~235 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Count | Percent |
---|---|---|---|---|
soap | gSOAP soap | 2.6 | 165736 | 70.317 |
no match | -/- | -/- | 12721 | 5.397 |
http | Trend Micro OfficeScan Antivirus http config | 9453 | 4.011 | |
http | 8196 | 3.477 | ||
irc | Dancer ircd | 4075 | 1.729 | |
eggdrop | Eggdrop IRC bot console | 1.6.20 | 3682 | 1.562 |
http | SonicWALL | 3481 | 1.477 | |
chat | AIM or ICQ server | 2148 | 0.911 | |
ssh | Dropbear sshd | 0.52 | 1816 | 0.77 |
telnet | VBrick 4300 video encoder telnetd | 1806 | 0.766 | |
http-proxy | Squid http proxy | 2.6.STABLE21 | 1599 | 0.678 |
http | lighttpd | 1.4.28 | 1500 | 0.636 |
http | mini_httpd | 1.19 19dec2003 | 1211 | 0.514 |
eggdrop | Eggdrop IRC bot console | 1.6.21 | 1204 | 0.511 |
http | uTorrent utserver web interface | 845 | 0.359 | |
irc-proxy | psyBNC | 2.3.2-7 | 813 | 0.345 |
http | Microsoft IIS httpd | 725 | 0.308 | |
http | AIM | 1.0 | 643 | 0.273 |
http | Microsoft HTTPAPI httpd | 2.0 | 610 | 0.259 |
socks5 | 447 | 0.19 | ||
http | Apache | 2.2.14 | 433 | 0.184 |
http | lighttpd | 1.4.19 | 424 | 0.18 |
http | Apache | 321 | 0.136 | |
http | uTorrent WebUI | 237 | 0.101 | |
remoting | MS .NET Remoting services | 234 | 0.099 | |
http | nginx | 230 | 0.098 | |
http | Netwave webcam http config | 226 | 0.096 | |
vnc | VNC | 198 | 0.084 | |
http | GoAhead-Webs httpd | 196 | 0.083 | |
vnc | Ultr@VNC Repeater | 192 | 0.081 | |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze1 | 189 | 0.08 |
ssh | MikroTik RouterOS sshd | 176 | 0.075 | |
http | Apache Tomcat/Coyote JSP engine | 1.1 | 176 | 0.075 |
http | MiniServ | 0.01 | 173 | 0.073 |
http | lighttpd | 1.4.29 | 172 | 0.073 |
http | Httpd | 1.0 | 167 | 0.071 |
http | MiniServ | 1.590 | 146 | 0.062 |
xml | 142 | 0.06 | ||
http | MiniServ | 1.580 | 138 | 0.059 |
http | HTTPD 1.0 | 138 | 0.059 | |
http | Draytek Vigor ADSL router webadmin | 138 | 0.059 | |
beep | 127 | 0.054 | ||
ssh | OpenSSH | 4.3 | 122 | 0.052 |
http | mitmproxy | 117 | 0.05 | |
memcache | memcached | 109 | 0.046 | |
http | Apache | 2.2.3 | 109 | 0.046 |
ssh | 108 | 0.046 | ||
http | Linux | 2.x UPnP | 106 | 0.045 |
http | Boa HTTPd | 0.94.13 | 101 | 0.043 |
http | Apache | 2.2.22 | 95 | 0.04 |
ssh | OpenSSH | 5.1p1 Debian 5 | 90 | 0.038 |
ftp | ProFTPD | 1.3.3a | 89 | 0.038 |
telnet | 86 | 0.036 | ||
http | thttpd | 84 | 0.036 | |
ftp | 84 | 0.036 | ||
vnc | RealVNC Enterprise | 81 | 0.034 | |
http | TP-LINK Router | 81 | 0.034 | |
vnc | RealVNC Personal | 80 | 0.034 | |
http | Router | 80 | 0.034 | |
http | Apache | 2.2.16 | 80 | 0.034 |
irc-proxy | psyBNC | 2.3.2-9 | 75 | 0.032 |
upnp | Microsoft Windows UPnP | 74 | 0.031 | |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | 73 | 0.031 |
ftp | Microsoft ftpd | 66 | 0.028 | |
http-proxy | Squid http proxy | 3.1.16 | 64 | 0.027 |
http | ADAM-6000 | 8.1.0019 | 63 | 0.027 |
http | Boa HTTPd | 0.94.14rc21 | 61 | 0.026 |
ssh | OpenSSH | 5.1p1 | 60 | 0.025 |
http-proxy | Haproxy http proxy | 60 | 0.025 | |
http | Hikvision-Webs | 60 | 0.025 | |
ssh | OpenSSH | 2.3.0 mikrotik 2.9 | 59 | 0.025 |
http | Jetty | 8.0.y.z-SNAPSHOT | 59 | 0.025 |
http | ZNC - http | 58 | 0.025 | |
http | thttpd | 2.25b | 57 | 0.024 |
http-proxy | Squid http proxy | 57 | 0.024 | |
http | Apache | 2.2.15 | 54 | 0.023 |
http | Boa httpd | 53 | 0.022 | |
ssh | OpenSSH | 5.3 | 51 | 0.022 |
ssh | OpenSSH | 3.9p1 | 51 | 0.022 |
ssl | TLS | 1.0 | 50 | 0.021 |
ovm-manager | Oracle VM Manager | 50 | 0.021 | |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | 49 | 0.021 |
http | Microsoft HTTPAPI httpd | 1.0 | 49 | 0.021 |
http | Boa | Boa | 47 | 0.02 |
soap | gSOAP soap | 2.7 | 45 | 0.019 |
netbus | NetBus trojan | 1.60 | 45 | 0.019 |
http | Virata-EmWeb | 6.0.1 | 45 | 0.019 |
http | uc-httpd | 1.0.0 | 45 | 0.019 |
ftp | ProFTPD | 1.3.1 | 45 | 0.019 |
netbus | NetBus trojan | 1.70 | 42 | 0.018 |
http | Linksys router http config | 42 | 0.018 | |
eggdrop | Eggdrop irc bot console | 1.6.19+ctcpfix | 42 | 0.018 |
http | Microsoft IIS httpd | 5.1 | 41 | 0.017 |
http | http server 1.0 | 41 | 0.017 | |
ftp | Pure-FTPd | 41 | 0.017 | |
http | Jetty | 6.1.5 | 40 | 0.017 |
http | Allegro RomPager | 4.51 UPnP/1.0 | 40 | 0.017 |
ftp | vsftpd | 2.0.8 or later | 40 | 0.017 |
http-proxy | Squid http proxy | 2.7.STABLE9 | 39 | 0.017 |
http | TwistedWeb httpd | 8.2.0 | 38 | 0.016 |
http | FC | 38 | 0.016 | |
http | Apache | 2.2.9 | 37 | 0.016 |
sftp | ProFTPD mod_sftp | 0.9.7 | 36 | 0.015 |
http | GoAhead-Webs | 36 | 0.015 | |
http | Aterm(HT) | 1.0.0 | 36 | 0.015 |
ftp | FileZilla ftpd | 0.9.41 beta | 36 | 0.015 |
xmpp-transport | Spectrum XMPP file transfer | 35 | 0.015 | |
http | FLPS | 35 | 0.015 | |
ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | 34 | 0.014 |
http | Apache | 1.3.4 | 34 | 0.014 |
http | thttpd | 2.25b 29dec2003 | 33 | 0.014 |
http | Apache | 2.2.17 | 33 | 0.014 |
irc | Unreal ircd | 32 | 0.014 | |
http | Jetty | 7.x.y-SNAPSHOT | 32 | 0.014 |
http | PDR-M800 | 1.0 | 30 | 0.013 |
http | Sagem F@st router httpd | 29 | 0.012 | |
http | Microsoft IIS httpd | 5.0 | 29 | 0.012 |
http | Jetty | 6.1.x | 29 | 0.012 |
ssh | OpenSSH | 5.8 | 28 | 0.012 |
smtp | Postfix smtpd | 28 | 0.012 | |
http | thttpd | 2.19-MX Jul 1 2010 | 28 | 0.012 |
http | Thin | 1.3.1 | 28 | 0.012 |
http | HTTP Software 1.1 | 28 | 0.012 | |
directconnect | Direct Connect P2P | 28 | 0.012 | |
http | Ubicom | 1.1 | 27 | 0.011 |
http | MS .NET Remoting httpd | 27 | 0.011 | |
http | mini_httpd | mini_httpd | 27 | 0.011 |
http | H3C-Miniware-Webs | 27 | 0.011 | |
http | D-Link DIR-300 WAP http admin | 27 | 0.011 | |
http | Apache | 2.2.21 | 27 | 0.011 |
telnet | Linux telnetd | 25 | 0.011 | |
http | TP-LINK WR340G WAP http config | 25 | 0.011 | |
http | siyou server | 25 | 0.011 | |
http | MiniServ | 1.550 | 25 | 0.011 |
http | Apache | 2.2.8 | 25 | 0.011 |
secure-socket | CA Secure Socket Adapter | 24 | 0.01 | |
http | Eudemon Server 1.0 | 24 | 0.01 | |
ftp | Serv-U ftpd | 6.4 | 24 | 0.01 |
http | thttpd | 2.23beta1 | 23 | 0.01 |
http | PunkBuster http config | 23 | 0.01 | |
http | JDav server 1.0 | 23 | 0.01 | |
http | HTTP Server 1.0 | 23 | 0.01 | |
upnp | Conexant-EmWeb | 6.1.0 | 22 | 0.009 |
http | Jetty | 8.y.z-SNAPSHOT | 22 | 0.009 |
http | Cross Web Server | 22 | 0.009 | |
openvpn | OpenVPN | 21 | 0.009 | |
http-proxy | Squid http proxy | 2.6.STABLE12 | 21 | 0.009 |
http | MiniServ | 1.570 | 21 | 0.009 |
http | Allegro RomPager | 4.07 UPnP/1.0 | 21 | 0.009 |
ftp | FileZilla ftpd | 21 | 0.009 | |
http | thin 1.2.11 codename Bat-Shit Crazy | 20 | 0.008 | |
http-proxy | ziproxy http proxy | 3.2.0 | 20 | 0.008 |
http | CherryPy httpd | 3.2.0 | 20 | 0.008 |
ssh | OpenSSH | 5.2 | 19 | 0.008 |
napster | WinMX or Lopster Napster P2P client | 19 | 0.008 | |
http-proxy | MikroTik http proxy | 19 | 0.008 | |
http-proxy | CCProxy http proxy | 19 | 0.008 | |
http | GoAhead-Webs embedded httpd | 19 | 0.008 | |
ssh | OpenSSH | 5.6 | 18 | 0.008 |
smtp | Microsoft Exchange smtpd | 18 | 0.008 | |
irc | ircu ircd | 18 | 0.008 | |
http | nginx | 0.8.54 | 18 | 0.008 |
http | httpd | 18 | 0.008 | |
http | Boa | 0.94.14rc21 | 18 | 0.008 |
http | Apache | 2.2.19 | 18 | 0.008 |
achat | AChat chat system | 18 | 0.008 | |
ssh | OpenSSH | 5.8p1 Debian 7ubuntu1 | 17 | 0.007 |
ssh | OpenSSH | 5.8p1 Debian 1ubuntu3 | 17 | 0.007 |
http | Router Web Config System | 17 | 0.007 | |
http | Ecam | 1.92 | 17 | 0.007 |
http | Buffalo AirStation http config | 17 | 0.007 | |
ftp | FileZilla ftpd | 0.9.40 beta | 17 | 0.007 |
arcserve | ARCserve Discovery | 17 | 0.007 | |
svnserve | Subversion | 16 | 0.007 | |
ssh | Dropbear sshd | 0.51 | 16 | 0.007 |
psql | Pervasive.SQL Server - Relational Engine | 16 | 0.007 | |
http | Router Webserver | 16 | 0.007 | |
http | Intoto httpd | 1.0 | 16 | 0.007 |
http | Apache | 0.6.5 | 16 | 0.007 |
ssh | OpenSSH | 5.5p1 Debian 6 | 15 | 0.006 |
ssh | OpenSSH | 5.1 | 15 | 0.006 |
http | TP-LINK WR740N WAP http config | 15 | 0.006 | |
http | Mbedthis-AppWeb | 2.0.4 | 15 | 0.006 |