~440 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
pop3pw | poppassd | 380814 | 86.396 |
pop3pw | ApplePasswordServer pop3 password change daemon | 16549 | 3.755 |
no match | -/- | 10998 | 2.495 |
http | 9580 | 2.173 | |
pop3pw | CommuniGate Pro pop3 password change daemon | 4074 | 0.924 |
http | SonicWALL | 3654 | 0.829 |
pop3pw | Ipswitch IMail pop3 password change daemon | 2630 | 0.597 |
chat | AIM or ICQ server | 2192 | 0.497 |
http | Apache | 1056 | 0.24 |
pop3pw | Courierpassd pop3 password change daemon | 949 | 0.215 |
http | lighttpd | 892 | 0.202 |
pop3pw | SINA pop3pw | 803 | 0.182 |
pop3pw | Mercury/32 poppass service | 757 | 0.172 |
ssl | SSLv3 | 755 | 0.171 |
http | AIM | 598 | 0.136 |
pop3pw | ModusMail poppassd | 560 | 0.127 |
http | Microsoft IIS httpd | 416 | 0.094 |
pop3pw | Post.Office pop3pw | 345 | 0.078 |
http | Netwave IP camera http config | 199 | 0.045 |
http | thttpd | 193 | 0.044 |
tcpwrapped | BSD TCP Wrappers | 186 | 0.042 |
pop3pw | Atrium Software's Mercur pop3pw | 168 | 0.038 |
http | Microsoft HTTPAPI httpd | 137 | 0.031 |
http | GoAhead-Webs httpd | 131 | 0.03 |
http | a_63 | 121 | 0.027 |
ssh | OpenSSH | 120 | 0.027 |
pop3pw | SLMail pop3pw | 103 | 0.023 |
ssh | 98 | 0.022 | |
http | Apache Tomcat/Coyote JSP engine | 86 | 0.02 |
http | Boa HTTPd | 83 | 0.019 |
http | Avtech AVN801 network camera | 77 | 0.017 |
http-proxy | Squid http proxy | 63 | 0.014 |
telnet | 57 | 0.013 | |
vnc | VNC | 56 | 0.013 |
http | PDR-M800 | 51 | 0.012 |
http | mini_httpd | 49 | 0.011 |
http | Mbedthis-Appweb | 38 | 0.009 |
pop3pw | Stalker Mail Server password change daemon | 37 | 0.008 |
arcserve | ARCserve Discovery | 36 | 0.008 |
http | nginx | 33 | 0.007 |
http | Hikvision-Webs | 33 | 0.007 |
ftp | Microsoft ftpd | 31 | 0.007 |
mysql | MySQL | 24 | 0.005 |
http | uc-httpd | 20 | 0.005 |
http | GoAhead-Webs | 20 | 0.005 |
http | GeoVision GeoHttpServer for webcams | 17 | 0.004 |
http | dcs-lig-httpd | 17 | 0.004 |
http | Cross Web Server | 17 | 0.004 |
http | RemotelyAnywhere remote PC management httpd | 16 | 0.004 |
http | DVR Systems webcam http interface | 15 | 0.003 |
ftp | ProFTPD | 15 | 0.003 |
ftp | 15 | 0.003 | |
ftp | vsftpd | 14 | 0.003 |
http-proxy | F5 BIG-IP load balancer http proxy | 13 | 0.003 |
http | GoAhead-Webs embedded httpd | 13 | 0.003 |
ftp | Serv-U ftpd | 13 | 0.003 |
ftp | FileZilla ftpd | 13 | 0.003 |
smtp | 12 | 0.003 | |
telnet | Cisco 1721 router telnetd | 11 | 0.002 |
http | D-Link/Airlink IP webcam http config | 11 | 0.002 |
vnc | RealVNC Enterprise | 10 | 0.002 |
smtp | Microsoft Exchange smtpd | 10 | 0.002 |
pop3 | 10 | 0.002 | |
http | WebLogic httpd | 10 | 0.002 |
http | uTorrent WebUI | 10 | 0.002 |
http | TeleEye | 10 | 0.002 |
http | Gadspot/Avtech AV787 webcam http config | 10 | 0.002 |