~235 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
soap | gSOAP soap | 165781 | 70.336 |
no match | -/- | 12721 | 5.397 |
http | Trend Micro OfficeScan Antivirus http config | 9453 | 4.011 |
http | 8196 | 3.477 | |
eggdrop | Eggdrop IRC bot console | 4887 | 2.073 |
irc | Dancer ircd | 4075 | 1.729 |
http | SonicWALL | 3481 | 1.477 |
http | lighttpd | 2170 | 0.921 |
chat | AIM or ICQ server | 2148 | 0.911 |
ssh | Dropbear sshd | 1855 | 0.787 |
http-proxy | Squid http proxy | 1832 | 0.777 |
telnet | VBrick 4300 video encoder telnetd | 1806 | 0.766 |
http | Apache | 1488 | 0.631 |
http | mini_httpd | 1238 | 0.525 |
ssh | OpenSSH | 1121 | 0.476 |
irc-proxy | psyBNC | 911 | 0.387 |
http | uTorrent utserver web interface | 845 | 0.359 |
http | Microsoft IIS httpd | 798 | 0.339 |
http | Microsoft HTTPAPI httpd | 659 | 0.28 |
http | AIM | 643 | 0.273 |
http | MiniServ | 533 | 0.226 |
socks5 | 447 | 0.19 | |
http | nginx | 337 | 0.143 |
http | thttpd | 263 | 0.112 |
http | uTorrent WebUI | 237 | 0.101 |
remoting | MS .NET Remoting services | 234 | 0.099 |
http | Netwave webcam http config | 226 | 0.096 |
http | Jetty | 216 | 0.092 |
vnc | VNC | 198 | 0.084 |
http | GoAhead-Webs httpd | 196 | 0.083 |
vnc | Ultr@VNC Repeater | 192 | 0.081 |
http | Boa HTTPd | 186 | 0.079 |
ssh | MikroTik RouterOS sshd | 176 | 0.075 |
http | Apache Tomcat/Coyote JSP engine | 176 | 0.075 |
http | Httpd | 171 | 0.073 |
ftp | ProFTPD | 167 | 0.071 |
xml | 142 | 0.06 | |
http | HTTPD 1.0 | 138 | 0.059 |
http | Draytek Vigor ADSL router webadmin | 138 | 0.059 |
beep | 127 | 0.054 | |
http | mitmproxy | 117 | 0.05 |
memcache | memcached | 109 | 0.046 |
http | Linux | 109 | 0.046 |
ssh | 108 | 0.046 | |
ftp | FileZilla ftpd | 102 | 0.043 |
netbus | NetBus trojan | 95 | 0.04 |
telnet | 86 | 0.036 | |
ftp | 84 | 0.036 | |
vnc | RealVNC Enterprise | 81 | 0.034 |
http | TP-LINK Router | 81 | 0.034 |
vnc | RealVNC Personal | 80 | 0.034 |
http | Router | 80 | 0.034 |
upnp | Microsoft Windows UPnP | 74 | 0.031 |
http | Boa | 74 | 0.031 |
http | Allegro RomPager | 70 | 0.03 |
ftp | Microsoft ftpd | 68 | 0.029 |
http | ADAM-6000 | 63 | 0.027 |
ftp | Serv-U ftpd | 63 | 0.027 |
http | TwistedWeb httpd | 62 | 0.026 |
http-proxy | Haproxy http proxy | 60 | 0.025 |
http | Hikvision-Webs | 60 | 0.025 |
http | ZNC - http | 58 | 0.025 |
eggdrop | Eggdrop irc bot console | 56 | 0.024 |
http | Boa httpd | 53 | 0.022 |
ssl | TLS | 50 | 0.021 |
ovm-manager | Oracle VM Manager | 50 | 0.021 |
http | Virata-EmWeb | 49 | 0.021 |
http | uc-httpd | 45 | 0.019 |
ftp | vsftpd | 44 | 0.019 |
http | Linksys router http config | 42 | 0.018 |
mysql | MySQL | 41 | 0.017 |
http | http server 1.0 | 41 | 0.017 |
ftp | Pure-FTPd | 41 | 0.017 |
http | GoAhead-Webs | 39 | 0.017 |
http | FC | 38 | 0.016 |
sftp | ProFTPD mod_sftp | 36 | 0.015 |
http | Aterm(HT) | 36 | 0.015 |
xmpp-transport | Spectrum XMPP file transfer | 35 | 0.015 |
http | FLPS | 35 | 0.015 |
irc | Unreal ircd | 32 | 0.014 |
http-proxy | ziproxy http proxy | 30 | 0.013 |
http | PDR-M800 | 30 | 0.013 |
http | Thin | 29 | 0.012 |
http | Sagem F@st router httpd | 29 | 0.012 |
smtp | Postfix smtpd | 28 | 0.012 |
http | Ubicom | 28 | 0.012 |
http | HTTP Software 1.1 | 28 | 0.012 |
directconnect | Direct Connect P2P | 28 | 0.012 |
http | MS .NET Remoting httpd | 27 | 0.011 |
http | H3C-Miniware-Webs | 27 | 0.011 |
http | D-Link DIR-300 WAP http admin | 27 | 0.011 |
http | CherryPy httpd | 26 | 0.011 |
telnet | Linux telnetd | 25 | 0.011 |
http | TP-LINK WR340G WAP http config | 25 | 0.011 |
http | siyou server | 25 | 0.011 |
smtp | Microsoft ESMTP | 24 | 0.01 |
secure-socket | CA Secure Socket Adapter | 24 | 0.01 |
http | Eudemon Server 1.0 | 24 | 0.01 |
http | PunkBuster http config | 23 | 0.01 |
http | JDav server 1.0 | 23 | 0.01 |
http | HTTP Server 1.0 | 23 | 0.01 |
upnp | Conexant-EmWeb | 22 | 0.009 |
http | Cross Web Server | 22 | 0.009 |
openvpn | OpenVPN | 21 | 0.009 |
http | thin 1.2.11 codename Bat-Shit Crazy | 20 | 0.008 |
napster | WinMX or Lopster Napster P2P client | 19 | 0.008 |
http-proxy | MikroTik http proxy | 19 | 0.008 |
http-proxy | CCProxy http proxy | 19 | 0.008 |
http | Mbedthis-AppWeb | 19 | 0.008 |
http | GoAhead-Webs embedded httpd | 19 | 0.008 |
smtp | Microsoft Exchange smtpd | 18 | 0.008 |
irc | ircu ircd | 18 | 0.008 |
http | Indy httpd | 18 | 0.008 |
http | httpd | 18 | 0.008 |
achat | AChat chat system | 18 | 0.008 |
http | World Client WDaemon httpd | 17 | 0.007 |
http | Router Web Config System | 17 | 0.007 |
http | Indy | 17 | 0.007 |
http | gSOAP | 17 | 0.007 |
http | Ecam | 17 | 0.007 |
http | Buffalo AirStation http config | 17 | 0.007 |
arcserve | ARCserve Discovery | 17 | 0.007 |
svnserve | Subversion | 16 | 0.007 |
psql | Pervasive.SQL Server - Relational Engine | 16 | 0.007 |
http | Router Webserver | 16 | 0.007 |
http | Intoto httpd | 16 | 0.007 |
http | Helix Mobile Server | 16 | 0.007 |
http | TP-LINK WR740N WAP http config | 15 | 0.006 |
http | Rex media encoder http config | 15 | 0.006 |
http | WEBrick httpd | 14 | 0.006 |
http | WebLogic httpd | 14 | 0.006 |
ssh | WeOnlyDo sshd | 13 | 0.006 |
printer | Panasonic mfpscdl.exe service | 13 | 0.006 |
http | WEB SERVER | 13 | 0.006 |
http-proxy | F5 BIG-IP load balancer http proxy | 13 | 0.006 |
http | GeoVision GeoHttpServer for webcams | 13 | 0.006 |
http | FRITZ!Box http config | 13 | 0.006 |
http | CCcam card sharing system http config | 13 | 0.006 |
ftp | Synology DiskStation NAS ftpd | 13 | 0.006 |
damewaremr | DameWare Mini Remote Control | 13 | 0.006 |
audioworks | AudioWorks sound server | 13 | 0.006 |
ssh | Bitvise WinSSHD | 12 | 0.005 |
print-monitor | Genius Bytes print monitor | 12 | 0.005 |
http | unknown HTTP server | 12 | 0.005 |
http | TP-LINK WR541G/542G WAP http config | 12 | 0.005 |
http | TornadoServer | 12 | 0.005 |
telnet | Cisco 1721 router telnetd | 11 | 0.005 |
socks-proxy | Socks4A | 11 | 0.005 |
smtp | 11 | 0.005 | |
netbios-ssn | 11 | 0.005 | |
ice | Internet Communications Engine | 11 | 0.005 |
http | Transmission | 11 | 0.005 |
http | linux | 11 | 0.005 |
http | Gnway Web Server | 11 | 0.005 |
http | Cisco IOS http config | 11 | 0.005 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 11 | 0.005 |
vnc | Apple remote desktop vnc | 10 | 0.004 |
vnc | 10 | 0.004 | |
rsync | 10 | 0.004 | |
irc-proxy | ShroudBNC irc-proxy | 10 | 0.004 |
http | HttpFileServer httpd | 10 | 0.004 |
http | D-Link DIR-600 WAP http config | 10 | 0.004 |
http | dcs-lig-httpd | 10 | 0.004 |
ftp | Gene6 ftpd | 10 | 0.004 |