~28 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Count |
Percent |
|---|---|---|---|
| netbackup | Veritas Netbackup java listener | 11314 | 40.129 |
| http | 4184 | 14.84 | |
| irc | Dancer ircd | 3487 | 12.368 |
| http | SonicWALL | 3340 | 11.846 |
| chat | AIM or ICQ server | 1510 | 5.356 |
| no match | -/- | 1010 | 3.582 |
| http | AIM | 618 | 2.192 |
| http | lighttpd | 612 | 2.171 |
| http | Apache | 300 | 1.064 |
| http | Microsoft IIS httpd | 218 | 0.773 |
| http | DrcomServer1.0 | 111 | 0.394 |
| http-proxy | Squid http proxy | 86 | 0.305 |
| bprd | Veritas Netbackup | 83 | 0.294 |
| ssh | 80 | 0.284 | |
| http | GoAhead-Webs | 72 | 0.255 |
| ssh | OpenSSH | 71 | 0.252 |
| http | Apache Tomcat/Coyote JSP engine | 68 | 0.241 |
| http | Netwave IP camera http config | 60 | 0.213 |
| http | Avtech AVN801 network camera | 47 | 0.167 |
| telnet | 42 | 0.149 | |
| http | thttpd | 38 | 0.135 |
| http | FLPS | 37 | 0.131 |
| http | Boa HTTPd | 36 | 0.128 |
| http | uTorrent WebUI | 35 | 0.124 |
| http | PDR-M800 | 33 | 0.117 |
| vnc | VNC | 32 | 0.113 |
| http | mini_httpd | 27 | 0.096 |
| http | nginx | 21 | 0.074 |
| http | Hikvision-Webs | 18 | 0.064 |
| http-proxy | ziproxy http proxy | 16 | 0.057 |
| ftp | Microsoft ftpd | 16 | 0.057 |
| smtp | Microsoft ESMTP | 15 | 0.053 |
| http | Mbedthis-Appweb | 15 | 0.053 |
| http | GoAhead-Webs embedded httpd | 15 | 0.053 |
| mysql | MySQL | 14 | 0.05 |
| http | uc-httpd | 14 | 0.05 |
| http-proxy | F5 BIG-IP load balancer http proxy | 14 | 0.05 |
| upnp | Portable SDK for UPnP devices | 12 | 0.043 |
| http | AIM HTTP | 12 | 0.043 |
| http | Cross Web Server | 11 | 0.039 |