~25 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
no match | -/- | 4154 | 16.149 |
irc | Dancer ircd | 4019 | 15.624 |
pop3 | Dovecot pop3d | 2879 | 11.192 |
chat | AIM or ICQ server | 2004 | 7.791 |
http | GeoVision GeoHttpServer for webcams | 1532 | 5.956 |
http | 1179 | 4.583 | |
http | WangWnagSimpleServer | 1056 | 4.105 |
pop3 | qmail pop3d | 1020 | 3.965 |
ovm-manager | Oracle VM Manager | 753 | 2.927 |
http | lighttpd | 734 | 2.853 |
http | Boa HTTPd | 490 | 1.905 |
java-rmi | Java RMI | 452 | 1.757 |
http | Microsoft IIS httpd | 344 | 1.337 |
http | thttpd | 339 | 1.318 |
http | World Client WDaemon httpd | 264 | 1.026 |
ssh | OpenSSH | 236 | 0.917 |
http | Virata-EmWeb | 230 | 0.894 |
http | Microsoft HTTPAPI httpd | 205 | 0.797 |
ssl | TLS | 193 | 0.75 |
http | GoAhead-Webs httpd | 159 | 0.618 |
pop3 | CommuniGate Pro | 147 | 0.571 |
vnc | VNC | 121 | 0.47 |
pop3 | 120 | 0.467 | |
pop3 | Qpopper pop3d | 110 | 0.428 |
http | httpd 1.1 | 101 | 0.393 |
ssh | 95 | 0.369 | |
http | Apache | 95 | 0.369 |
socks5 | 93 | 0.362 | |
http | Apache Tomcat/Coyote JSP engine | 84 | 0.327 |
pop3 | Courier pop3d | 75 | 0.292 |
http | MiniServ | 66 | 0.257 |
http-proxy | Squid http proxy | 65 | 0.253 |
telnet | Precidia serial2ethernet gateway telnetd | 61 | 0.237 |
telnet | 61 | 0.237 | |
pop3 | MDaemon pop3d | 61 | 0.237 |
ftp | Microsoft ftpd | 57 | 0.222 |
smtp | Sendmail | 53 | 0.206 |
pop3 | ipop3d | 53 | 0.206 |
pop3 | MailEnable POP3 Server | 51 | 0.198 |
arcserve | ARCserve Discovery | 49 | 0.19 |
pop3 | Dovecot DirectAdmin pop3d | 47 | 0.183 |
http | Network Camera | 45 | 0.175 |
mysql | MySQL | 43 | 0.167 |
http | Hikvision-Webs | 43 | 0.167 |
ftp | FileZilla ftpd | 41 | 0.159 |
http | Allegro RomPager | 37 | 0.144 |
http | Router | 36 | 0.14 |
ftp | 36 | 0.14 | |
http | Wireless Network Camera with Pan | 35 | 0.136 |
http | nginx | 34 | 0.132 |
pop3 | Microsoft Exchange 2003 pop3d | 32 | 0.124 |
http | RealVNC | 32 | 0.124 |
pop3-proxy | kingate pop3-proxy | 30 | 0.117 |
nntp | INN nntpd | 28 | 0.109 |
directconnect | Direct Connect P2P | 25 | 0.097 |
ftp | ProFTPD | 24 | 0.093 |
remoting | MS .NET Remoting services | 23 | 0.089 |
pop3 | Microsoft Windows 2003 POP3 Service | 23 | 0.089 |
http | WYM httpd | 23 | 0.089 |
http | Network Camera with Pan | 23 | 0.089 |
vnc | RealVNC Enterprise | 22 | 0.086 |
upnp | Microsoft Windows UPnP | 22 | 0.086 |
pop3 | Microsoft Exchange 2007-2010 pop3d | 21 | 0.082 |
pop3 | ArGoSoft Plus | 21 | 0.082 |
pop3 | MailMax pop3d | 20 | 0.078 |
http | NetApp DFM httpd | 20 | 0.078 |
smtp | Microsoft ESMTP | 19 | 0.074 |
http | http server 1.0 | 19 | 0.074 |
pop3 | Cyrus pop3d | 18 | 0.07 |
http | Wireless Network Camera | 18 | 0.07 |
http | Jetty | 18 | 0.07 |
vnc | RealVNC Personal | 16 | 0.062 |
openvpn | OpenVPN | 16 | 0.062 |
http | CCProxy | 16 | 0.062 |
vnc | 15 | 0.058 | |
pop3 | Kerio Connect pop3d | 15 | 0.058 |
pop3 | hMailServer pop3d | 15 | 0.058 |
ftp | Serv-U ftpd | 15 | 0.058 |
smtp | Microsoft Exchange smtpd | 14 | 0.054 |
smtp | 14 | 0.054 | |
pop3 | Zimbra pop3d | 14 | 0.054 |
giop | omniORB omniNames | 14 | 0.054 |
ssh | Dropbear sshd | 13 | 0.051 |
http | Vivotek Network Camera | 13 | 0.051 |
pop3 | IceWarp pop3d | 12 | 0.047 |
pop3 | 602LAN Suite pop3 | 12 | 0.047 |
http-proxy | Microsoft Foundation Class httpd | 12 | 0.047 |
http-proxy | F5 BIG-IP load balancer http proxy | 12 | 0.047 |
ftp | NET Disk/NetStore ftpd | 12 | 0.047 |
pop3-proxy | FreePOPs pop3 proxy | 11 | 0.043 |
pop3 | Merak Mail server pop3d | 11 | 0.043 |
http | gen5th | 11 | 0.043 |
giop | CORBA naming service | 11 | 0.043 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 11 | 0.043 |
pop3 | SurgeMail pop3d | 10 | 0.039 |
pop3 | POPFile pop3d | 10 | 0.039 |
netbios-ssn | 10 | 0.039 | |
http | WebLogic httpd | 10 | 0.039 |
http | MultView WEB Server V1.1 | 10 | 0.039 |
http | micro_httpd | 10 | 0.039 |