~60 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
ssh | OpenSSH | 21010 | 34.896 |
http | 10878 | 18.068 | |
irc | Dancer ircd | 4050 | 6.727 |
http | SonicWALL | 3695 | 6.137 |
http | WangWnagSimpleServer | 2421 | 4.021 |
pop3 | qmail pop3d | 2368 | 3.933 |
no match | -/- | 2364 | 3.926 |
chat | AIM or ICQ server | 2233 | 3.709 |
pop3 | Zimbra pop3d | 1774 | 2.947 |
http | lighttpd | 1022 | 1.697 |
http | Apache | 1006 | 1.671 |
ssl | SSLv3 | 965 | 1.603 |
http | AIM | 617 | 1.025 |
socks5 | 400 | 0.664 | |
pop3 | Dovecot pop3d | 301 | 0.5 |
http | Microsoft IIS httpd | 289 | 0.48 |
pop3 | Qpopper pop3d | 275 | 0.457 |
ssh | Dropbear sshd | 250 | 0.415 |
http | thttpd | 198 | 0.329 |
http | Boa HTTPd | 182 | 0.302 |
pop3 | Qpop pop3d | 156 | 0.259 |
pop3 | Courier pop3d | 149 | 0.247 |
pop3 | DavMail pop3d | 139 | 0.231 |
http | GeoVision GeoHttpServer for webcams | 128 | 0.213 |
http | GoAhead-Webs httpd | 118 | 0.196 |
http | Netwave IP camera http config | 113 | 0.188 |
http | Microsoft HTTPAPI httpd | 99 | 0.164 |
ssh | 96 | 0.159 | |
pop3 | MailEnable POP3 Server | 91 | 0.151 |
http | Avtech AVN801 network camera | 90 | 0.149 |
http | Apache Tomcat/Coyote JSP engine | 89 | 0.148 |
pop3 | MDaemon pop3d | 82 | 0.136 |
vnc | VNC | 74 | 0.123 |
pop3 | Microsoft Exchange 2003 pop3d | 67 | 0.111 |
pop3 | JAMES pop3d | 67 | 0.111 |
pop3 | CommuniGate Pro | 66 | 0.11 |
ssl | TLS | 56 | 0.093 |
pop3 | 54 | 0.09 | |
http | PDR-M800 | 54 | 0.09 |
http-proxy | Squid http proxy | 50 | 0.083 |
pop3 | ipop3d | 49 | 0.081 |
telnet | 48 | 0.08 | |
pop3 | Microsoft Exchange 2007-2010 pop3d | 46 | 0.076 |
pop3 | Cubic Circle Cucipop pop3d | 42 | 0.07 |
arcserve | ARCserve Discovery | 40 | 0.066 |
remoting | MS .NET Remoting services | 39 | 0.065 |
ftp | Microsoft ftpd | 38 | 0.063 |
pop3 | hMailServer pop3d | 35 | 0.058 |
pop3 | Cyrus pop3d | 33 | 0.055 |
http | uc-httpd | 33 | 0.055 |
mysql | MySQL | 31 | 0.051 |
http | Indy | 30 | 0.05 |
nntp | INN nntpd | 28 | 0.047 |
pop3 | qpopper | 27 | 0.045 |
http | mini_httpd | 27 | 0.045 |
http | GoAhead-Webs | 23 | 0.038 |
xml | 22 | 0.037 | |
vnc | RealVNC Enterprise | 22 | 0.037 |
rtsp | 22 | 0.037 | |
http | uTorrent WebUI | 22 | 0.037 |
http | Hikvision-Webs | 22 | 0.037 |
flexlm | FlexLM license manager | 22 | 0.037 |
irc-proxy | psyBNC | 21 | 0.035 |
pop3 | Cyrus POP3 | 20 | 0.033 |
http | SonicWALL firewall http config | 20 | 0.033 |
ftp | 20 | 0.033 | |
directconnect | Direct Connect P2P | 20 | 0.033 |
upnp | Portable SDK for UPnP devices | 19 | 0.032 |
http | nginx | 19 | 0.032 |
http | Cross Web Server | 19 | 0.032 |
http | Mbedthis-Appweb | 18 | 0.03 |
http | Gadspot/Avtech AV787 webcam http config | 18 | 0.03 |
pop3 | Microsoft Windows 2003 POP3 Service | 17 | 0.028 |
pop3 | MailMax pop3d | 17 | 0.028 |
pop3 | Lotus Domino POP3 server | 17 | 0.028 |
http | Nginx | 17 | 0.028 |
ftp | vsftpd | 17 | 0.028 |
http | Network Camera | 16 | 0.027 |
http | DVR Systems webcam http interface | 15 | 0.025 |
http | World Client WDaemon httpd | 14 | 0.023 |
ftp | Pure-FTPd | 14 | 0.023 |
pop3 | Zimbra Collabration Suite pop3d | 13 | 0.022 |
pop3 | XMail pop3d | 13 | 0.022 |
pop3 | UW Imap pop3d | 13 | 0.022 |
pop3-proxy | Zarafa pop3 proxy | 13 | 0.022 |
http | Vivotek IP7131 Network Camera http config | 13 | 0.022 |
http-proxy | F5 BIG-IP load balancer http proxy | 13 | 0.022 |
ftp | FileZilla ftpd | 13 | 0.022 |
drda | Apache Derby DRDA | 13 | 0.022 |
smtp | Microsoft ESMTP | 11 | 0.018 |
ftp | ProFTPD | 11 | 0.018 |
ssl | Microsoft IIS SSL | 10 | 0.017 |
shoutcast | SHOUTcast server | 10 | 0.017 |
ovm-manager | Oracle VM Manager | 10 | 0.017 |
http | TeleEye | 10 | 0.017 |
http | MS .NET Remoting httpd | 10 | 0.017 |
http | Jetty | 10 | 0.017 |
http | FlashCom | 10 | 0.017 |
ftp | Serv-U ftpd | 10 | 0.017 |