~1.71 Million IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
bandwidth-test | MikroTik bandwidth-test server | 1173165 | 68.684 |
winbox | MikroTik WinBox management console | 161598 | 9.461 |
no match | -/- | 105421 | 6.172 |
telnet | 97903 | 5.732 | |
sieve | Cyrus timsieved | 22142 | 1.296 |
rifa-dvr | Rifatron DVR | 16461 | 0.964 |
http | 15956 | 0.934 | |
sieve | Dovecot timsieved | 14658 | 0.858 |
ssl | SSLv3 | 14642 | 0.857 |
jetdirect | JetDirect | 9687 | 0.567 |
ssl | TLSv1 | 8968 | 0.525 |
http | RemotelyAnywhere remote PC management httpd | 8148 | 0.477 |
irc | Dancer ircd | 4095 | 0.24 |
http | SonicWALL | 3698 | 0.217 |
http | Apache | 3390 | 0.198 |
http | Boa HTTPd | 3183 | 0.186 |
chat | AIM or ICQ server | 2593 | 0.152 |
http | Microsoft IIS httpd | 2385 | 0.14 |
ssh | OpenSSH | 1984 | 0.116 |
sieve | Dovecot Pigeonhole sieve | 1907 | 0.112 |
http | thttpd | 1586 | 0.093 |
http | GeoVision GeoHttpServer for webcams | 1432 | 0.084 |
http | lighttpd | 1384 | 0.081 |
ftp | 1277 | 0.075 | |
http | Microsoft HTTPAPI httpd | 1252 | 0.073 |
http | Avtech AVN801 network camera | 1230 | 0.072 |
http | GoAhead-Webs httpd | 990 | 0.058 |
http | Cross Web Server | 984 | 0.058 |
sieve | pysieved | 974 | 0.057 |
http | Hikvision-Webs | 966 | 0.057 |
http | mini_httpd | 790 | 0.046 |
ftp | Pure-FTPd | 728 | 0.043 |
http | uc-httpd | 726 | 0.043 |
http | Netwave IP camera http config | 717 | 0.042 |
http | World Client WDaemon httpd | 671 | 0.039 |
http | Innovative Interfaces Innopac httpd | 590 | 0.035 |
irc-proxy | ShroudBNC irc-proxy | 544 | 0.032 |
http | WangWnagSimpleServer | 542 | 0.032 |
http | D-Link DIR-300 WAP http admin | 540 | 0.032 |
http | WYM httpd | 485 | 0.028 |
telnet | NASLite-SMB/Sveasoft Alchemy firmware telnetd | 474 | 0.028 |
vnc | VNC | 426 | 0.025 |
nbd | Network Block Device | 405 | 0.024 |
arcserve | ARCserve Discovery | 368 | 0.022 |
http | AIM | 351 | 0.021 |
http | PDR-M800 | 347 | 0.02 |
http | httpd 1.1 | 334 | 0.02 |
http | MiniServ | 322 | 0.019 |
http | Apache Tomcat/Coyote JSP engine | 317 | 0.019 |
pop3-proxy | FreePOPs pop3 proxy | 309 | 0.018 |
ftp | Microsoft ftpd | 300 | 0.018 |
http | Boa httpd | 296 | 0.017 |
ssh | Cisco SSH | 287 | 0.017 |
http-proxy | Squid http proxy | 274 | 0.016 |
http | Gadspot/Avtech AV787 webcam http config | 274 | 0.016 |
http | DVR Systems webcam http interface | 263 | 0.015 |
socks5 | 226 | 0.013 | |
http | GM Streaming Server httpd | 219 | 0.013 |
sieve | Cyrus timsieved Murder | 215 | 0.013 |
http | ExpertAssist | 209 | 0.012 |
sieve | DBMail timsieved | 206 | 0.012 |
telnet | ser2net telnetd | 187 | 0.011 |
http | Mbedthis-Appweb | 185 | 0.011 |
netbios-ssn | 182 | 0.011 | |
http | XMLRPC | 178 | 0.01 |
http | WebCit | 171 | 0.01 |
ftp | FileZilla ftpd | 167 | 0.01 |
rtsp | 166 | 0.01 | |
http | POSIX | 165 | 0.01 |
http | Techno Vision Security System http config | 162 | 0.009 |
http | VNC Server Enterprise Edition | 160 | 0.009 |
http | ScriptLogic DesktopAuthority httpd | 155 | 0.009 |
http | Jetty | 152 | 0.009 |
http | nginx | 145 | 0.008 |
insight-manager | Consul InSight Manager | 142 | 0.008 |
http | Allegro RomPager | 140 | 0.008 |
telnet | Adtran TA 600R router telnetd | 135 | 0.008 |
ftp | Serv-U ftpd | 133 | 0.008 |
http | uClinux-httpd | 127 | 0.007 |
http | RemoteSupportManager | 123 | 0.007 |
vnc | RealVNC Personal | 122 | 0.007 |
ssh | 122 | 0.007 | |
http | CherryPy httpd | 120 | 0.007 |
ftp | ProFTPD | 118 | 0.007 |
directconnect | Direct Connect P2P | 109 | 0.006 |
http | Virata-EmWeb | 108 | 0.006 |
ssh | Dropbear sshd | 107 | 0.006 |
shoutcast | SHOUTcast server | 106 | 0.006 |
vnc | 105 | 0.006 | |
telnet | Linux telnetd | 97 | 0.006 |
openvpn | OpenVPN | 97 | 0.006 |
http | Router | 96 | 0.006 |
http | MultView WEB Server V1.1 | 96 | 0.006 |
xml | 93 | 0.005 | |
http | Network Digital Recorder | 90 | 0.005 |
http | http server 1.0 | 90 | 0.005 |
http | UPnP | 88 | 0.005 |
spotify-login | Spotify login server | 87 | 0.005 |
irc-proxy | psyBNC | 86 | 0.005 |
vnc-http | VNC Server Enterprise Edition httpd | 79 | 0.005 |
mysql | MySQL | 76 | 0.004 |
http | Httpd | 76 | 0.004 |
http | MS-SDK-HttpServer | 75 | 0.004 |
tandem-print | Sharp printer tandem printing | 74 | 0.004 |
ftp | vsftpd | 73 | 0.004 |
rtsp | Avtech MPEG4 DVR control rtspd | 72 | 0.004 |
vnc | RealVNC Enterprise | 70 | 0.004 |
http | TP-LINK Router | 69 | 0.004 |
http | WindWeb | 63 | 0.004 |
pop3 | qpopper | 62 | 0.004 |
http | ReefAngel | 62 | 0.004 |
http | GoAhead-Webs embedded httpd | 62 | 0.004 |
http | httpd | 61 | 0.004 |
http | Network Camera | 57 | 0.003 |
http | VopSrv | 55 | 0.003 |
telnet | Pocket CMD telnetd | 54 | 0.003 |
svnserve | Subversion | 54 | 0.003 |
http | dcs-lig-httpd | 52 | 0.003 |
http | uTorrent WebUI | 51 | 0.003 |
http | HTTPServer | 50 | 0.003 |
solfe | HP PNM Solid FlowEngine | 49 | 0.003 |
http | PunkBuster http config | 48 | 0.003 |
http | Linksys router http config | 48 | 0.003 |
http | ScriptLogic ExpertAssist remote management httpd | 47 | 0.003 |
http | Xitami httpd | 46 | 0.003 |
http | H3C-Miniware-Webs | 45 | 0.003 |
smtp | 42 | 0.002 | |
http | wg_httpd | 42 | 0.002 |
http | Indy | 42 | 0.002 |
http | Z-World Rabbit | 41 | 0.002 |
http | Intoto httpd | 41 | 0.002 |
ftp | FreeBSD ftpd | 41 | 0.002 |
http | Cisco IOS http config | 40 | 0.002 |
http | TwistedWeb httpd | 39 | 0.002 |
http | OwnServer1.0 | 39 | 0.002 |
dominoconsole | Lotus Domino Console | 39 | 0.002 |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | 37 | 0.002 |
smtp | Microsoft ESMTP | 35 | 0.002 |
http | WEBrick httpd | 35 | 0.002 |
http | W3MFC | 35 | 0.002 |
http | Vivotek IP7131 Network Camera http config | 34 | 0.002 |
http | Microsoft ISA httpd | 34 | 0.002 |
telnet | SMC SMC2870W Wireless Ethernet Bridge | 33 | 0.002 |
telnet | Allied Telesis x900-series switch telnetd | 33 | 0.002 |
nntp | INN nntpd | 33 | 0.002 |
mongodb | MongoDB | 33 | 0.002 |
http | Netgear DG834 router http config | 33 | 0.002 |
ftp | Gene6 ftpd | 33 | 0.002 |
aperio-aaf | Aperio Algorithm Framework | 33 | 0.002 |
http | WebServer | 32 | 0.002 |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 32 | 0.002 |
http | HTTP Software 1.1 | 31 | 0.002 |
http | GoAhead | 31 | 0.002 |
ssh | Bitvise WinSSHD | 30 | 0.002 |
http | Router Webserver | 30 | 0.002 |
tcpwrapped | BSD TCP Wrappers | 29 | 0.002 |
http | webserver | 29 | 0.002 |
http | Draytek Vigor ADSL router webadmin | 29 | 0.002 |
http | D-Link/Airlink IP webcam http config | 27 | 0.002 |
smtp | Microsoft Exchange smtpd | 26 | 0.002 |
smtp | Exim smtpd | 26 | 0.002 |
remoting | MS .NET Remoting services | 26 | 0.002 |
http | Waveplus HTTPD | 26 | 0.002 |
ssl | TLS | 25 | 0.001 |
http | go1984 httpd | 25 | 0.001 |
telnet | AMOS ********** | 24 | 0.001 |
telnet | Adtran TA 608 router telnetd | 24 | 0.001 |
secure-socket | CA Secure Socket Adapter | 24 | 0.001 |
http | uhttpd | 24 | 0.001 |
http | eCensus Compliance Service. v2.14 (05.07.2010) | 24 | 0.001 |
giop | CORBA naming service | 24 | 0.001 |
telnet | Microsoft Windows XP telnetd | 23 | 0.001 |
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 23 | 0.001 |
http | Wireless Network Camera | 22 | 0.001 |
time | 21 | 0.001 | |
smtp | Postfix smtpd | 21 | 0.001 |
http | DD-WRT milli_httpd | 21 | 0.001 |
telnet | Adtran TA 616 router telnetd | 20 | 0.001 |
smtp | Symantec Enterprise Security manager smtpd | 20 | 0.001 |
smtp | Sendmail | 20 | 0.001 |
http | uTorrent utserver web interface | 20 | 0.001 |
http | Ubicom | 20 | 0.001 |
http | GS-Webs | 20 | 0.001 |
http | Bchat | 20 | 0.001 |
telnet | Cisco 1721 router telnetd | 19 | 0.001 |
ovm-manager | Oracle VM Manager | 19 | 0.001 |
http | libwww-perl-daemon httpd | 19 | 0.001 |
http | HttpFileServer httpd | 19 | 0.001 |
http | D-Link DCS-910 webcam http config | 19 | 0.001 |
rsync | 18 | 0.001 | |
http | WebFS httpd | 18 | 0.001 |
http | micro_httpd | 18 | 0.001 |
http | GoAhead-Webs | 18 | 0.001 |
ssl | Microsoft IIS SSL | 17 | 0.001 |
sdlog | RSA SecureID Ace Server | 17 | 0.001 |
http | Vivotek 3102 Camera http config | 17 | 0.001 |
http | QNAP TS-219P NAS http config | 17 | 0.001 |
http | Network Camera with Pan | 17 | 0.001 |
http | Lanswitch - V100R003 HttpServer 1.1 | 17 | 0.001 |
http | Genetic Lifeform and Distributed Open Server 1.0.9 | 17 | 0.001 |
http | dvr1614n web-cam httpd | 17 | 0.001 |
http | D-Link Internet Camera | 17 | 0.001 |
http | ASP.NET Development Server/ | 17 | 0.001 |
upnp | Portable SDK for UPnP devices | 16 | 0.001 |
upnp | Portable SDK for UPnP | 16 | 0.001 |
http | Wireless Network Camera with Pan | 16 | 0.001 |
http | ImagiaTek | 16 | 0.001 |
http | HTTPsrv | 16 | 0.001 |
http | D-Link DCS-920 webcam http config | 16 | 0.001 |
http | Ubicom httpd | 15 | 0.001 |
http | Telenor MobileStatus Server / Telenor Release 2.6.2 | 15 | 0.001 |
http | BlueIris-HTTP | 15 | 0.001 |
ftp | NET Disk/NetStore ftpd | 15 | 0.001 |
vnc | Apple remote desktop vnc | 14 | 0.001 |
telnet | Draytek Vigor ADSL router telnetd | 14 | 0.001 |
ssh | WeOnlyDo sshd | 14 | 0.001 |
http | WEB SERVER | 14 | 0.001 |
http | RealVNC | 14 | 0.001 |
http | Caucho Resin JSP engine | 14 | 0.001 |
http | ADH-Web httpd | 14 | 0.001 |
ftp | Synology DiskStation NAS ftpd | 14 | 0.001 |
ftp | bftpd | 14 | 0.001 |
nagios-nsca | Nagios NSCA | 13 | 0.001 |
http | WindRiver-WebServer | 13 | 0.001 |
http | Transmission BitTorrent management httpd | 13 | 0.001 |
http | Thin | 13 | 0.001 |
http | NEC Electra Elite IPK II WebPro | 13 | 0.001 |
http | Mobotix Camera http config | 13 | 0.001 |
http | HTTPD 1.0 | 13 | 0.001 |
http | avtech | 13 | 0.001 |
ftp | Sonic FTP Server | 13 | 0.001 |
telnet | MPLAN800A | 12 | 0.001 |
http | ise GmbH HTTP-Server v2.0 | 12 | 0.001 |
http | Gnway Web Server | 12 | 0.001 |
ftp | Dreambox ftpd | 12 | 0.001 |
vnc-http | Ultr@VNC | 11 | 0.001 |
tinc | tinc vpn daemon | 11 | 0.001 |
telnet | BSD-derived telnetd | 11 | 0.001 |
http | XWeb 1.0 | 11 | 0.001 |
http | Vivotek Network Camera http config | 11 | 0.001 |
http | Rex media encoder http config | 11 | 0.001 |
http-proxy | F5 BIG-IP load balancer http proxy | 11 | 0.001 |
http | Panasonic webcam http config | 11 | 0.001 |
http | Ipswitch IMail web service | 11 | 0.001 |
http | httpd-plustek | 11 | 0.001 |
http | CCcam card sharing system http config | 11 | 0.001 |
http | AIM HTTP | 11 | 0.001 |
http | WebServer(IPCamera_Logo) | 10 | 0.001 |
http | Webs | 10 | 0.001 |
http | WebLogic httpd | 10 | 0.001 |
http | Sagem F@st router httpd | 10 | 0.001 |
http-proxy | Ncat http proxy | 10 | 0.001 |
http-proxy | CCProxy http proxy | 10 | 0.001 |
http | Panasonic DVR slinger http config | 10 | 0.001 |
http | IP_SHARER WEB | 10 | 0.001 |
http | Indy httpd | 10 | 0.001 |
http | HTTP Server 1.0 | 10 | 0.001 |
http | DreamConnection WebServer V0.2 | 10 | 0.001 |
http | D-Link printer/webcam http config | 10 | 0.001 |
http | D-Link DCS-2120 webcam http config | 10 | 0.001 |
flexlm | FlexLM license manager | 10 | 0.001 |