 1.588 | 52 | 0.042 |
http | MiniServ | 1.540 | 52 | 0.042 |
http | nginx | 0.7.65 | 51 | 0.041 |
http | DD-WRT milli_httpd | 51 | 0.041 | |
telnet | Net+Works Configuration Utility 1.0 | 50 | 0.04 | |
ssh | OpenSSH | 5.1 | 48 | 0.039 |
http | Mobotix Camera http config | 48 | 0.039 | |
ssh | OpenSSH | 5.4 | 46 | 0.037 |
http | Transmission BitTorrent management httpd | 46 | 0.037 | |
http | D-Link DIR-300 WAP http admin | 46 | 0.037 | |
http | Allegro RomPager | 4.06 | 46 | 0.037 |
http | VCS-VideoJet-Webserver httpd | 45 | 0.036 | |
http | Apache | 1.3.6 | 45 | 0.036 |
http | Apache | 1.3.33 | 45 | 0.036 |
http | GoAhead-Webs | 44 | 0.036 | |
http | PDR-M800 | 1.0 | 43 | 0.035 |
arcserve | ARCserve Discovery | 43 | 0.035 | |
time | 41 | 0.033 | ||
http | Microsoft IIS httpd | 5.0 | 41 | 0.033 |
http | Apache | 1.3.28 | 41 | 0.033 |
ssh | OpenSSH | 5.8 | 40 | 0.032 |
http | Apache | 2.2.8 | 40 | 0.032 |
ssh | OpenSSH | 5.8p1 Debian 7ubuntu1 | 39 | 0.032 |
soap | gSOAP soap | 2.8 | 39 | 0.032 |
http | nginx | 1.0.15 | 38 | 0.031 |
http | Microsoft IIS httpd | 7.0 | 38 | 0.031 |
http | micro_httpd | 38 | 0.031 | |
ssh | OpenSSH | 5.9 | 37 | 0.03 |
http-proxy | Squid http proxy | 3.1.10 | 37 | 0.03 |
http-proxy | Squid http proxy | 2.7.STABLE9 | 37 | 0.03 |
http | IBM WebSphere Application Server | 6.0 | 37 | 0.03 |
upnp | Microsoft Windows UPnP | 36 | 0.029 | |
ssh | OpenSSH | 5.1p1 Debian 5ubuntu1 | 35 | 0.028 |
http | Router | 35 | 0.028 | |
http | GeoVision GeoHttpServer for webcams | 35 | 0.028 | |
http | Apache | 2.2.11 | 35 | 0.028 |
http | Apache | 2.0.48 | 35 | 0.028 |
directconnect | Direct Connect P2P | 35 | 0.028 | |
loglogic | LogLogic protocol | 34 | 0.028 | |
http | nginx | 1.0.10 | 34 | 0.028 |
http | FLPS | 34 | 0.028 | |
ssh | OpenSSH | 3.6.1p2 | 32 | 0.026 |
giop | CORBA naming service | 32 | 0.026 | |
http | uc-httpd | 1.0.0 | 31 | 0.025 |
http | TP-LINK Router | 31 | 0.025 | |
http | MiniServ | 1.585 | 31 | 0.025 |
http | Microsoft IIS httpd | 5.1 | 31 | 0.025 |
socks-proxy | Socks4A | 30 | 0.024 | |
soap | gSOAP soap | 2.7 | 30 | 0.024 |
http | XEPEG Streamer | 2.0.0 | 30 | 0.024 |
xml-rpc | Apache XML-RPC | 1.0 | 29 | 0.023 |
http | WYM httpd | 1.0 | 28 | 0.023 |
http | TwistedWeb httpd | 8.2.0 | 28 | 0.023 |
http | thttpd | 2.19-MX Jul 1 2010 | 28 | 0.023 |
http | H3C-Miniware-Webs | 28 | 0.023 | |
http | dcs-lig-httpd | 28 | 0.023 | |
ftp | Pure-FTPd | 28 | 0.023 | |
ssh | MikroTik RouterOS sshd | 27 | 0.022 | |
http-proxy | Microsoft Foundation Class httpd | 1.0 | 27 | 0.022 |
http | Intoto httpd | 1.0 | 27 | 0.022 |
vnc | Apple remote desktop vnc | 26 | 0.021 | |
telnet | NewCS card sharing system telnetd | 26 | 0.021 | |
http | WebLogic httpd | 26 | 0.021 | |
http-proxy | 3Proxy http proxy | 26 | 0.021 | |
http | JBoss service httpd | 26 | 0.021 | |
http | Apache | 2.2.4 | 26 | 0.021 |
ftp | vsftpd | 2.0.8 or later | 26 | 0.021 |
vnc-http | Ultr@VNC | 25 | 0.02 | |
ssh | OpenSSH | 5.5p1 Debian 6 | 25 | 0.02 |
ssh | OpenSSH | 5.2 | 25 | 0.02 |
ssh | OpenSSH | 5.0 | 25 | 0.02 |
http | JDav server 1.0 | 25 | 0.02 | |
http | CherryPy httpd | 3.2.0 | 25 | 0.02 |
ssh | OpenSSH | 5.5p1 Debian 4ubuntu6 | 24 | 0.019 |
printer | Panasonic mfpscdl.exe service | 24 | 0.019 | |
http | Oracle WebLogic Server | 24 | 0.019 | |
http | APC SmartUPS http config | 24 | 0.019 | |
http | Apache | 2.2.20 | 24 | 0.019 |
http | Apache | 2.0.46 | 24 | 0.019 |
bandwidth-test | MikroTik bandwidth-test server | 24 | 0.019 | |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | 23 | 0.019 | |
http | PENNY web server. Signalsync Co. | 23 | 0.019 | |
ftp | FileZilla ftpd | 0.9.41 beta | 23 | 0.019 |
webmin | 22 | 0.018 | ||
ssh | OpenSSH | 5.6 | 22 | 0.018 |
ssh | OpenSSH | 5.1p1 | 22 | 0.018 |
ssh | OpenSSH | 4.3p2 Debian 9etch3 | 22 | 0.018 |
http | Jetty | 8.y.z-SNAPSHOT | 22 | 0.018 |
http | Businesspass-Passepartout | 22 | 0.018 | |
http | Buffalo AirStation http config | 22 | 0.018 | |
http | BaseHTTPServer | 0.3 | 22 | 0.018 |
ssl | multi-vendor SSL | 21 | 0.017 | |
ssl | Microsoft IIS SSL | 21 | 0.017 | |
smtp | Microsoft Exchange smtpd | 21 | 0.017 | |
ovm-manager | Oracle VM Manager | 21 | 0.017 | |
http | Vivotek 3102 Camera http config | 21 | 0.017 | |
http | uTorrent utserver web interface | 21 | 0.017 | |
http | Cisco IOS http config | 21 | 0.017 | |
http | Apache | 1.3.34 | 21 | 0.017 |
http | Allegro RomPager | 4.51 UPnP/1.0 | 21 | 0.017 |
ssh | OpenSSH | 5.8p1 Debian 1ubuntu3 | 20 | 0.016 |
http | RemotelyAnywhere remote PC management httpd | 8.0.668 | 20 | 0.016 |
http | RapidLogic httpd | 1.1 | 20 | 0.016 |
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 20 | 0.016 | |
http | Abyss httpd | 2.6.0.0-X1 | 20 | 0.016 |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu6 | 19 | 0.015 |
ssh | OpenSSH | 3.8p1 | 19 | 0.015 |
ndmp | NetApp Data ONTAP ndmp | 4 | 19 | 0.015 |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 19 | 0.015 | |
http | GoAhead httpd | 19 | 0.015 | |
http | fms4mgr | 1.1.0.1 | 19 | 0.015 |
giop | omniORB omniNames | 19 | 0.015 | |
ssh | OpenSSH | 4.7p1 Debian 8ubuntu1.2 | 18 | 0.015 |
openvpn | OpenVPN | 18 | 0.015 | |
ndmp | Veritas Backup Exec ndmp | 9.0 | 18 | 0.015 |
http | nginx | 0.8.54 | 18 | 0.015 |
http | lighttpd | 1.4.23 | 18 | 0.015 |
http | Jetty | 6.1.5 | 18 | 0.015 |
http | Gadspot/Avtech AV787 webcam http config | 18 | 0.015 | |
upnp | Portable SDK for UPnP devices | 1.3.1 | 17 | 0.014 |
ssh | OpenSSH | 6.0 | 17 | 0.014 |
shoutcast | SHOUTcast server | 1.9.8 | 17 | 0.014 |
http-proxy | Squid http proxy | 2.6.STABLE21 | 17 | 0.014 |
http | lighttpd | 1.4.30 | 17 | 0.014 |
http | Allegro RomPager | 4.07 UPnP/1.0 | 17 | 0.014 |
ssh | OpenSSH | 4.4 | 16 | 0.013 |
http | Ubicom httpd | 1.1 | 16 | 0.013 |
http | Ubicom | 1.1 | 16 | 0.013 |
http-proxy | Squid http proxy | 3.1.16 | 16 | 0.013 |
http | nginx | 0.7.64 | 16 | 0.013 |
http | Chain Cast support service | Rex/9.0.0.4506 | 16 | 0.013 |
http | Boa HTTPd | 0.92o | 16 | 0.013 |
ssh | SCS sshd | 1.0.0 | 15 | 0.012 |
ssh | OpenSSH | 5.5 | 15 | 0.012 |
http | Webs | 15 | 0.012 | |
http | thttpd | 2.19-MX Oct 19 2011 | 15 | 0.012 |
http | Switch | 15 | 0.012 | |
http | Kannel SMS proxy httpd | 1.4.3 | 15 | 0.012 |
http | Jetty | 6.1.x | 15 | 0.012 |
http | ImagiaTek | 15 | 0.012 | |
http | http server 1.0 | 15 | 0.012 | |
http | HTTPD 1.0 | 15 | 0.012 | |
http | Boa HTTPd | 0.94.14rc18 | 15 | 0.012 |
http | Boa httpd | 15 | 0.012 |