~131 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
msrpc | Microsoft Windows RPC | 87819 | 66.799 |
http | 11134 | 8.469 | |
no match | -/- | 6136 | 4.667 |
irc | Dancer ircd | 4087 | 3.109 |
ncacn_http | Microsoft Windows RPC over HTTP | 3737 | 2.843 |
http | SonicWALL | 3725 | 2.833 |
chat | AIM or ICQ server | 2419 | 1.84 |
flexlm | FlexLM license manager | 1384 | 1.053 |
http | lighttpd | 1187 | 0.903 |
ssl | SSLv3 | 1171 | 0.891 |
http | Boa HTTPd | 804 | 0.612 |
http | thttpd | 682 | 0.519 |
mysql | MySQL | 613 | 0.466 |
http | AIM | 583 | 0.443 |
landesk | LANDesk Management Suite | 441 | 0.335 |
http | Apache | 380 | 0.289 |
http | Microsoft IIS httpd | 297 | 0.226 |
rtsp | 295 | 0.224 | |
http | GoAhead-Webs httpd | 266 | 0.202 |
http | Netwave IP camera http config | 260 | 0.198 |
ssh | OpenSSH | 218 | 0.166 |
http-proxy | Squid http proxy | 191 | 0.145 |
remoting | MS .NET Remoting services | 181 | 0.138 |
http | Microsoft HTTPAPI httpd | 152 | 0.116 |
http | WangWnagSimpleServer | 117 | 0.089 |
http | mini_httpd | 104 | 0.079 |
ssh | 100 | 0.076 | |
http | Avtech AVN801 network camera | 93 | 0.071 |
vnc | VNC | 83 | 0.063 |
giop | omniORB omniNames | 83 | 0.063 |
http | Apache Tomcat/Coyote JSP engine | 81 | 0.062 |
http | Network Camera | 74 | 0.056 |
telnet | 68 | 0.052 | |
soap | gSOAP soap | 60 | 0.046 |
arcserve | ARCserve Discovery | 53 | 0.04 |
achat | AChat chat system | 51 | 0.039 |
http | GoAhead-Webs | 48 | 0.037 |
http | PDR-M800 | 46 | 0.035 |
ftp | Microsoft ftpd | 45 | 0.034 |
giop | CORBA naming service | 44 | 0.033 |
http | dcs-lig-httpd | 42 | 0.032 |
ftp | 41 | 0.031 | |
ssl | TLS | 40 | 0.03 |
socks5 | 36 | 0.027 | |
ssl | TLSv1 | 35 | 0.027 |
http | Mbedthis-Appweb | 35 | 0.027 |
ice | Internet Communications Engine | 34 | 0.026 |
http | Virata-EmWeb | 29 | 0.022 |
nntp | INN nntpd | 28 | 0.021 |
http | nginx | 28 | 0.021 |
http | MS .NET Remoting httpd | 26 | 0.02 |
ftp | FileZilla ftpd | 26 | 0.02 |
http | Wireless Network Camera | 25 | 0.019 |
http | KDH httpd | 25 | 0.019 |
ftp | vsftpd | 25 | 0.019 |
ftp | ProFTPD | 25 | 0.019 |
http | Vivotek IP7131 Network Camera http config | 24 | 0.018 |
http | Hikvision-Webs | 24 | 0.018 |
http | Vivotek 3102 Camera http config | 22 | 0.017 |
ftp | Pure-FTPd | 22 | 0.017 |
http | GM Streaming Server httpd | 21 | 0.016 |
sdlog | RSA SecureID Ace Server | 20 | 0.015 |
http | IBM AS400 Workstation Gateway | 20 | 0.015 |
http | GeoVision GeoHttpServer for webcams | 20 | 0.015 |
http | D-Link DCS-2120 webcam http config | 20 | 0.015 |
smtp | 19 | 0.014 | |
http | uTorrent WebUI | 19 | 0.014 |
http | Indy | 19 | 0.014 |
http | uc-httpd | 18 | 0.014 |
ftp | Serv-U ftpd | 17 | 0.013 |
daytime | 17 | 0.013 | |
smtp | RaidenMAILD smtpd | 16 | 0.012 |
http | iCanSystem | 16 | 0.012 |
http | DVR Systems webcam http interface | 16 | 0.012 |
arkeia | Arkeia Network Backup | 16 | 0.012 |
telnet | SMC SMC2870W Wireless Ethernet Bridge | 15 | 0.011 |
ssh | Dropbear sshd | 15 | 0.011 |
smtp | Microsoft ESMTP | 15 | 0.011 |
ovm-manager | Oracle VM Manager | 15 | 0.011 |
upnp | Portable SDK for UPnP devices | 14 | 0.011 |
http | Lotus Expeditor Web Container | 14 | 0.011 |
http | LevelOne WCS-2030 webcam http config | 14 | 0.011 |
http | Gadspot/Avtech AV787 webcam http config | 14 | 0.011 |
http | D-Link DCS-920 webcam http config | 14 | 0.011 |
shoutcast-publishing | SHOUTcast publishing port | 13 | 0.01 |
http | GoAhead-Webs embedded httpd | 13 | 0.01 |
vnc | RealVNC Personal | 12 | 0.009 |
smtp | Microsoft Exchange smtpd | 12 | 0.009 |
http | WYM httpd | 12 | 0.009 |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | 12 | 0.009 |
http | TeleEye | 12 | 0.009 |
http | http server 1.0 | 12 | 0.009 |
http | D-Link/Airlink IP webcam http config | 12 | 0.009 |
vnc | 11 | 0.008 | |
ssl | Microsoft IIS SSL | 11 | 0.008 |
netbios-ssn | Microsoft Windows 98 netbios-ssn | 11 | 0.008 |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 11 | 0.008 |
http | Jetty | 11 | 0.008 |
http | Httpd | 11 | 0.008 |
fw1-rlogin | Check Point FireWall-1 authenticated RLogin server | 11 | 0.008 |
ftp | Check Point Firewall-1 ftpd | 11 | 0.008 |
vnc | RealVNC Enterprise | 10 | 0.008 |
vnc-http | Ultr@VNC | 10 | 0.008 |
pop3 | RaidenMAILD pop3d | 10 | 0.008 |
http | Z-World Rabbit | 10 | 0.008 |
http-proxy | Ncat http proxy | 10 | 0.008 |
http | Allegro RomPager | 10 | 0.008 |
http | AIM HTTP | 10 | 0.008 |
directconnect | Direct Connect P2P | 10 | 0.008 |
chargen | 10 | 0.008 |