~944 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
msrpc | Microsoft Windows RPC | 763137 | 80.824 |
soap | gSOAP soap | 46716 | 4.948 |
no match | -/- | 31613 | 3.348 |
http | 20599 | 2.182 | |
telnet | 12055 | 1.277 | |
smtp | Exim smtpd | 9612 | 1.018 |
smtp | mailfront smtpd | 5798 | 0.614 |
http | thttpd | 4945 | 0.524 |
http | Boa HTTPd | 4105 | 0.435 |
irc | Dancer ircd | 3937 | 0.417 |
http | Netwave IP camera http config | 3549 | 0.376 |
http | SonicWALL | 3398 | 0.36 |
rtsp | 3114 | 0.33 | |
chat | AIM or ICQ server | 2148 | 0.227 |
smtp | 2034 | 0.215 | |
smtp | Sendmail | 2022 | 0.214 |
smtp | Postfix smtpd | 1998 | 0.212 |
flexlm | FlexLM license manager | 1720 | 0.182 |
http | Apache | 1646 | 0.174 |
http | lighttpd | 1581 | 0.167 |
http | GM Streaming Server httpd | 1506 | 0.16 |
http | Router Webserver | 1219 | 0.129 |
http | TP-LINK WR740N WAP http config | 1175 | 0.124 |
ssh | OpenSSH | 803 | 0.085 |
http | AIM | 588 | 0.062 |
ftp | Pure-FTPd | 479 | 0.051 |
http | Avtech AVN801 network camera | 385 | 0.041 |
smtp | Communigate Pro SMTP | 341 | 0.036 |
smtp | Cisco PIX sanitized smtpd | 325 | 0.034 |
http | Microsoft IIS httpd | 319 | 0.034 |
http | Network Camera | 304 | 0.032 |
smtp | Microsoft ESMTP | 250 | 0.026 |
http | GoAhead-Webs embedded httpd | 226 | 0.024 |
http | TeleEye | 224 | 0.024 |
socks5 | 215 | 0.023 | |
http | Router | 215 | 0.023 |
http | Hikvision-Webs | 213 | 0.023 |
http | Waveplus HTTPD | 208 | 0.022 |
landesk | LANDesk Management Suite | 190 | 0.02 |
http | mini_httpd | 182 | 0.019 |
http | Vivotek 3102 Camera http config | 176 | 0.019 |
smtp | Microsoft Exchange smtpd | 172 | 0.018 |
smtp | DavMail smtpd | 167 | 0.018 |
remoting | MS .NET Remoting services | 158 | 0.017 |
http | PDR-M800 | 152 | 0.016 |
http | Microsoft HTTPAPI httpd | 150 | 0.016 |
http | uc-httpd | 147 | 0.016 |
http | Mbedthis-Appweb | 131 | 0.014 |
chargen | 130 | 0.014 | |
http | dcs-lig-httpd | 127 | 0.013 |
http | Vivotek IP7131 Network Camera http config | 126 | 0.013 |
http | Virata-EmWeb | 124 | 0.013 |
http | Jetty | 124 | 0.013 |
ssl | TLS | 120 | 0.013 |
http | Wireless Network Camera | 118 | 0.012 |
http | D-Link DCS-2120 webcam http config | 116 | 0.012 |
ftp | 114 | 0.012 | |
ssh | 107 | 0.011 | |
http | TP-LINK WR541G/542G WAP http config | 105 | 0.011 |
http | TP-LINK WR340G WAP http config | 103 | 0.011 |
http | D-Link DIR-300 WAP http admin | 103 | 0.011 |
http | TP-LINK Router | 101 | 0.011 |
http | GoAhead-Webs | 100 | 0.011 |
smtp | Eudora EIMS X smtpd | 98 | 0.01 |
http | Secure Computing Sidewinder firewall http admin | 95 | 0.01 |
ftp | NET Disk/NetStore ftpd | 94 | 0.01 |
ftp | Microsoft ftpd | 94 | 0.01 |
http | Xitami httpd | 91 | 0.01 |
mongodb | MongoDB | 90 | 0.01 |
http | Cross Web Server | 81 | 0.009 |
arcserve | ARCserve Discovery | 81 | 0.009 |
ftp | ProFTPD | 80 | 0.008 |
http-proxy | Ncat http proxy | 79 | 0.008 |
smtp | Alt-N MDaemon mail server | 77 | 0.008 |
http | D-Link DCS-5220 webcam http config | 76 | 0.008 |
ssh | Dropbear sshd | 73 | 0.008 |
http | uClinux-httpd | 72 | 0.008 |
http | Apache Tomcat/Coyote JSP engine | 71 | 0.008 |
smtp | MailEnable smptd | 66 | 0.007 |
http | DVR Systems webcam http interface | 66 | 0.007 |
vnc | VNC | 65 | 0.007 |
http | httpd | 65 | 0.007 |
smtp | Symantec Enterprise Security manager smtpd | 64 | 0.007 |
http | MikroTik router http config | 62 | 0.007 |
http | Gadspot/Avtech AV787 webcam http config | 60 | 0.006 |
http | Vivotek Network Camera http config | 56 | 0.006 |
smtp | Surgemail smtpd | 54 | 0.006 |
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 53 | 0.006 |
http | nginx | 52 | 0.006 |
http | GoAhead-Webs httpd | 52 | 0.006 |
http | D-Link DCS-920 webcam http config | 52 | 0.006 |
http | Cisco IOS http config | 51 | 0.005 |
http | uhttpd | 50 | 0.005 |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | 49 | 0.005 |
http | Network Camera with Pan | 48 | 0.005 |
ftp | bftpd | 48 | 0.005 |
http | Linksys WRV54G router http config | 47 | 0.005 |
http | Mobotix Camera http config | 44 | 0.005 |
http | DCS-2120 | 44 | 0.005 |
http-proxy | Squid http proxy | 43 | 0.005 |
socks-proxy | Socks4A | 42 | 0.004 |
smtp | JAMES smtpd | 42 | 0.004 |
http | WYM httpd | 41 | 0.004 |
ftp | FileZilla ftpd | 39 | 0.004 |
nbd | Network Block Device | 38 | 0.004 |
http | WangWnagSimpleServer | 38 | 0.004 |
eggdrop | Eggdrop IRC bot console | 37 | 0.004 |
smtp | Microsoft Exchange 2010 smtpd | 36 | 0.004 |
http | TibetSystem Server 2.0 | 36 | 0.004 |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 34 | 0.004 |
http | Vivotek Network Camera | 33 | 0.003 |
http | GeoVision GeoHttpServer for webcams | 33 | 0.003 |
http | Wireless Network Camera with Pan | 32 | 0.003 |
http | MikroTik router config httpd | 32 | 0.003 |
http | DSLG WEB SERVER | 32 | 0.003 |
giop | omniORB omniNames | 32 | 0.003 |
http | D-Link/Airlink IP webcam http config | 30 | 0.003 |
http | Boa | 29 | 0.003 |
arkeia | Arkeia Network Backup | 29 | 0.003 |
nntp | INN nntpd | 28 | 0.003 |
http | ZNC IRC bouncer http config | 28 | 0.003 |
http | MS .NET Remoting httpd | 28 | 0.003 |
http | Linksys router http config | 28 | 0.003 |
ssh | NetScreen sshd | 27 | 0.003 |
smtp | rblsmtpd wrapped smtpd | 27 | 0.003 |
http | LevelOne WCS-2030 webcam http config | 27 | 0.003 |
http | Intoto httpd | 27 | 0.003 |
http | NetEVI | 26 | 0.003 |
http | Httpd | 26 | 0.003 |
http | gen5th | 26 | 0.003 |
http | D-Link DCS-6620G webcam http config | 26 | 0.003 |
http | RenesWebserver (Windows) | 25 | 0.003 |
smtp | Lotus Domino smtpd | 24 | 0.003 |
mysql | MySQL | 24 | 0.003 |
http | VB | 24 | 0.003 |
http | http server 1.0 | 23 | 0.002 |
http | WEB SERVER | 22 | 0.002 |
http | D-Link DCS-900 webcam http config | 22 | 0.002 |
http | AVM FRITZ!Box WLAN 7170 WAP http config | 22 | 0.002 |
giop | CORBA naming service | 22 | 0.002 |
http | WindWeb | 21 | 0.002 |
http | AR7 embedded httpd | 21 | 0.002 |
directconnect | Direct Connect P2P | 21 | 0.002 |
smtp | Merak Mail Server smtpd | 20 | 0.002 |
http | D-Link Internet Camera | 20 | 0.002 |
http | D-Link DCS-6620 webcam http config | 20 | 0.002 |
time | 18 | 0.002 | |
teradata | Teradata database | 18 | 0.002 |
smtp | Barracuda Networks Spam Firewall smtpd | 18 | 0.002 |
http | uTorrent WebUI | 18 | 0.002 |
http | TR069 client TCP connection request Server | 18 | 0.002 |
http | DCS-5220 | 18 | 0.002 |
http | avtech | 18 | 0.002 |
smtp | Kerio Connect smtpd | 17 | 0.002 |
shoutcast | SHOUTcast server | 17 | 0.002 |
rtsp | Avtech MPEG4 DVR control rtspd | 17 | 0.002 |
http | NetBox httpd | 17 | 0.002 |
http | gSOAP | 17 | 0.002 |
telnet | NASLite-SMB/Sveasoft Alchemy firmware telnetd | 16 | 0.002 |
http | Start HTTP-Server | 16 | 0.002 |
http | MiniServ | 16 | 0.002 |
http | Indy | 16 | 0.002 |
http | HTTP Software 1.1 | 16 | 0.002 |
http | FCS-1060 P | 15 | 0.002 |
http | D-Link DCS-910 webcam http config | 15 | 0.002 |
ftp | vsftpd | 15 | 0.002 |
http | Webs | 14 | 0.001 |
http | DD-WRT milli_httpd | 14 | 0.001 |
http | AVT1100 | 14 | 0.001 |
ftp | Serv-U ftpd | 14 | 0.001 |
smtp | XMail SMTP server | 13 | 0.001 |
http | WCS-2060 Wireless P | 13 | 0.001 |
http | Microsoft-WinCE | 13 | 0.001 |
http | Apple ODS DVD/CD Sharing Agent httpd | 13 | 0.001 |
upnp | Portable SDK for UPnP devices | 12 | 0.001 |
pop3 | Dovecot pop3d | 12 | 0.001 |
http-proxy | F5 BIG-IP load balancer http proxy | 12 | 0.001 |
http | IP_SHARER WEB | 12 | 0.001 |
http | FCS-1040 P/T | 12 | 0.001 |
http | Eudemon Server 1.0 | 12 | 0.001 |
vnc-http | Ultr@VNC | 11 | 0.001 |
vnc | 11 | 0.001 | |
pop3 | 11 | 0.001 | |
http | WindRiver-WebServer | 11 | 0.001 |
http | WebServer(IPCamera_Logo) | 11 | 0.001 |
http | WebServer | 11 | 0.001 |
http | Vivotek Video Server | 11 | 0.001 |
http | PrestoGate | 11 | 0.001 |
http | Network Dome Camera | 11 | 0.001 |
http | HTTPServer | 11 | 0.001 |
ssh | Cisco SSH | 10 | 0.001 |
smtp-proxy | Python SMTP Proxy | 10 | 0.001 |
smtp | IMail NT-ESMTP | 10 | 0.001 |
openvpn | OpenVPN | 10 | 0.001 |
http | TwistedWeb httpd | 10 | 0.001 |
http | Schwenk- | 10 | 0.001 |
http | avtech httpd | 10 | 0.001 |
ftp | Synology DiskStation NAS ftpd | 10 | 0.001 |