~164 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
no match | -/- | 30273 | 18.419 |
telnet | Netgear broadband router or ZyXel VoIP adapter telnetd | 19108 | 11.626 |
socks5 | 15607 | 9.496 | |
http | 12558 | 7.641 | |
http | CCProxy | 5424 | 3.3 |
socks-proxy | Socks4A | 4829 | 2.938 |
http | Mathopd httpd | 4737 | 2.882 |
http | lighttpd | 4097 | 2.493 |
irc | Dancer ircd | 4095 | 2.492 |
http | Boa HTTPd | 3531 | 2.148 |
http | SonicWALL | 3501 | 2.13 |
http | WangWnagSimpleServer | 3320 | 2.02 |
http | Apache | 3276 | 1.993 |
chat | AIM or ICQ server | 2536 | 1.543 |
http | Allegro RomPager | 2348 | 1.429 |
http | Waveplus HTTPD | 1941 | 1.181 |
http | Router | 1916 | 1.166 |
http | D-Link router/Airlink NAS http config | 1825 | 1.11 |
http | GoAhead-Webs httpd | 1810 | 1.101 |
http | Microsoft IIS httpd | 1460 | 0.888 |
http | thttpd | 1273 | 0.775 |
socks-proxy | CCProxy socks proxy | 1259 | 0.766 |
http | D-Link DI-804HV http config | 1222 | 0.744 |
http | Embedded HTTP Server | 1209 | 0.736 |
http | D-Link DI-524 http config | 1053 | 0.641 |
http | 3Ware web interface | 945 | 0.575 |
http | HTTP Server | 934 | 0.568 |
http | Microsoft HTTPAPI httpd | 911 | 0.554 |
http | Avtech AVN801 network camera | 765 | 0.465 |
jetdirect | JetDirect | 764 | 0.465 |
http | Router Webserver | 751 | 0.457 |
http | Ubicom | 675 | 0.411 |
http | Ubicom httpd | 661 | 0.402 |
http | AIM | 658 | 0.4 |
http | GoAhead-Webs embedded httpd | 594 | 0.361 |
http | GeoVision GeoHttpServer for webcams | 584 | 0.355 |
http | Virata-EmWeb | 561 | 0.341 |
http | TP-LINK Router | 548 | 0.333 |
socks4 | Connection ok | 521 | 0.317 |
http | siyou server | 501 | 0.305 |
http-proxy | CCProxy http proxy | 468 | 0.285 |
http | Draytek Vigor ADSL router webadmin | 457 | 0.278 |
http-proxy | Squid http proxy | 455 | 0.277 |
http | mini_httpd | 410 | 0.249 |
http | MobileServer | 375 | 0.228 |
http | Apache Tomcat/Coyote JSP engine | 375 | 0.228 |
http | Netwave IP camera http config | 345 | 0.21 |
http | Generic router http config | 344 | 0.209 |
xmpp-transport | Spectrum XMPP file transfer | 337 | 0.205 |
http | Motorola Canopy WAP http config | 324 | 0.197 |
ssh | OpenSSH | 318 | 0.193 |
http | nginx | 305 | 0.186 |
http | Gadspot/Avtech AV787 webcam http config | 294 | 0.179 |
http | picoIP HTTPd 10 | 258 | 0.157 |
http | MikroTik router config httpd | 248 | 0.151 |
http | DD-WRT milli_httpd | 248 | 0.151 |
http | Karrigell 3.1.1 | 243 | 0.148 |
http | uc-httpd | 237 | 0.144 |
http | Hikvision-Webs | 237 | 0.144 |
ssl | TLS | 234 | 0.142 |
http | IP_SHARER WEB | 233 | 0.142 |
irc-proxy | psyBNC | 229 | 0.139 |
http | InterNiche Technologies WebServer | 219 | 0.133 |
upnp | Microsoft Windows UPnP | 211 | 0.128 |
arcserve | ARCserve Discovery | 211 | 0.128 |
http | Hisilicon Ipcam | 208 | 0.127 |
http | DVR Systems webcam http interface | 189 | 0.115 |
socks4 | Connection failed; ident required | 180 | 0.11 |
http | D-Link DIR-300 WAP http admin | 180 | 0.11 |
http | SonicWALL firewall http config | 179 | 0.109 |
http | Intoto httpd | 177 | 0.108 |
remoting | MS .NET Remoting services | 176 | 0.107 |
http-proxy | Haproxy http proxy | 176 | 0.107 |
http | D-Link DI-808HV http config | 173 | 0.105 |
http | D-Link DIR-100 http config | 170 | 0.103 |
http | micro_httpd | 169 | 0.103 |
http | Linksys router http config | 151 | 0.092 |
http | Atrium's MERCUR Webmail httpd | 149 | 0.091 |
socks4 | Connection failed; username required | 148 | 0.09 |
http | D-Link DI-604 http config | 146 | 0.089 |
http | InterNiche Technologies WebServer 2.0 | 139 | 0.085 |
http | Switch | 134 | 0.082 |
http | antid | 127 | 0.077 |
http | Cross Web Server | 124 | 0.075 |
http | PDR-M800 | 116 | 0.071 |
socks4 | Connection rejected or failed; connections possibly ok | 115 | 0.07 |
http | Mbedthis-Appweb | 115 | 0.07 |
http | Huawei-3Com HTTPD | 113 | 0.069 |
http | HTTP Software 1.1 | 112 | 0.068 |
http | DrcomServer1.0 | 108 | 0.066 |
http | TP-LINK WR841N WAP http config | 106 | 0.064 |
vnc | VNC | 105 | 0.064 |
ssh | 102 | 0.062 | |
http | TwistedWeb httpd | 102 | 0.062 |
http | HP StorageWorks AG118A tape autoloader http config | 100 | 0.061 |
http | MikroTik router http config | 97 | 0.059 |
http | TP-LINK WR340G WAP http config | 96 | 0.058 |
http | Jetty | 94 | 0.057 |
http | Cinema 4D Renderer http interface | 94 | 0.057 |
http | D-Link DI-824VUP http config | 91 | 0.055 |
http | TP-LINK WR740N WAP http config | 90 | 0.055 |
http | thttpd-alphanetworks | 90 | 0.055 |
rtsp | Avtech MPEG4 DVR control rtspd | 81 | 0.049 |
http | GoAhead-Webs | 78 | 0.047 |
http | Agranat-EmWeb | 72 | 0.044 |
http | AquaController 4.0 | 71 | 0.043 |
telnet | 69 | 0.042 | |
http | Netgear DG834 router http config | 67 | 0.041 |
http-proxy | Tinyproxy | 66 | 0.04 |
http | Cisco IOS http config | 64 | 0.039 |
http | Network Camera | 62 | 0.038 |
http | uhttpd | 61 | 0.037 |
http | Panasonic webcam http config | 59 | 0.036 |
http | Linksys SVR4000 router | 58 | 0.035 |
rtsp | 57 | 0.035 | |
http | WYM httpd | 56 | 0.034 |
ftp | Microsoft ftpd | 55 | 0.033 |
http | ZyXEL ZyWALL USG 20 firewall http config | 53 | 0.032 |
http | Optenet Web Server | 53 | 0.032 |
http | MERCUR Messaging 2005 | 53 | 0.032 |
http | Boa httpd | 53 | 0.032 |
http | httpd 1.1 | 51 | 0.031 |
xml | 50 | 0.03 | |
http | D-Link DIR-600 WAP http config | 50 | 0.03 |
mydoom | MyDoom virus backdoor | 49 | 0.03 |
http | http server 1.0 | 49 | 0.03 |
http | HeiTel GmbH Webserver | 49 | 0.03 |
http | LevelOne FBR-FBR-1418TX router http config | 48 | 0.029 |
http | httpd | 47 | 0.029 |
http | Netgear WGR614v9 WAP http config | 46 | 0.028 |
http | WindWeb | 45 | 0.027 |
mysql | MySQL | 44 | 0.027 |
http | RapidLogic httpd | 42 | 0.026 |
ssh | Dropbear sshd | 41 | 0.025 |
secure-socket | CA Secure Socket Adapter | 41 | 0.025 |
http | World Client WDaemon httpd | 40 | 0.024 |
http | LuCI Lua http config | 40 | 0.024 |
http | iCanWebServer | 40 | 0.024 |
http | Embedded HTTP Server. | 40 | 0.024 |
http | Wireless Network Camera | 39 | 0.024 |
http | UserGate http report area | 38 | 0.023 |
http | Buffalo AirStation http config | 38 | 0.023 |
http | TP-LINK WR541G/542G WAP http config | 37 | 0.023 |
http | Stanley NT500 access control system httpd | 37 | 0.023 |
http-proxy | MikroTik http proxy | 37 | 0.023 |
vnc | RealVNC Personal | 36 | 0.022 |
http | WEB SERVER | 36 | 0.022 |
http | Netgear DG834G router http config | 36 | 0.022 |
http | HiIpcam | 35 | 0.021 |
http | DI-LB604 HTTP Server | 35 | 0.021 |
http | Dreambox httpd | 34 | 0.021 |
http | WindRiver-WebServer | 33 | 0.02 |
http | uTorrent WebUI | 33 | 0.02 |
http | FlexWATCH-Webs | 33 | 0.02 |
smtp | 32 | 0.019 | |
http | D-Link router http config | 32 | 0.019 |
ftp | FileZilla ftpd | 32 | 0.019 |
http | D-Link DIR-412 WAP http config | 31 | 0.019 |
upnp | Conexant-EmWeb | 30 | 0.018 |
netbios-ssn | 30 | 0.018 | |
http | TP-LINK WR941N WAP http config | 30 | 0.018 |
http | u-Server | 29 | 0.018 |
http | Tridium Niagara httpd | 29 | 0.018 |
http | TP-LINK WR1043ND WAP http config | 29 | 0.018 |
http | GM Streaming Server httpd | 29 | 0.018 |
ftp | 29 | 0.018 | |
nntp | INN nntpd | 28 | 0.017 |
http | VMware vCenter Converter httpd | 28 | 0.017 |
http | Lotus Domino httpd | 28 | 0.017 |
http | Xitami httpd | 27 | 0.016 |
http | HeiTel GmbH Web Server | 27 | 0.016 |
ftp | Pure-FTPd | 27 | 0.016 |
ftp | ProFTPD | 27 | 0.016 |
directconnect | Direct Connect P2P | 27 | 0.016 |
http | Thin | 26 | 0.016 |
http | GoldStar iPECS 50B PBX http config | 26 | 0.016 |
http | W3MFC | 25 | 0.015 |
http | MWS | 25 | 0.015 |
http | Indy | 25 | 0.015 |
http | D-Link DIR-616 WAP http config | 25 | 0.015 |
ncacn_http | Microsoft Windows RPC over HTTP | 24 | 0.015 |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | 24 | 0.015 |
http | D-Link DVS-4088S, DVS-5088S, or DVG-7062S VoIP gateway http config | 24 | 0.015 |
geovision-control | Geovision webcam control | 24 | 0.015 |
http | TP-LINK WR741N WAP http config | 23 | 0.014 |
http | TibetSystem Server 2.0 | 23 | 0.014 |
http | Netgear WGR614v7 WAP http config | 23 | 0.014 |
http | HP Integrated Lights-Out http config | 23 | 0.014 |
http | 3ware 3DM2 Serial RAID http config | 23 | 0.014 |
smtp | Microsoft ESMTP | 22 | 0.013 |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 22 | 0.013 |
http | OwnServer1.0 | 22 | 0.013 |
http | III 100 | 22 | 0.013 |
http | Httpd | 22 | 0.013 |
http | Cougar | 22 | 0.013 |
http | uClinux-httpd | 21 | 0.013 |
http | MS .NET Remoting httpd | 21 | 0.013 |
http | Elecard Web Configurator 3.0.25608.100930 | 21 | 0.013 |
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 21 | 0.013 |
giop | CORBA naming service | 21 | 0.013 |
upnp | Portable SDK for UPnP devices | 20 | 0.012 |
http | Unknown | 20 | 0.012 |
http-proxy | Software602 602LAN Suite http proxy | 20 | 0.012 |
http | Netgear DG834PN router http config | 20 | 0.012 |
http | MiniServ | 20 | 0.012 |
http | Micro-Web | 20 | 0.012 |
giop | omniORB omniNames | 20 | 0.012 |
http | Techno Vision Security System http config | 19 | 0.012 |
http | SAP Web Application Server | 19 | 0.012 |
http | Microsoft ISA httpd | 19 | 0.012 |
http | linux | 19 | 0.012 |
http | Kerio MailServer http config | 19 | 0.012 |
http | HTTPD 1.0 | 19 | 0.012 |
http | H3C-Miniware-Webs | 19 | 0.012 |
http | FC | 19 | 0.012 |
http | D-Link DCS-2120 webcam http config | 19 | 0.012 |
http | Sun GlassFish | 18 | 0.011 |
http | Linksys PAP2 VoIP http config | 18 | 0.011 |
http | Fortinet VPN/firewall http config | 18 | 0.011 |
http | Alcatel/Thomson SpeedTouch ADSL http config | 18 | 0.011 |
vnc | RealVNC Enterprise | 17 | 0.01 |
ovm-manager | Oracle VM Manager | 17 | 0.01 |
http | Vivotek Network Camera | 17 | 0.01 |
http | TP-LINK MR3420 WAP http config | 17 | 0.01 |
http-proxy | BlueCoat http proxy | 17 | 0.01 |
http | Linksys wireless-G WAP http config | 17 | 0.01 |
http | HTTPServer | 17 | 0.01 |
http | GoAhead httpd | 17 | 0.01 |
http | Fnord httpd | 17 | 0.01 |
http | D-Link DCS-5220 webcam http config | 17 | 0.01 |
http | Caucho Resin JSP engine | 17 | 0.01 |
http | American Dynamics EDVR security recorder | 17 | 0.01 |
http | TP-LINK WR840N WAP http config | 16 | 0.01 |
http | NetPort httpd | 16 | 0.01 |
http | Netgear DGN2000 router http config | 16 | 0.01 |
http | Lantronix XPort embedded ethernet http config | 16 | 0.01 |
http | D-Link DIR-645 WAP http config | 16 | 0.01 |
http | D-Link DI-704P http config | 16 | 0.01 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 16 | 0.01 |
ftp | Serv-U ftpd | 16 | 0.01 |
http | Zope httpd | 15 | 0.009 |
http | Zimbra http config | 15 | 0.009 |
http | Web-Server | 15 | 0.009 |
http | WebLogic httpd | 15 | 0.009 |
http-proxy | Ncat http proxy | 15 | 0.009 |
http-proxy | F5 BIG-IP load balancer http proxy | 15 | 0.009 |
http | Netgear WNR1000v3 WAP http config | 15 | 0.009 |
http | Netgear or Linksys WAP http config | 15 | 0.009 |
http | NetApp DFM httpd | 15 | 0.009 |
http | MultView WEB Server V1.1 | 15 | 0.009 |
http | ZyCfg | 14 | 0.009 |
http | WebServer | 14 | 0.009 |
http | Transnexus OSPServer | 14 | 0.009 |
http | QNAP TS-219P NAS http config | 14 | 0.009 |
http | NT | 14 | 0.009 |
http | MS-SDK-HttpServer | 14 | 0.009 |
http | Grandstream HT502 VoIP router http config | 14 | 0.009 |
http | Eudemon Server 1.0 | 14 | 0.009 |
http | BMC HTTP Server | 14 | 0.009 |
http | webserver | 13 | 0.008 |
http | Vivotek IP7131 Network Camera http config | 13 | 0.008 |
http | TeleEye | 13 | 0.008 |
http | Sagem F@st router httpd | 13 | 0.008 |
http | Netgear WNR3500L WAP http config | 13 | 0.008 |
http | Mobotix Camera http config | 13 | 0.008 |
http | gen5th | 13 | 0.008 |
http | DavMail Gateway 3.9.8-1921 | 13 | 0.008 |
http | COMPESO Server 1.0 | 13 | 0.008 |
http | ChipPC Extreme httpd | 13 | 0.008 |
ftp | vsftpd | 13 | 0.008 |
ssh | SCS sshd | 12 | 0.007 |
smtp | Postfix smtpd | 12 | 0.007 |
smtp | Microsoft Exchange smtpd | 12 | 0.007 |
http | Web-Server httpd | 12 | 0.007 |
http | ViewSonic PJD6521 projector http config | 12 | 0.007 |
http | uTorrent http admin | 12 | 0.007 |
http | TP-LINK WR1043N WAP http config | 12 | 0.007 |
http | Tomato WAP firmware httpd | 12 | 0.007 |
http | FRITZ!Box http config | 12 | 0.007 |
http | eMule P2P | 12 | 0.007 |
http | dcs-lig-httpd | 12 | 0.007 |
telnet | Draytek Vigor ADSL router telnetd | 11 | 0.007 |
http | Router Web Config System | 11 | 0.007 |
http | Rex media encoder http config | 11 | 0.007 |
http | RemotelyAnywhere remote PC management httpd | 11 | 0.007 |
http | Netgear DGN1000 router http config | 11 | 0.007 |
http | HttpFileServer httpd | 11 | 0.007 |
http | eWON | 11 | 0.007 |
http | D-Link DIR-110 WAP http config | 11 | 0.007 |
http | BlueIris-HTTP | 11 | 0.007 |
http | AudioCodes Mediant 200 VoIP gateway http config | 11 | 0.007 |
http | ADH-Web httpd | 11 | 0.007 |
ssh | Bitvise WinSSHD | 10 | 0.006 |
shoutcast | SHOUTcast server | 10 | 0.006 |
openvpn | OpenVPN | 10 | 0.006 |
http | XWeb 1.0 | 10 | 0.006 |
http | TP-LINK WR940N WAP http config | 10 | 0.006 |
http | Siemens Gigaset PBX/TARGA DIP VoIP phone http config | 10 | 0.006 |
http | Netgear WNR2000v2 WAP http config | 10 | 0.006 |
http | ImagiaTek | 10 | 0.006 |
http | dvr1614n web-cam httpd | 10 | 0.006 |
http | D-Link DI-704UP http config | 10 | 0.006 |
http | D-Link/Airlink IP webcam http config | 10 | 0.006 |
http | David WebBox httpd | 10 | 0.006 |
http | Cisco ASA firewall http config | 10 | 0.006 |
http | avtech | 10 | 0.006 |
donkey | MLDonkey multi-network P2P server | 10 | 0.006 |
achat | AChat chat system | 10 | 0.006 |