~944 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Count | Percent |
---|---|---|---|---|
msrpc | Microsoft Windows RPC | 763137 | 80.824 | |
soap | gSOAP soap | 2.7 | 46716 | 4.948 |
no match | -/- | -/- | 31613 | 3.348 |
http | 20599 | 2.182 | ||
telnet | 12055 | 1.277 | ||
smtp | Exim smtpd | 4.77 | 7963 | 0.843 |
smtp | mailfront smtpd | 5798 | 0.614 | |
irc | Dancer ircd | 3937 | 0.417 | |
http | Netwave IP camera http config | 3549 | 0.376 | |
http | SonicWALL | 3398 | 0.36 | |
http | Boa HTTPd | 0.94.14rc21 | 3188 | 0.338 |
rtsp | 3114 | 0.33 | ||
http | thttpd | 2.25b | 2564 | 0.272 |
chat | AIM or ICQ server | 2148 | 0.227 | |
smtp | 2034 | 0.215 | ||
smtp | Postfix smtpd | 1990 | 0.211 | |
flexlm | FlexLM license manager | 1720 | 0.182 | |
http | thttpd | 2.25b 29dec2003 | 1575 | 0.167 |
http | GM Streaming Server httpd | 1506 | 0.16 | |
smtp | Exim smtpd | 1385 | 0.147 | |
http | Router Webserver | 1219 | 0.129 | |
http | TP-LINK WR740N WAP http config | 1175 | 0.124 | |
smtp | Sendmail | 8.13.1/8.13.1 | 900 | 0.095 |
smtp | Sendmail | 8.13.8/8.13.8 | 763 | 0.081 |
http | Boa HTTPd | 0.94.13 | 731 | 0.077 |
http | Apache | 1.3.41 | 670 | 0.071 |
http | AIM | 1.0 | 588 | 0.062 |
http | lighttpd | 1.4.20 | 531 | 0.056 |
http | Apache | 479 | 0.051 | |
ftp | Pure-FTPd | 479 | 0.051 | |
http | lighttpd | 1.4.19 | 410 | 0.043 |
http | lighttpd | 1.4.29 | 394 | 0.042 |
http | Avtech AVN801 network camera | 1.0 | 385 | 0.041 |
smtp | Cisco PIX sanitized smtpd | 325 | 0.034 | |
http | Network Camera | 304 | 0.032 | |
http | thttpd | 235 | 0.025 | |
http | GoAhead-Webs embedded httpd | 226 | 0.024 | |
http | TeleEye | 1.1 | 224 | 0.024 |
socks5 | 215 | 0.023 | ||
http | Router | 215 | 0.023 | |
http | Hikvision-Webs | 213 | 0.023 | |
http | Waveplus HTTPD | 208 | 0.022 | |
landesk | LANDesk Management Suite | 190 | 0.02 | |
smtp | Microsoft ESMTP | 6.0.3790.4675 | 180 | 0.019 |
smtp | Communigate Pro SMTP | 5.3.12 | 180 | 0.019 |
http | Vivotek 3102 Camera http config | 176 | 0.019 | |
ssh | OpenSSH | 4.3 | 171 | 0.018 |
smtp | Microsoft Exchange smtpd | 171 | 0.018 | |
remoting | MS .NET Remoting services | 158 | 0.017 | |
http | PDR-M800 | 1.0 | 152 | 0.016 |
http | mini_httpd | 1.19 19dec2003 | 152 | 0.016 |
smtp | Exim smtpd | 4.69 | 150 | 0.016 |
http | Microsoft HTTPAPI httpd | 2.0 | 148 | 0.016 |
http | uc-httpd | 1.0.0 | 147 | 0.016 |
http | Microsoft IIS httpd | 6.0 | 147 | 0.016 |
ssh | OpenSSH | 5.3 | 139 | 0.015 |
chargen | 130 | 0.014 | ||
http | dcs-lig-httpd | 127 | 0.013 | |
http | Vivotek IP7131 Network Camera http config | 126 | 0.013 | |
http | Virata-EmWeb | 6.0.1 | 121 | 0.013 |
ssl | TLS | 1.0 | 120 | 0.013 |
http | Wireless Network Camera | 118 | 0.012 | |
http | D-Link DCS-2120 webcam http config | 116 | 0.012 | |
ftp | 114 | 0.012 | ||
ssh | 107 | 0.011 | ||
http | TP-LINK WR541G/542G WAP http config | 105 | 0.011 | |
http | TP-LINK WR340G WAP http config | 103 | 0.011 | |
http | D-Link DIR-300 WAP http admin | 103 | 0.011 | |
smtp | Sendmail | 102 | 0.011 | |
http | TP-LINK Router | 101 | 0.011 | |
smtp | DavMail smtpd | 3.9.8-1921 | 99 | 0.01 |
smtp | Sendmail | 8.13.6/8.13.1 | 98 | 0.01 |
smtp | Eudora EIMS X smtpd | 3.3.9 | 98 | 0.01 |
http | thttpd | 2.20b 10oct00 | 98 | 0.01 |
http | thttpd | 2.23beta1 | 95 | 0.01 |
http | Secure Computing Sidewinder firewall http admin | 95 | 0.01 | |
ftp | NET Disk/NetStore ftpd | 94 | 0.01 | |
http | Xitami httpd | 91 | 0.01 | |
ftp | Microsoft ftpd | 91 | 0.01 | |
mongodb | MongoDB | .1032 | 89 | 0.009 |
http | Jetty | 8.0.y.z-SNAPSHOT | 89 | 0.009 |
http | GoAhead-Webs | 87 | 0.009 | |
http | Boa HTTPd | 0.94.14rc18 | 87 | 0.009 |
http | lighttpd | 1.4.26 | 83 | 0.009 |
http | lighttpd | 1.4.13 | 82 | 0.009 |
http | Cross Web Server | 81 | 0.009 | |
arcserve | ARCserve Discovery | 81 | 0.009 | |
http | Microsoft IIS httpd | 80 | 0.008 | |
http-proxy | Ncat http proxy | 79 | 0.008 | |
http | D-Link DCS-5220 webcam http config | 76 | 0.008 | |
http | Apache | 2.0.54 | 76 | 0.008 |
http | uClinux-httpd | 0.2.2 | 72 | 0.008 |
http | Mbedthis-Appweb | 2.0.4 | 72 | 0.008 |
http | Apache Tomcat/Coyote JSP engine | 1.1 | 71 | 0.008 |
http | DVR Systems webcam http interface | 66 | 0.007 | |
vnc | VNC | 65 | 0.007 | |
http | httpd | 65 | 0.007 | |
smtp | Symantec Enterprise Security manager smtpd | 64 | 0.007 | |
http | MikroTik router http config | 62 | 0.007 | |
http | Gadspot/Avtech AV787 webcam http config | 60 | 0.006 | |
http | Apache | 2.2.14 | 60 | 0.006 |
http | Vivotek Network Camera http config | 56 | 0.006 | |
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 53 | 0.006 | |
http | GoAhead-Webs httpd | 52 | 0.006 | |
http | D-Link DCS-920 webcam http config | 52 | 0.006 | |
http | thttpd | 2.24 | 51 | 0.005 |
http | Cisco IOS http config | 51 | 0.005 | |
http | uhttpd | 1.0.0 | 50 | 0.005 |
http | Mbedthis-Appweb | 2.2.2 | 50 | 0.005 |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | 49 | 0.005 | |
http | thttpd | 2.24 26oct2003 | 49 | 0.005 |
http | Network Camera with Pan | Tilt | 48 | 0.005 |
http | Linksys WRV54G router http config | 47 | 0.005 | |
smtp | Exim smtpd | 4.76 | 46 | 0.005 |
ssh | Dropbear sshd | 0.52 | 44 | 0.005 |
http | Mobotix Camera http config | 44 | 0.005 | |
http | DCS-2120 | 44 | 0.005 | |
ftp | bftpd | 1.6.6 | 44 | 0.005 |
socks-proxy | Socks4A | 42 | 0.004 | |
smtp | Sendmail | 8.14.2/8.14.1 | 42 | 0.004 |
smtp | Communigate Pro SMTP | 5.2.14 | 42 | 0.004 |
http | thttpd | 2.20b | 42 | 0.004 |
ssh | OpenSSH | 5.1p1 Debian 5 | 41 | 0.004 |
http | WYM httpd | 1.0 | 41 | 0.004 |
http | Boa HTTPd | 0.94.14rc18-ipcam | 40 | 0.004 |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | 39 | 0.004 |
nbd | Network Block Device | 38 | 0.004 | |
http | WangWnagSimpleServer | 1.0 | 38 | 0.004 |
http | Apache | 2.2.3 | 37 | 0.004 |
http | TibetSystem Server 2.0 | 36 | 0.004 | |
eggdrop | Eggdrop IRC bot console | 1.6.21 | 36 | 0.004 |
ssh | OpenSSH | 5.9 | 35 | 0.004 |
smtp | Surgemail smtpd | 6.0a4-4 | 35 | 0.004 |
http | Microsoft IIS httpd | 7.5 | 35 | 0.004 |
http | lighttpd | 35 | 0.004 | |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | 34 | 0.004 |
smtp | Exim smtpd | 4.63 | 34 | 0.004 |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 34 | 0.004 | |
http | Apache | 2.2.9 | 34 | 0.004 |
http | Apache | 2.2.15 | 34 | 0.004 |
ssh | OpenSSH | 5.8 | 33 | 0.003 |
http | Vivotek Network Camera | 33 | 0.003 | |
http | GeoVision GeoHttpServer for webcams | 33 | 0.003 | |
http | Wireless Network Camera with Pan | Tilt | 32 | 0.003 |
http | MikroTik router config httpd | 32 | 0.003 | |
http | DSLG WEB SERVER | 32 | 0.003 | |
giop | omniORB omniNames | 32 | 0.003 | |
http | thttpd | 2.23beta1 26may2002 | 30 | 0.003 |
http | mini_httpd | 30 | 0.003 | |
http | D-Link/Airlink IP webcam http config | 1.0 | 30 | 0.003 |
smtp | Microsoft ESMTP | 6.0.3790.3959 | 29 | 0.003 |
arkeia | Arkeia Network Backup | 29 | 0.003 | |
smtp | JAMES smtpd | 2.3.1 | 28 | 0.003 |
nntp | INN nntpd | 28 | 0.003 | |
http | ZNC IRC bouncer http config | 0.097 or later | 28 | 0.003 |
http | MS .NET Remoting httpd | 28 | 0.003 | |
http | Linksys router http config | 28 | 0.003 | |
http | Apache | 2.2.22 | 28 | 0.003 |
ftp | ProFTPD | 1.3.3 | 28 | 0.003 |
ssh | NetScreen sshd | 27 | 0.003 | |
smtp | rblsmtpd wrapped smtpd | 27 | 0.003 | |
http | LevelOne WCS-2030 webcam http config | 27 | 0.003 | |
http | Intoto httpd | 1.0 | 27 | 0.003 |
http | Boa | 0.94.13 | 27 | 0.003 |
http | thttpd | 2.19-MX Sep 9 2010 | 26 | 0.003 |
http | Jetty | 6.1.x | 26 | 0.003 |
http | D-Link DCS-6620G webcam http config | 26 | 0.003 | |
smtp | Microsoft Exchange 2010 smtpd | 6.0.3790.1830 | 25 | 0.003 |
smtp | Communigate Pro SMTP | 4.1.8 | 25 | 0.003 |
http | thttpd | 2.19-MX Jul 1 2010 | 25 | 0.003 |
http | RenesWebserver (Windows) | 25 | 0.003 | |
http | Apache | 2.2.16 | 25 | 0.003 |
smtp | Sendmail | 8.13.6/8.13.6 | 24 | 0.003 |
http | VB | 24 | 0.003 | |
http | thttpd | 2.25b PHP | 24 | 0.003 |
http | http server 1.0 | 23 | 0.002 | |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze1 | 22 | 0.002 |
http | WEB SERVER | 22 | 0.002 | |
http-proxy | Squid http proxy | 2.7.STABLE9 | 22 | 0.002 |
http | Microsoft IIS httpd | 5.1 | 22 | 0.002 |
http | lighttpd | 1.4.28 | 22 | 0.002 |
http | D-Link DCS-900 webcam http config | 22 | 0.002 | |
http | Boa HTTPd | 0.92o | 22 | 0.002 |
http | AVM FRITZ!Box WLAN 7170 WAP http config | 22 | 0.002 | |
giop | CORBA naming service | 22 | 0.002 | |
ssh | OpenSSH | 3.9p1 | 21 | 0.002 |
http | thttpd | 2.19-MX Dec 8 2009 | 21 | 0.002 |
http | thttpd | 2.04 10aug98 | 21 | 0.002 |
http | AR7 embedded httpd | 21 | 0.002 | |
directconnect | Direct Connect P2P | 21 | 0.002 | |
ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | 20 | 0.002 |
ssh | OpenSSH | 5.2 | 20 | 0.002 |
smtp | Microsoft ESMTP | 6.0.3790.1830 | 20 | 0.002 |
http | Httpd | 1.0 | 20 | 0.002 |
http | D-Link Internet Camera | 20 | 0.002 | |
http | D-Link DCS-6620 webcam http config | 20 | 0.002 | |
http | Apache | 1.3.33 | 20 | 0.002 |
smtp | Merak Mail Server smtpd | 8.5.0-6 | 19 | 0.002 |
http | WindWeb | 2.0 | 19 | 0.002 |
http | thttpd | 2.19-MX Oct 19 2011 | 19 | 0.002 |
time | 18 | 0.002 | ||
teradata | Teradata database | 18 | 0.002 | |
smtp | Surgemail smtpd | 5.3h2-2 | 18 | 0.002 |
smtp | DavMail smtpd | 3.9.9-1976 | 18 | 0.002 |
smtp | Communigate Pro SMTP | 5.2.9 | 18 | 0.002 |
smtp | Communigate Pro SMTP | 4.2.10 | 18 | 0.002 |
smtp | Barracuda Networks Spam Firewall smtpd | 18 | 0.002 | |
http | uTorrent WebUI | 18 | 0.002 | |
http | TR069 client TCP connection request Server | 18 | 0.002 | |
http | Microsoft IIS httpd | 7.0 | 18 | 0.002 |
http | DCS-5220 | 18 | 0.002 | |
http | Apache | 2.2.21 | 18 | 0.002 |
ftp | ProFTPD | 1.3.1 | 18 | 0.002 |
smtp | Sendmail | 8.14.4/8.14.4 | 17 | 0.002 |
rtsp | Avtech MPEG4 DVR control rtspd | 17 | 0.002 | |
http | thttpd | 2.25b-lxc 29dec2003 | 17 | 0.002 |
http | NetBox httpd | 2.9 Build 4300 | 17 | 0.002 |
http | Microsoft IIS httpd | 5.0 | 17 | 0.002 |
http | Apache | 1.3.28 | 17 | 0.002 |
telnet | NASLite-SMB/Sveasoft Alchemy firmware telnetd | 16 | 0.002 | |
ssh | OpenSSH | 5.8p1 Debian 7ubuntu1 | 16 | 0.002 |
smtp | MailEnable smptd | 1.983-- | 16 | 0.002 |
shoutcast | SHOUTcast server | 1.9.8 | 16 | 0.002 |
http | Start HTTP-Server | 1.0 | 16 | 0.002 |
http | HTTP Software 1.1 | 16 | 0.002 | |
http | Boa HTTPd | 0.94.11 | 16 | 0.002 |
http | Apache | 2.2.17 | 16 | 0.002 |
ssh | OpenSSH | 5.4p1 | 15 | 0.002 |
ssh | Dropbear sshd | 0.51 | 15 | 0.002 |
smtp | Alt-N MDaemon mail server | 6.8.7 | 15 | 0.002 |
http | FCS-1060 P | T IP Network Camera | 15 | 0.002 |
http | D-Link DCS-910 webcam http config | 15 | 0.002 |