~274 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
ssh | OpenSSH | 235522 | 85.884 |
http | 10190 | 3.716 | |
ssh | Cisco/3com IPSSHd | 9227 | 3.365 |
http | SonicWALL | 3690 | 1.346 |
chat | AIM or ICQ server | 2216 | 0.808 |
ssh | Dropbear sshd | 1996 | 0.728 |
ssh | MikroTik RouterOS sshd | 1983 | 0.723 |
no match | -/- | 1261 | 0.46 |
http | lighttpd | 1074 | 0.392 |
ssl | SSLv3 | 885 | 0.323 |
ssh | 730 | 0.266 | |
http | AIM | 593 | 0.216 |
ssh | Bitvise WinSSHD | 415 | 0.151 |
http | 3ware 3DM2 Serial RAID http config | 381 | 0.139 |
http | Apache | 373 | 0.136 |
http | Microsoft IIS httpd | 298 | 0.109 |
ftp | vsftpd | 280 | 0.102 |
http | thttpd | 187 | 0.068 |
http | Netwave IP camera http config | 180 | 0.066 |
http | CCProxy | 130 | 0.047 |
http | GoAhead-Webs httpd | 108 | 0.039 |
ssh | lshd secure shell | 102 | 0.037 |
http | Microsoft HTTPAPI httpd | 95 | 0.035 |
http | Boa HTTPd | 94 | 0.034 |
sftp | ProFTPD mod_sftp | 85 | 0.031 |
http | Apache Tomcat/Coyote JSP engine | 81 | 0.03 |
http-proxy | Squid http proxy | 78 | 0.028 |
http | Avtech AVN801 network camera | 78 | 0.028 |
http | 3ware | 66 | 0.024 |
ftp | Microsoft ftpd | 63 | 0.023 |
vnc | VNC | 54 | 0.02 |
http-proxy | CCProxy http proxy | 54 | 0.02 |
http | PDR-M800 | 54 | 0.02 |
ssh | SunSSH | 51 | 0.019 |
telnet | 50 | 0.018 | |
ssh | SCS sshd | 50 | 0.018 |
ssh | WeOnlyDo sshd | 47 | 0.017 |
ftp | 38 | 0.014 | |
ssh | Cisco SSH | 37 | 0.013 |
arcserve | ARCserve Discovery | 35 | 0.013 |
http | GoAhead-Webs | 34 | 0.012 |
http | accwizs | 29 | 0.011 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 29 | 0.011 |
http | mini_httpd | 28 | 0.01 |
http | GeoVision GeoHttpServer for webcams | 23 | 0.008 |
mysql | MySQL | 22 | 0.008 |
ftp | Serv-U ftpd | 22 | 0.008 |
http | nginx | 20 | 0.007 |
http | Mbedthis-Appweb | 20 | 0.007 |
http | Indy | 20 | 0.007 |
http | Hikvision-Webs | 20 | 0.007 |
ssh | DrayTek Vigor 2820n ADSL router sshd | 19 | 0.007 |
http | dcs-lig-httpd | 19 | 0.007 |
ftp | FileZilla ftpd | 19 | 0.007 |
http | uc-httpd | 18 | 0.007 |
http | Cross Web Server | 18 | 0.007 |
ssh | HP Integrated Lights-Out mpSSH | 17 | 0.006 |
http | Gadspot/Avtech AV787 webcam http config | 17 | 0.006 |
http | uTorrent WebUI | 16 | 0.006 |
ftp | ProFTPD | 16 | 0.006 |
directconnect | Direct Connect P2P | 16 | 0.006 |
ftp | Pure-FTPd | 15 | 0.005 |
vnc-http | RealVNC | 14 | 0.005 |
http-proxy | F5 BIG-IP load balancer http proxy | 13 | 0.005 |
http | Jetty | 13 | 0.005 |
http | Httpd | 13 | 0.005 |
http | DVR Systems webcam http interface | 13 | 0.005 |
http | RemotelyAnywhere remote PC management httpd | 12 | 0.004 |
smtp | Postfix smtpd | 11 | 0.004 |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 11 | 0.004 |
telnet | Microsoft Windows 2000 telnetd | 10 | 0.004 |
ssl | Microsoft IIS SSL | 10 | 0.004 |