~164 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Count | Percent |
---|---|---|---|---|
no match | -/- | -/- | 30273 | 18.419 |
telnet | Netgear broadband router or ZyXel VoIP adapter telnetd | 19108 | 11.626 | |
socks5 | 15607 | 9.496 | ||
http | 12558 | 7.641 | ||
http | CCProxy | 5424 | 3.3 | |
socks-proxy | Socks4A | 4829 | 2.938 | |
http | Mathopd httpd | 1.5p6 | 4573 | 2.782 |
irc | Dancer ircd | 4095 | 2.492 | |
http | SonicWALL | 3501 | 2.13 | |
http | WangWnagSimpleServer | 1.0 | 3320 | 2.02 |
chat | AIM or ICQ server | 2536 | 1.543 | |
http | Boa HTTPd | 0.94.14rc21 | 2095 | 1.275 |
http | Waveplus HTTPD | 1941 | 1.181 | |
http | Router | 1908 | 1.161 | |
http | D-Link router/Airlink NAS http config | 1825 | 1.11 | |
http | GoAhead-Webs httpd | 1810 | 1.101 | |
http | Allegro RomPager | 4.07 UPnP/1.0 | 1462 | 0.89 |
http | lighttpd | 1434 | 0.873 | |
socks-proxy | CCProxy socks proxy | 1259 | 0.766 | |
http | D-Link DI-804HV http config | 1222 | 0.744 | |
http | Boa HTTPd | 0.93.15 | 1117 | 0.68 |
http | D-Link DI-524 http config | 1053 | 0.641 | |
http | Microsoft IIS httpd | 993 | 0.604 | |
http | 3Ware web interface | 1.0 | 945 | 0.575 |
http | HTTP Server | 934 | 0.568 | |
http | Microsoft HTTPAPI httpd | 2.0 | 891 | 0.542 |
http | lighttpd | 1.4.19 | 849 | 0.517 |
http | Avtech AVN801 network camera | 1.0 | 765 | 0.465 |
jetdirect | JetDirect | 764 | 0.465 | |
http | Router Webserver | 751 | 0.457 | |
http | Ubicom | 1.1 | 673 | 0.409 |
http | Apache | 664 | 0.404 | |
http | Ubicom httpd | 1.1 | 661 | 0.402 |
http | AIM | 1.0 | 658 | 0.4 |
http | GoAhead-Webs embedded httpd | 594 | 0.361 | |
http | GeoVision GeoHttpServer for webcams | 584 | 0.355 | |
http | TP-LINK Router | 548 | 0.333 | |
http | Allegro RomPager | 4.51 UPnP/1.0 | 548 | 0.333 |
http | Virata-EmWeb | 6.0.1 | 533 | 0.324 |
socks4 | Connection ok | 521 | 0.317 | |
http | thttpd | 2.25b | 511 | 0.311 |
http | siyou server | 501 | 0.305 | |
http | lighttpd | 1.4.29 | 490 | 0.298 |
http-proxy | CCProxy http proxy | 468 | 0.285 | |
http | Draytek Vigor ADSL router webadmin | 457 | 0.278 | |
http | lighttpd | 1.4.28 | 405 | 0.246 |
http | mini_httpd | 1.19 19dec2003 | 403 | 0.245 |
http | thttpd | 382 | 0.232 | |
http | MobileServer | 375 | 0.228 | |
http | Apache Tomcat/Coyote JSP engine | 1.1 | 368 | 0.224 |
http | Netwave IP camera http config | 345 | 0.21 | |
http | Generic router http config | 344 | 0.209 | |
http | Apache | 2.2.3 | 344 | 0.209 |
xmpp-transport | Spectrum XMPP file transfer | 337 | 0.205 | |
http | Motorola Canopy WAP http config | 324 | 0.197 | |
http | lighttpd | 1.4.26 | 300 | 0.183 |
http | Gadspot/Avtech AV787 webcam http config | 294 | 0.179 | |
http | lighttpd | 1.4.20 | 259 | 0.158 |
http | picoIP HTTPd 10 | picoIP HTTPd 10 | 258 | 0.157 |
http | MikroTik router config httpd | 248 | 0.151 | |
http | DD-WRT milli_httpd | 248 | 0.151 | |
http | Karrigell 3.1.1 | 243 | 0.148 | |
http | uc-httpd | 1.0.0 | 237 | 0.144 |
http | Hikvision-Webs | 237 | 0.144 | |
ssl | TLS | 1.0 | 234 | 0.142 |
http | IP_SHARER WEB | 1.0 | 233 | 0.142 |
http-proxy | Squid http proxy | 231 | 0.141 | |
http | Apache | 2.2.16 | 231 | 0.141 |
irc-proxy | psyBNC | 2.3.2-7 | 227 | 0.138 |
http | InterNiche Technologies WebServer | 2.0 | 219 | 0.133 |
http | Allegro RomPager | 4.01 | 219 | 0.133 |
upnp | Microsoft Windows UPnP | 211 | 0.128 | |
arcserve | ARCserve Discovery | 211 | 0.128 | |
http | Boa HTTPd | 0.94.13 | 209 | 0.127 |
http | Hisilicon Ipcam | 208 | 0.127 | |
http | Apache | 2.2.14 | 198 | 0.12 |
http | Apache | 2.2.22 | 195 | 0.119 |
http | DVR Systems webcam http interface | 189 | 0.115 | |
http | Microsoft IIS httpd | 6.0 | 188 | 0.114 |
http | Apache | 2.2.9 | 183 | 0.111 |
socks4 | Connection failed; ident required | 180 | 0.11 | |
http | D-Link DIR-300 WAP http admin | 180 | 0.11 | |
http | Apache | 2.2.15 | 180 | 0.11 |
http | SonicWALL firewall http config | 179 | 0.109 | |
http | Microsoft IIS httpd | 5.1 | 178 | 0.108 |
http | Intoto httpd | 1.0 | 177 | 0.108 |
remoting | MS .NET Remoting services | 176 | 0.107 | |
http-proxy | Haproxy http proxy | 176 | 0.107 | |
http | D-Link DI-808HV http config | 173 | 0.105 | |
http | D-Link DIR-100 http config | 170 | 0.103 | |
http | micro_httpd | 169 | 0.103 | |
http | Linksys router http config | 151 | 0.092 | |
http | lighttpd | 1.4.23 | 150 | 0.091 |
http | Atrium's MERCUR Webmail httpd | 149 | 0.091 | |
socks4 | Connection failed; username required | 148 | 0.09 | |
http | D-Link DI-604 http config | 146 | 0.089 | |
http | InterNiche Technologies WebServer 2.0 | 139 | 0.085 | |
http | Apache | 1.3.26 | 138 | 0.084 |
http | Switch | 134 | 0.082 | |
http | antid | 127 | 0.077 | |
http | Cross Web Server | 124 | 0.075 | |
http | Mathopd httpd | 1.5p5 | 123 | 0.075 |
http | Embedded HTTP Server | 3.51 | 121 | 0.074 |
http | thttpd | 2.24 | 118 | 0.072 |
http | Apache | 2.2.17 | 117 | 0.071 |
http | PDR-M800 | 1.0 | 116 | 0.071 |
socks4 | Connection rejected or failed; connections possibly ok | 115 | 0.07 | |
http | Huawei-3Com HTTPD | 113 | 0.069 | |
http | HTTP Software 1.1 | 112 | 0.068 | |
http | DrcomServer1.0 | 108 | 0.066 | |
http | TP-LINK WR841N WAP http config | 106 | 0.064 | |
vnc | VNC | 105 | 0.064 | |
http | nginx | 104 | 0.063 | |
ssh | 102 | 0.062 | ||
http | HP StorageWorks AG118A tape autoloader http config | 100 | 0.061 | |
http | Apache | 1.3.41 | 100 | 0.061 |
http | MikroTik router http config | 97 | 0.059 | |
http | TwistedWeb httpd | 8.2.0 | 96 | 0.058 |
http | TP-LINK WR340G WAP http config | 96 | 0.058 | |
http | Cinema 4D Renderer http interface | 1.0 | 94 | 0.057 |
http | D-Link DI-824VUP http config | 91 | 0.055 | |
http | TP-LINK WR740N WAP http config | 90 | 0.055 | |
http | thttpd | 2.25b 29dec2003 | 90 | 0.055 |
http | Apache | 2.2.8 | 85 | 0.052 |
rtsp | Avtech MPEG4 DVR control rtspd | 81 | 0.049 | |
http | thttpd-alphanetworks | 2.23 | 79 | 0.048 |
http | GoAhead-Webs | 78 | 0.047 | |
http | Embedded HTTP Server | 1.05 | 77 | 0.047 |
http | Embedded HTTP Server | 2.02 | 76 | 0.046 |
http | Mbedthis-Appweb | 2.0.4 | 74 | 0.045 |
http | Apache | 1.3.33 | 72 | 0.044 |
http | AquaController 4.0 | 71 | 0.043 | |
http | Apache | 0.6.5 | 71 | 0.043 |
telnet | 69 | 0.042 | ||
http | Embedded HTTP Server | 2.00 | 69 | 0.042 |
http | Embedded HTTP Server | 1.03 | 69 | 0.042 |
http | Netgear DG834 router http config | 67 | 0.041 | |
http | Apache | 2.2.4 | 67 | 0.041 |
http | Allegro RomPager | 4.03 | 67 | 0.041 |
http | Embedded HTTP Server | 1.04 | 64 | 0.039 |
http | Cisco IOS http config | 64 | 0.039 | |
http | Boa HTTPd | 0.94.11 | 64 | 0.039 |
http | Network Camera | 62 | 0.038 | |
http | Apache | 2.2.11 | 62 | 0.038 |
http | lighttpd | 1.4.30 | 60 | 0.037 |
http | Panasonic webcam http config | 59 | 0.036 | |
http | lighttpd | 1.4.18 | 59 | 0.036 |
http | Apache | 2.2.21 | 59 | 0.036 |
http | Linksys SVR4000 router | 58 | 0.035 | |
rtsp | 57 | 0.035 | ||
ssh | OpenSSH | 4.3 | 56 | 0.034 |
http | WYM httpd | 1.0 | 56 | 0.034 |
http | uhttpd | 1.0.0 | 56 | 0.034 |
http-proxy | Squid http proxy | 2.6.STABLE21 | 55 | 0.033 |
http | lighttpd | 1.4.13 | 55 | 0.033 |
http-proxy | Tinyproxy | 1.6.0 | 54 | 0.033 |
http | ZyXEL ZyWALL USG 20 firewall http config | 53 | 0.032 | |
http | MERCUR Messaging 2005 | 53 | 0.032 | |
http | Boa httpd | 53 | 0.032 | |
http | httpd 1.1 | 51 | 0.031 | |
xml | 50 | 0.03 | ||
http | Optenet Web Server | 50 | 0.03 | |
http | Embedded HTTP Server | 2.76 | 50 | 0.03 |
mydoom | MyDoom virus backdoor | v012604 | 49 | 0.03 |
http | http server 1.0 | 49 | 0.03 | |
http | HeiTel GmbH Webserver | 49 | 0.03 | |
http | Agranat-EmWeb | Agranat-EmWeb | 49 | 0.03 |
http | LevelOne FBR-FBR-1418TX router http config | 48 | 0.029 | |
http | Apache | 2.0.59 | 47 | 0.029 |
ftp | Microsoft ftpd | 47 | 0.029 | |
http | Netgear WGR614v9 WAP http config | 46 | 0.028 | |
http | Microsoft IIS httpd | 5.0 | 45 | 0.027 |
http | Embedded HTTP Server | 2.03 | 45 | 0.027 |
http | httpd | 44 | 0.027 | |
http | Embedded HTTP Server | 3.53 | 43 | 0.026 |
http | RapidLogic httpd | 1.1 | 42 | 0.026 |
secure-socket | CA Secure Socket Adapter | 41 | 0.025 | |
http | Mathopd httpd | 1.5p2 | 41 | 0.025 |
http | Microsoft IIS httpd | 7.5 | 40 | 0.024 |
http | LuCI Lua http config | 40 | 0.024 | |
http | iCanWebServer | 1.1 | 40 | 0.024 |
http | Embedded HTTP Server. | 40 | 0.024 | |
http | Wireless Network Camera | 39 | 0.024 | |
http | Embedded HTTP Server | 4.03 | 39 | 0.024 |
http | WindWeb | 2.0 | 38 | 0.023 |
http | UserGate http report area | 38 | 0.023 | |
http | Buffalo AirStation http config | 38 | 0.023 | |
http | TP-LINK WR541G/542G WAP http config | 37 | 0.023 | |
http | Stanley NT500 access control system httpd | 37 | 0.023 | |
http-proxy | MikroTik http proxy | 37 | 0.023 | |
vnc | RealVNC Personal | 36 | 0.022 | |
http | WEB SERVER | 36 | 0.022 | |
http-proxy | Squid http proxy | 2.7.STABLE9 | 36 | 0.022 |
http | Netgear DG834G router http config | 36 | 0.022 | |
http | HiIpcam | V100R003 VodServer | 35 | 0.021 |
http | Embedded HTTP Server | 1.02 | 35 | 0.021 |
http | DI-LB604 HTTP Server | 35 | 0.021 | |
http | thttpd | 2.24 26oct2003 | 34 | 0.021 |
http | Dreambox httpd | 34 | 0.021 | |
http | uTorrent WebUI | 33 | 0.02 | |
http-proxy | Squid http proxy | 2.5.STABLE13 | 33 | 0.02 |
http | FlexWATCH-Webs | 33 | 0.02 | |
smtp | 32 | 0.019 | ||
http | WindRiver-WebServer | 4.7 | 32 | 0.019 |
http | Embedded HTTP Server | 3.38 | 32 | 0.019 |
http | D-Link router http config | 32 | 0.019 | |
http | Apache | 2.2.13 | 31 | 0.019 |
upnp | Conexant-EmWeb | 6.1.0 | 30 | 0.018 |
netbios-ssn | 30 | 0.018 | ||
http | TP-LINK WR941N WAP http config | 30 | 0.018 | |
http | Jetty | 6.1.x | 30 | 0.018 |
http | Apache | 2.2.6 | 30 | 0.018 |
http | Apache | 2.2.20 | 30 | 0.018 |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | 29 | 0.018 |
http | u-Server | 29 | 0.018 | |
http | TP-LINK WR1043ND WAP http config | 29 | 0.018 | |
http | Mbedthis-Appweb | 2.4.2 | 29 | 0.018 |
http | GM Streaming Server httpd | 29 | 0.018 | |
ftp | 29 | 0.018 | ||
nntp | INN nntpd | 28 | 0.017 | |
http | VMware vCenter Converter httpd | 28 | 0.017 | |
http | Lotus Domino httpd | 28 | 0.017 | |
http | Embedded HTTP Server | 4.04beta | 28 | 0.017 |
http | Embedded HTTP Server | 2.09 | 28 | 0.017 |
http | Xitami httpd | 27 | 0.016 | |
http | World Client WDaemon httpd | 4.0 | 27 | 0.016 |
http | HeiTel GmbH Web Server | 27 | 0.016 | |
http | Embedded HTTP Server | 1.23 | 27 | 0.016 |
ftp | Pure-FTPd | 27 | 0.016 | |
directconnect | Direct Connect P2P | 27 | 0.016 | |
http | GoldStar iPECS 50B PBX http config | 26 | 0.016 | |
http | Embedded HTTP Server | 3.30 | 26 | 0.016 |
http | Embedded HTTP Server | 2.42 | 26 | 0.016 |
http | Embedded HTTP Server | 26 | 0.016 | |
http | Apache | 2.0.63 | 26 | 0.016 |
http | Apache | 2.0.58 | 26 | 0.016 |
http | MWS | 1.2.0 | 25 | 0.015 |
http | Embedded HTTP Server | 3.23 | 25 | 0.015 |
http | D-Link DIR-600 WAP http config | 2.11 | 25 | 0.015 |
ncacn_http | Microsoft Windows RPC over HTTP | 1.0 | 24 | 0.015 |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | 24 | 0.015 | |
http | thttpd | 2.25b PHP | 24 | 0.015 |
http | Embedded HTTP Server | 3.52 | 24 | 0.015 |
http | Embedded HTTP Server | 3.20 | 24 | 0.015 |
http | D-Link DVS-4088S, DVS-5088S, or DVG-7062S VoIP gateway http config | 24 | 0.015 | |
geovision-control | Geovision webcam control | 24 | 0.015 | |
http | W3MFC | 1.68 | 23 | 0.014 |
http | Tridium Niagara httpd | 1.1 | 23 | 0.014 |
http | TP-LINK WR741N WAP http config | 23 | 0.014 | |
http | TibetSystem Server 2.0 | 23 | 0.014 | |
http | thttpd | 2.19-MX Jul 1 2010 | 23 | 0.014 |
http | Netgear WGR614v7 WAP http config | 23 | 0.014 | |
http | HP Integrated Lights-Out http config | 23 | 0.014 | |
http | Apache | 2.0.52 | 23 | 0.014 |
http | 3ware 3DM2 Serial RAID http config | 2.0 | 23 | 0.014 |
http | Virata-EmWeb | 6.2.0 | 22 | 0.013 |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 22 | 0.013 | |
http | OwnServer1.0 | 22 | 0.013 | |
http | III 100 | 22 | 0.013 | |
http | D-Link DIR-600 WAP http config | 2.10 | 22 | 0.013 |
http | Apache | 1.3.20 | 22 | 0.013 |
http | Agranat-EmWeb | R4_01 | 22 | 0.013 |
http | uClinux-httpd | 0.2.2 | 21 | 0.013 |
http | MS .NET Remoting httpd | 21 | 0.013 | |
http | Elecard Web Configurator 3.0.25608.100930 | 21 | 0.013 | |
http | Boa HTTPd | 0.92o | 21 | 0.013 |
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 21 | 0.013 | |
giop | CORBA naming service | 21 | 0.013 | |
upnp | Portable SDK for UPnP devices | 1.3.1 | 20 | 0.012 |
http | Unknown | 0.0 UPnP | 20 | 0.012 |
http-proxy | Software602 602LAN Suite http proxy | 20 | 0.012 | |
http | Netgear DG834PN router http config | 20 | 0.012 | |
http | Micro-Web | 20 | 0.012 | |
http | Microsoft HTTPAPI httpd | 1.0 | 20 | 0.012 |
http | Apache | 2.2.12 | 20 | 0.012 |
http | Apache | 1.3.28 | 20 | 0.012 |
giop | omniORB omniNames | 20 | 0.012 | |
ssh | OpenSSH | 4.7p1 Debian 8ubuntu1.2 | 19 | 0.012 |
ssh | Dropbear sshd | 0.52 | 19 | 0.012 |
http | Techno Vision Security System http config | 2.0 | 19 | 0.012 |
http | nginx | 0.8.54 | 19 | 0.012 |
http | Microsoft ISA httpd | 19 | 0.012 | |
http | linux | 19 | 0.012 | |
http | HTTPD 1.0 | 19 | 0.012 | |
http | H3C-Miniware-Webs | 19 | 0.012 | |
http | FC | 19 | 0.012 | |
http | Embedded HTTP Server | 3.02 | 19 | 0.012 |
http | D-Link DCS-2120 webcam http config | 19 | 0.012 | |
ssh | OpenSSH | 5.1p1 Debian 5 | 18 | 0.011 |
http | Thin | 1.3.1 | 18 | 0.011 |
http | Linksys PAP2 VoIP http config | 18 | 0.011 | |
http | Kerio MailServer http config | 18 | 0.011 | |
http | Httpd | 1.0 | 18 | 0.011 |
http | Fortinet VPN/firewall http config | 18 | 0.011 | |
http | Apache | 2.0.53 | 18 | 0.011 |
vnc | RealVNC Enterprise | 17 | 0.01 | |
ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | 17 | 0.01 |
ovm-manager | Oracle VM Manager | 17 | 0.01 | |
http | Vivotek Network Camera | 17 | 0.01 | |
http | TP-LINK MR3420 WAP http config | 17 | 0.01 | |
http | thttpd | 2.25b-lxc 29dec2003 | 17 | 0.01 |
http-proxy | BlueCoat http proxy | 17 | 0.01 | |
http | nginx | 1.2.0 | 17 | 0.01 |
http | Linksys wireless-G WAP http config | 17 | 0.01 | |
http | HTTPServer | 17 | 0.01 | |
http | GoAhead httpd | 17 | 0.01 | |
http | Embedded HTTP Server | 2.53 | 17 | 0.01 |
http | Embedded HTTP Server | 1.01 | 17 | 0.01 |
http | D-Link DCS-5220 webcam http config | 17 | 0.01 | |
http | Apache | 1.3.27 | 17 | 0.01 |
http | American Dynamics EDVR security recorder | 17 | 0.01 | |
http | Alcatel/Thomson SpeedTouch ADSL http config | 1.0 | 17 | 0.01 |
http | TP-LINK WR840N WAP http config | 16 | 0.01 | |
http | NetPort httpd | 1.1 | 16 | 0.01 |
http | Netgear DGN2000 router http config | 16 | 0.01 | |
http | Lantronix XPort embedded ethernet http config | 16 | 0.01 | |
http | Embedded HTTP Server | 2.70 | 16 | 0.01 |
http | Embedded HTTP Server | 2.07 | 16 | 0.01 |
http | D-Link DI-704P http config | 16 | 0.01 | |
http | Boa HTTPd | 0.94.14rc18-ipcam | 16 | 0.01 |
http | Apache | 2.2.19 | 16 | 0.01 |
http | Apache | 2.2.10 | 16 | 0.01 |
http | Apache | 2.0.54 | 16 | 0.01 |
http | Apache | 1.3.34 | 16 | 0.01 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 16 | 0.01 | |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | 15 | 0.009 |
http | Zimbra http config | 15 | 0.009 | |
http | Web-Server | 3.0 | 15 | 0.009 |
http | WebLogic httpd | 15 | 0.009 | |
http-proxy | Ncat http proxy | 15 | 0.009 | |
http-proxy | F5 BIG-IP load balancer http proxy | 15 | 0.009 | |
http | nginx | 0.7.67 | 15 | 0.009 |
http | Netgear WNR1000v3 WAP http config | 15 | 0.009 | |
http | Netgear or Linksys WAP http config | 15 | 0.009 | |
http | NetApp DFM httpd | 15 | 0.009 | |
http | MultView WEB Server V1.1 | 15 | 0.009 | |
http | Microsoft IIS httpd | 7.0 | 15 | 0.009 |
http | Fnord httpd | 1.9 | 15 | 0.009 |
http | Allegro RomPager | 4.06 | 15 | 0.009 |