~164 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Info | OS | Devicetype | Count | Percent |
---|---|---|---|---|---|---|---|
no match | 30273 | 18.419 | |||||
telnet | Netgear broadband router or ZyXel VoIP adapter telnetd | 19108 | 11.626 | ||||
http | 12037 | 7.324 | |||||
socks5 | Username/password authentication required | 11580 | 7.046 | ||||
http | CCProxy | 5420 | 3.298 | ||||
socks-proxy | Socks4A | 4829 | 2.938 | ||||
http | Mathopd httpd | 1.5p6 | Unix | 4573 | 2.782 | ||
irc | Dancer ircd | 4095 | 2.492 | ||||
http | SonicWALL | firewall | 3501 | 2.13 | |||
http | WangWnagSimpleServer | 1.0 | 3320 | 2.02 | |||
chat | AIM or ICQ server | 2536 | 1.543 | ||||
http | Boa HTTPd | 0.94.14rc21 | 2095 | 1.275 | |||
http | D-Link router/Airlink NAS http config | 1825 | 1.11 | ||||
socks5 | No authentication; connection failed | 1814 | 1.104 | ||||
http | Router | 1757 | 1.069 | ||||
http | GoAhead-Webs httpd | 1693 | 1.03 | ||||
http | Waveplus HTTPD | 1471 | 0.895 | ||||
http | Allegro RomPager | 4.07 UPnP/1.0 | ZyXEL ZyWALL 2 | 1462 | 0.89 | ||
http | lighttpd | 1434 | 0.873 | ||||
socks-proxy | CCProxy socks proxy | unauthorized | 1259 | 0.766 | |||
http | D-Link DI-804HV http config | WAP | 1222 | 0.744 | |||
http | Boa HTTPd | 0.93.15 | 1117 | 0.68 | |||
socks5 | No authentication required; connection ok | 1056 | 0.643 | ||||
http | D-Link DI-524 http config | WAP | 1053 | 0.641 | |||
http | Microsoft IIS httpd | 987 | 0.601 | ||||
http | 3Ware web interface | 1.0 | RAID storage | 945 | 0.575 | ||
http | HTTP Server | 934 | 0.568 | ||||
http | Microsoft HTTPAPI httpd | 2.0 | SSDP/UPnP | Windows | 891 | 0.542 | |
http | lighttpd | 1.4.19 | 841 | 0.512 | |||
http | Avtech AVN801 network camera | 1.0 | UPnP 1.0 | webcam | 765 | 0.465 | |
jetdirect | JetDirect | printer | 764 | 0.465 | |||
http | Router Webserver | 746 | 0.454 | ||||
http | Ubicom | 1.1 | 673 | 0.409 | |||
http | AIM | 1.0 | 658 | 0.4 | |||
http | GoAhead-Webs embedded httpd | 594 | 0.361 | ||||
http | Apache | 593 | 0.361 | ||||
http | GeoVision GeoHttpServer for webcams | webcam | 584 | 0.355 | |||
http | Allegro RomPager | 4.51 UPnP/1.0 | ZyXEL ZyWALL 2 | 548 | 0.333 | ||
socks4 | Connection ok | 521 | 0.317 | ||||
http | thttpd | 2.25b | 511 | 0.311 | |||
http | siyou server | 501 | 0.305 | ||||
http | TP-LINK Router | 495 | 0.301 | ||||
http | lighttpd | 1.4.29 | 490 | 0.298 | |||
http | Waveplus HTTPD | DI-504 | 466 | 0.284 | |||
http | Draytek Vigor ADSL router webadmin | broadband router | 457 | 0.278 | |||
http-proxy | CCProxy http proxy | Windows | 447 | 0.272 | |||
socks5 | No authentication; connection not allowed by ruleset | 439 | 0.267 | ||||
http | lighttpd | 1.4.28 | 405 | 0.246 | |||
http | mini_httpd | 1.19 19dec2003 | 403 | 0.245 | |||
socks5 | GSSAPI authentication required | 394 | 0.24 | ||||
http | MobileServer | 375 | 0.228 | ||||
http | Apache Tomcat/Coyote JSP engine | 1.1 | 356 | 0.217 | |||
http | Netwave IP camera http config | webcam | 345 | 0.21 | |||
http | Generic router http config | router | 344 | 0.209 | |||
xmpp-transport | Spectrum XMPP file transfer | 337 | 0.205 | ||||
http | thttpd | 319 | 0.194 | ||||
http | Virata-EmWeb | 6.0.1 | Netscreen administrative web server | firewall | 315 | 0.192 | |
http | lighttpd | 1.4.26 | 300 | 0.183 | |||
http | Gadspot/Avtech AV787 webcam http config | webcam | 294 | 0.179 | |||
socks5 | 289 | 0.176 | |||||
http | lighttpd | 1.4.20 | 259 | 0.158 | |||
http | picoIP HTTPd 10 | picoIP HTTPd 10 | picoIP | 258 | 0.157 | ||
http | MikroTik router config httpd | RouterOS | router | 245 | 0.149 | ||
http | Karrigell 3.1.1 | 243 | 0.148 | ||||
http | uc-httpd | 1.0.0 | 237 | 0.144 | |||
http | Hikvision-Webs | 237 | 0.144 | ||||
ssl | TLS | 1.0 | 234 | 0.142 | |||
http-proxy | Squid http proxy | 230 | 0.14 | ||||
irc-proxy | psyBNC | 2.3.2-7 | 227 | 0.138 | |||
http | Allegro RomPager | 4.01 | 219 | 0.133 | |||
http | Virata-EmWeb | 6.0.1 | 215 | 0.131 | |||
upnp | Microsoft Windows UPnP | Windows | 211 | 0.128 | |||
arcserve | ARCserve Discovery | 211 | 0.128 | ||||
http | Boa HTTPd | 0.94.13 | 209 | 0.127 | |||
http | Hisilicon Ipcam | 208 | 0.127 | ||||
http | IP_SHARER WEB | 1.0 | Airlink/Sitecom wireless router | router | 199 | 0.121 | |
http | DVR Systems webcam http interface | webcam | 189 | 0.115 | |||
http | Microsoft IIS httpd | 6.0 | Windows | 188 | 0.114 | ||
socks4 | Connection failed; ident required | 180 | 0.11 | ||||
http | D-Link DIR-300 WAP http admin | WAP | 180 | 0.11 | |||
http | SonicWALL firewall http config | firewall | 179 | 0.109 | |||
http | Microsoft IIS httpd | 5.1 | Windows | 178 | 0.108 | ||
http | Intoto httpd | 1.0 | 177 | 0.108 | |||
http-proxy | Haproxy http proxy | load balancer | 176 | 0.107 | |||
http | DD-WRT milli_httpd | Linux | WAP | 175 | 0.106 | ||
http | D-Link DI-808HV http config | WAP | 173 | 0.105 | |||
remoting | MS .NET Remoting services | 172 | 0.105 | ||||
http | D-Link DIR-100 http config | broadband router | 170 | 0.103 | |||
http | micro_httpd | 169 | 0.103 | ||||
http | DavMail Gateway | 169 | 0.103 | ||||
http | Apache | 2.2.3 | (CentOS) | 167 | 0.102 | ||
http | lighttpd | 1.4.23 | 150 | 0.091 | |||
http | Atrium's MERCUR Webmail httpd | Windows | 149 | 0.091 | |||
socks4 | Connection failed; username required | 148 | 0.09 | ||||
http | D-Link DI-604 http config | WAP | 146 | 0.089 | |||
http | InterNiche Technologies WebServer 2.0 | 139 | 0.085 | ||||
http | Apache | 1.3.26 | (Unix) DAV/1.0.3 ApacheJServ/1.1.2 | 135 | 0.082 | ||
http | Switch | 134 | 0.082 | ||||
http | Ubicom httpd | 1.1 | CradlePoint MBR1200 broadband router | broadband router | 131 | 0.08 | |
http | antid | 127 | 0.077 | ||||
http | Ubicom httpd | 1.1 | D-Link WAP http config | WAP | 124 | 0.075 | |
http | Cross Web Server | 124 | 0.075 | ||||
http | Mathopd httpd | 1.5p5 | Unix | 123 | 0.075 | ||
http | thttpd | 2.24 | 118 | 0.072 | |||
http | PDR-M800 | 1.0 | 116 | 0.071 | |||
socks4 | Connection rejected or failed; connections possibly ok | 115 | 0.07 | ||||
http | DrcomServer1.0 | 108 | 0.066 | ||||
http | TP-LINK WR841N WAP http config | WAP | 106 | 0.064 | |||
http | nginx | 104 | 0.063 | ||||
http | Embedded HTTP Server | 3.51 | D-Link DI-604 http config | WAP | 103 | 0.063 | |
http | HP StorageWorks AG118A tape autoloader http config | storage-misc | 100 | 0.061 | |||
ssh | protocol 1.5 | 99 | 0.06 | ||||
http | MikroTik router http config | router | 97 | 0.059 | |||
http | Ubicom httpd | 1.1 | CradlePoint MBR1000 WAP http config | WAP | 96 | 0.058 | |
http | TwistedWeb httpd | 8.2.0 | 96 | 0.058 | |||
http | TP-LINK WR340G WAP http config | WAP | 96 | 0.058 | |||
http | Apache | 2.2.16 | (Debian) | 95 | 0.058 | ||
http | Cinema 4D Renderer http interface | 1.0 | 94 | 0.057 | |||
http | Apache | 2.2.3 | 93 | 0.057 | |||
http | D-Link DI-824VUP http config | WAP | 91 | 0.055 | |||
http | TP-LINK WR740N WAP http config | WAP | 90 | 0.055 | |||
http | thttpd | 2.25b 29dec2003 | 90 | 0.055 | |||
http | GoAhead-Webs httpd | Router with realtek 8181 chipset http config | router | 86 | 0.052 | ||
http | Ubicom httpd | 1.1 | D-Link DIR-625 WAP http config | WAP | 85 | 0.052 | |
http | Apache | 2.2.14 | (Ubuntu) | 83 | 0.051 | ||
rtsp | Avtech MPEG4 DVR control rtspd | 81 | 0.049 | ||||
vnc | VNC | protocol 3.8 | 76 | 0.046 | |||
http | Embedded HTTP Server | 2.02 | 76 | 0.046 | |||
http | Embedded HTTP Server | 1.05 | 76 | 0.046 | |||
http | Mbedthis-Appweb | 2.0.4 | 74 | 0.045 | |||
http | DD-WRT milli_httpd | Linksys WRT54G http config | Linux | WAP | 73 | 0.044 | |
http | AquaController 4.0 | 71 | 0.043 | ||||
http | Apache | 0.6.5 | 71 | 0.043 | |||
http | Ubicom httpd | 1.1 | D-Link DIR-615 WAP http config | WAP | 70 | 0.043 | |
http | Ubicom httpd | 1.1 | D-Link DIR-655 WAP http config | WAP | 69 | 0.042 | |
telnet | 67 | 0.041 | |||||
http | Apache | 2.2.16 | 66 | 0.04 | |||
http | Embedded HTTP Server | 1.04 | 64 | 0.039 | |||
http | Boa HTTPd | 0.94.11 | 64 | 0.039 | |||
http | Embedded HTTP Server | 2.00 | 61 | 0.037 | |||
http | lighttpd | 1.4.30 | 60 | 0.037 | |||
http | Apache | 2.2.15 | 60 | 0.037 | |||
http | Panasonic webcam http config | webcam | 59 | 0.036 | |||
http | lighttpd | 1.4.18 | 59 | 0.036 | |||
http | Linksys SVR4000 router | router | 58 | 0.035 | |||
http | Embedded HTTP Server | 1.03 | 58 | 0.035 | |||
http | Cisco IOS http config | IOS | 58 | 0.035 | |||
rtsp | 57 | 0.035 | |||||
http | Apache | SSL-only mode | 57 | 0.035 | |||
http | Apache | 1.3.41 | 56 | 0.034 | |||
http-proxy | Squid http proxy | 2.6.STABLE21 | 55 | 0.033 | |||
http | lighttpd | 1.4.13 | 55 | 0.033 | |||
ssh | OpenSSH | 4.3 | protocol 2.0 | 54 | 0.033 | ||
http-proxy | Tinyproxy | 1.6.0 | 54 | 0.033 | |||
http | Netgear DG834 router http config | broadband router | 54 | 0.033 | |||
http | Huawei-3Com HTTPD | H3C BR104H | 54 | 0.033 | |||
http | Huawei-3Com HTTPD | 54 | 0.033 | ||||
http | ZyXEL ZyWALL USG 20 firewall http config | firewall | 53 | 0.032 | |||
http | thttpd | Panasonic BB-HCM511 IP camera http config | 53 | 0.032 | |||
http | Router | TP-LINK Router R460 | 53 | 0.032 | |||
http | MERCUR Messaging 2005 | 53 | 0.032 | ||||
http | Boa httpd | 52 | 0.032 | ||||
http | httpd 1.1 | 51 | 0.031 | ||||
xml | 50 | 0.03 | |||||
http | Optenet Web Server | 50 | 0.03 | ||||
mydoom | MyDoom virus backdoor | v012604 | 49 | 0.03 | |||
http | WYM httpd | 1.0 | 49 | 0.03 | |||
http | Linksys router http config | device model BEFSR41 | WAP | 49 | 0.03 | ||
http | http server 1.0 | 49 | 0.03 | ||||
http | HeiTel GmbH Webserver | 49 | 0.03 | ||||
http | GoAhead-Webs | 49 | 0.03 | ||||
http | Apache | 2.2.15 | (Fedora) | 49 | 0.03 | ||
http | Agranat-EmWeb | Agranat-EmWeb | IBM Server Connectivity Module | 49 | 0.03 | ||
http | LevelOne FBR-FBR-1418TX router http config | router | 48 | 0.029 | |||
http | Apache | 2.2.14 | 47 | 0.029 | |||
ftp | Microsoft ftpd | Windows | 47 | 0.029 | |||
http | Netgear WGR614v9 WAP http config | WAP | 46 | 0.028 | |||
http | Microsoft IIS httpd | 5.0 | Windows | 45 | 0.027 | ||
http | Embedded HTTP Server | 2.03 | 45 | 0.027 | |||
http | Embedded HTTP Server | 2.76 | D-Link DI-624 http config | WAP | 42 | 0.026 | |
secure-socket | CA Secure Socket Adapter | 41 | 0.025 | ||||
http | Mathopd httpd | 1.5p2 | Unix | 41 | 0.025 | ||
http | Microsoft IIS httpd | 7.5 | Windows | 40 | 0.024 | ||
http | LuCI Lua http config | 40 | 0.024 | ||||
http | Embedded HTTP Server. | 40 | 0.024 | ||||
http | Network Camera | 39 | 0.024 | ||||
http | Allegro RomPager | 4.03 | Netopia 3000 router http config | router | 39 | 0.024 | |
http | UserGate http report area | Windows | 38 | 0.023 | |||
http | thttpd-alphanetworks | 2.23 | D-Link DI-524UP router http config | router | 38 | 0.023 | |
http | httpd | 38 | 0.023 | ||||
http | Buffalo AirStation http config | WAP | 38 | 0.023 | |||
http | TP-LINK WR541G/542G WAP http config | WAP | 37 | 0.023 | |||
http | Stanley NT500 access control system httpd | security-misc | 37 | 0.023 | |||
http-proxy | MikroTik http proxy | 37 | 0.023 | ||||
http | Motorola Canopy WAP http config | WAP | 37 | 0.023 | |||
http | Apache | 2.2.22 | 37 | 0.023 | |||
vnc | RealVNC Personal | protocol 4.0 | 36 | 0.022 | |||
http-proxy | Squid http proxy | 2.7.STABLE9 | 36 | 0.022 | |||
http | Netgear DG834G router http config | router | 36 | 0.022 | |||
http | Apache | 2.2.15 | (CentOS) | 36 | 0.022 | ||
http | HiIpcam | V100R003 VodServer | 35 | 0.021 | |||
http | Embedded HTTP Server | 3.53 | D-Link DI-604 http config | WAP | 35 | 0.021 | |
http | Embedded HTTP Server | 1.02 | 35 | 0.021 | |||
http | DI-LB604 HTTP Server | 35 | 0.021 | ||||
http | WindWeb | 2.0 | 34 | 0.021 | |||
http | thttpd | 2.24 26oct2003 | 34 | 0.021 | |||
http | Dreambox httpd | media device | 34 | 0.021 | |||
http | uTorrent WebUI | Windows | 33 | 0.02 | |||
http | Router | TP-LINK Wireless G Router WR340G | 33 | 0.02 | |||
http | RapidLogic httpd | 1.1 | 3Com OfficeConnect WAP http config | WAP | 33 | 0.02 | |
http-proxy | Squid http proxy | 2.5.STABLE13 | 33 | 0.02 | |||
http | FlexWATCH-Webs | 33 | 0.02 | ||||
smtp | 32 | 0.019 | |||||
http | WindRiver-WebServer | 4.7 | 32 | 0.019 | |||
http | D-Link router http config | router | 32 | 0.019 | |||
http | iCanWebServer | 1.1 | 31 | 0.019 | |||
netbios-ssn | 30 | 0.018 | |||||
http | TP-LINK WR941N WAP http config | WAP | 30 | 0.018 | |||
http | Linksys router http config | device model BEFSX41 | WAP | 30 | 0.018 | ||
http | Jetty | 6.1.x | 30 | 0.018 | |||
http | Embedded HTTP Server | 4.03 | D-Link DI-624 http config | WAP | 30 | 0.018 | |
http | Apache | 2.2.22 | (Ubuntu) | 30 | 0.018 | ||
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | Ubuntu Linux; protocol 2.0 | Linux | 29 | 0.018 | |
http | TP-LINK WR1043ND WAP http config | WAP | 29 | 0.018 | |||
http | GoAhead-Webs | ZyXEL P-330W EE WAP http config; username: admin | WAP | 29 | 0.018 | ||
http | GM Streaming Server httpd | webcam | 29 | 0.018 | |||
ftp | 29 | 0.018 | |||||
nntp | INN nntpd | posting ok | 28 | 0.017 | |||
http | Lotus Domino httpd | 28 | 0.017 | ||||
http | Xitami httpd | 27 | 0.016 | ||||
http | World Client WDaemon httpd | 4.0 | Alt-N MDaemon webmail | Windows | 27 | 0.016 | |
http | u-Server | 27 | 0.016 | ||||
http | HTTP Software 1.1 | D-Link DI-504N | 27 | 0.016 | |||
http | HeiTel GmbH Web Server | 27 | 0.016 | ||||
ftp | Pure-FTPd | 27 | 0.016 | ||||
http | VMware vCenter Converter httpd | redirect to tcp/1443 | 26 | 0.016 | |||
http | GoldStar iPECS 50B PBX http config | PBX | 26 | 0.016 | |||
http | Embedded HTTP Server | 4.04beta | D-Link DI-624 http config | WAP | 26 | 0.016 | |
http | Embedded HTTP Server | 3.38 | D-Link DI-604 http config | WAP | 26 | 0.016 | |
http | Apache | 2.2.9 | (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g PHP/5.3.6 | 26 | 0.016 | ||
directconnect | Direct Connect P2P | Windows | 26 | 0.016 | |||
http | Ubicom httpd | 1.1 | D-Link DI-634M router http config | router | 25 | 0.015 | |
http | MWS | 1.2.0 | 25 | 0.015 | |||
http | General User | 25 | 0.015 | ||||
http | D-Link DIR-600 WAP http config | 2.11 | Linux | 25 | 0.015 | ||
ncacn_http | Microsoft Windows RPC over HTTP | 1.0 | Windows | 24 | 0.015 | ||
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | webcam | 24 | 0.015 | |||
http | TP-LINK Router | TP-LINK Router R478 | 24 | 0.015 | |||
http | thttpd | 2.25b PHP | 24 | 0.015 | |||
http | D-Link DVS-4088S, DVS-5088S, or DVG-7062S VoIP gateway http config | VoIP adapter | 24 | 0.015 | |||
http | Apache | 2.2.4 | (Win32) PHP/5.2.1 | 24 | 0.015 | ||
http | Apache | 2.2.17 | (Ubuntu) | 24 | 0.015 | ||
geovision-control | Geovision webcam control | webcam | 24 | 0.015 | |||
http | W3MFC | 1.68 | 23 | 0.014 | |||
http | Tridium Niagara httpd | 1.1 | specialized | 23 | 0.014 | ||
http | TP-LINK WR741N WAP http config | WAP | 23 | 0.014 | |||
http | TibetSystem Server 2.0 | 23 | 0.014 | ||||
http | thttpd | 2.19-MX Jul 1 2010 | WAP | 23 | 0.014 | ||
http | Netgear WGR614v7 WAP http config | WAP | 23 | 0.014 | |||
http | HP Integrated Lights-Out http config | remote management | 23 | 0.014 | |||
http | Apache | 2.2.3 | (Red Hat) | 23 | 0.014 | ||
http | Apache | 2.2.22 | (Unix) PHP/5.3.10 | 23 | 0.014 | ||
http | 3ware 3DM2 Serial RAID http config | 2.0 | storage-misc | 23 | 0.014 | ||
http | WEB SERVER | Multi-Homing Gateway Administration Tools | 22 | 0.013 | |||
http | Virata-EmWeb | 6.2.0 | 22 | 0.013 | |||
http | uhttpd | 1.0.0 | Netgear WNDR3700 WAP http config | WAP | 22 | 0.013 | |
http | Ubicom httpd | 1.1 | D-Link DIR-635 WAP http config | WAP | 22 | 0.013 | |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | webcam | 22 | 0.013 | |||
http | OwnServer1.0 | 22 | 0.013 | ||||
http | Linksys router http config | device model BEFSR41v3 | WAP | 22 | 0.013 | ||
http | III 100 | 22 | 0.013 | ||||
http | Embedded HTTP Server | 3.23 | D-Link DI-524 http config | WAP | 22 | 0.013 | |
http | Embedded HTTP Server | 2.09 | D-Link DWL-624 WAP http config; name DI-624+ | WAP | 22 | 0.013 | |
http | D-Link DIR-600 WAP http config | 2.10 | Linux | 22 | 0.013 | ||
http | Apache | 2.0.58 | (Unix) mod_ssl/2.0.58 OpenSSL/0.9.7g PHP/4.4.4 | 22 | 0.013 | ||
http | Agranat-EmWeb | R4_01 | 22 | 0.013 | |||
upnp | Conexant-EmWeb | 6.1.0 | UPnP 1.0 | 21 | 0.013 | ||
http-proxy | CCProxy http proxy | unauthorized | Windows | 21 | 0.013 | ||
http | Mbedthis-Appweb | 2.4.2 | 21 | 0.013 | |||
http | Embedded HTTP Server | 2.42 | D-Link DI-624 http config | WAP | 21 | 0.013 | |
http | Elecard Web Configurator 3.0.25608.100930 | 21 | 0.013 | ||||
http | Boa HTTPd | 0.92o | 21 | 0.013 | |||
http | Apache | 1.3.41 | (Unix) PHP/5.2.5 | 21 | 0.013 | ||
http | Apache | 1.3.20 | (Unix) | 21 | 0.013 | ||
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | webcam | 21 | 0.013 | |||
giop | CORBA naming service | 21 | 0.013 | ||||
upnp | Portable SDK for UPnP devices | 1.3.1 | Linux 2.6.21; UPnP 1.0 | Linux | 20 | 0.012 | |
http | Unknown | 0.0 UPnP | 20 | 0.012 | |||
http | thttpd-alphanetworks | 2.23 | D-Link DI-624S router http config | router | 20 | 0.012 | |
http-proxy | Software602 602LAN Suite http proxy | Windows | 20 | 0.012 | |||
http | NETGEAR DGN2200 | 20 | 0.012 | ||||
http | Netgear DG834PN router http config | router | 20 | 0.012 | |||
http | Micro-Web | 20 | 0.012 | ||||
http | Microsoft HTTPAPI httpd | 1.0 | SSDP/UPnP | Windows | 20 | 0.012 | |
http | Linksys router http config | device model BEFSR41v4 | WAP | 20 | 0.012 | ||
http | Embedded HTTP Server | 3.30 | D-Link DI-604 http config | WAP | 20 | 0.012 | |
http | Apache | 2.2.20 | (Ubuntu) | 20 | 0.012 | ||
giop | omniORB omniNames | Corba naming service | 20 | 0.012 |