~38 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Count |
Percent |
|---|---|---|---|
| http | 10910 | 28.53 | |
| irc | Dancer ircd | 4089 | 10.693 |
| http | SonicWALL | 3764 | 9.843 |
| no match | -/- | 3023 | 7.905 |
| chat | AIM or ICQ server | 2475 | 6.472 |
| eggdrop | Eggdrop IRC bot console | 2202 | 5.758 |
| flexlm | FlexLM license manager | 1724 | 4.508 |
| ssl | SSLv3 | 1375 | 3.596 |
| http | lighttpd | 969 | 2.534 |
| oracle | Oracle Database | 697 | 1.823 |
| ssh | OpenSSH | 610 | 1.595 |
| http | AIM | 598 | 1.564 |
| http | Boa HTTPd | 470 | 1.229 |
| http | Apache | 372 | 0.973 |
| http | thttpd | 290 | 0.758 |
| http | Microsoft IIS httpd | 290 | 0.758 |
| oracle-tns | Oracle TNS Listener | 288 | 0.753 |
| remoting | MS .NET Remoting services | 217 | 0.567 |
| http-proxy | Squid http proxy | 171 | 0.447 |
| giop | omniORB omniNames | 162 | 0.424 |
| http | Netwave IP camera http config | 151 | 0.395 |
| http | Microsoft HTTPAPI httpd | 149 | 0.39 |
| rtsp | 140 | 0.366 | |
| landesk | LANDesk Management Suite | 136 | 0.356 |
| ncacn_http | Microsoft Windows RPC over HTTP | 132 | 0.345 |
| http | GoAhead-Webs httpd | 117 | 0.306 |
| vnc | VNC | 106 | 0.277 |
| ssh | 101 | 0.264 | |
| http | Avtech AVN801 network camera | 78 | 0.204 |
| http | Apache Tomcat/Coyote JSP engine | 78 | 0.204 |
| smtp | Exim smtpd | 65 | 0.17 |
| http | WangWnagSimpleServer | 60 | 0.157 |
| mysql | MySQL | 58 | 0.152 |
| arcserve | ARCserve Discovery | 58 | 0.152 |
| telnet | 53 | 0.139 | |
| ftp | 53 | 0.139 | |
| http | PDR-M800 | 50 | 0.131 |
| achat | AChat chat system | 49 | 0.128 |
| giop | CORBA naming service | 48 | 0.126 |
| ftp | Microsoft ftpd | 47 | 0.123 |
| http | mini_httpd | 43 | 0.112 |
| ovm-manager | Oracle VM Manager | 40 | 0.105 |
| http | TimesTen httpd | 39 | 0.102 |
| http | GoAhead-Webs | 39 | 0.102 |
| ftp | Check Point Firewall-1 ftpd | 35 | 0.092 |
| ssl | TLS | 32 | 0.084 |
| nntp | INN nntpd | 28 | 0.073 |
| socks4 | Connection ok | 27 | 0.071 |
| smtp | 25 | 0.065 | |
| http | nginx | 25 | 0.065 |
| http | dcs-lig-httpd | 25 | 0.065 |
| ssl | TLSv1 | 23 | 0.06 |
| http | uc-httpd | 23 | 0.06 |
| http | Hikvision-Webs | 23 | 0.06 |
| http | Vivotek IP7131 Network Camera http config | 22 | 0.058 |
| http | uTorrent WebUI | 22 | 0.058 |
| http | IBM AS400 Workstation Gateway | 22 | 0.058 |
| http | Mbedthis-Appweb | 21 | 0.055 |
| ftp | Pure-FTPd | 21 | 0.055 |
| http | GM Streaming Server httpd | 20 | 0.052 |
| ftp | ProFTPD | 20 | 0.052 |
| directconnect | Direct Connect P2P | 19 | 0.05 |
| http | Network Camera | 18 | 0.047 |
| ftp | vsftpd | 18 | 0.047 |
| ftp | FileZilla ftpd | 18 | 0.047 |
| upnp | Portable SDK for UPnP devices | 17 | 0.044 |
| ssh | Dropbear sshd | 17 | 0.044 |
| java-rmi | Java RMI | 16 | 0.042 |
| http | Z-World Rabbit | 16 | 0.042 |
| http | Lotus Expeditor Web Container | 16 | 0.042 |
| sdlog | RSA SecureID Ace Server | 15 | 0.039 |
| http | GeoVision GeoHttpServer for webcams | 15 | 0.039 |
| http | Gadspot/Avtech AV787 webcam http config | 15 | 0.039 |
| http | Wireless Network Camera | 14 | 0.037 |
| http | MS .NET Remoting httpd | 14 | 0.037 |
| http | DVR Systems webcam http interface | 14 | 0.037 |
| http-proxy | F5 BIG-IP load balancer http proxy | 13 | 0.034 |
| http | D-Link/Airlink IP webcam http config | 13 | 0.034 |
| ftp | Serv-U ftpd | 13 | 0.034 |
| arkeia | Arkeia Network Backup | 13 | 0.034 |
| netbios-ssn | 12 | 0.031 | |
| http | TeleEye | 12 | 0.031 |
| http | KDH httpd | 12 | 0.031 |
| http | Cross Web Server | 12 | 0.031 |
| smtp | Postfix smtpd | 11 | 0.029 |
| http | D-Link DCS-2120 webcam http config | 11 | 0.029 |
| ssl | Microsoft IIS SSL | 10 | 0.026 |
| smtp | Microsoft Exchange smtpd | 10 | 0.026 |
| smtp | Microsoft ESMTP | 10 | 0.026 |
| http | GoAhead-Webs embedded httpd | 10 | 0.026 |
| http | AIM HTTP | 10 | 0.026 |