~385 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
telnet | Cisco IOS telnetd | 114931 | 29.812 |
telnet | 76928 | 19.954 | |
telnet | Cisco 1721 router telnetd | 57323 | 14.869 |
no match | -/- | 54231 | 14.067 |
http | 14836 | 3.848 | |
telnet | Cisco router telnetd | 13512 | 3.505 |
http | lighttpd | 8114 | 2.105 |
http | lf | 4590 | 1.191 |
http | Apache | 4258 | 1.104 |
irc | Dancer ircd | 4094 | 1.062 |
http | SonicWALL | 3943 | 1.023 |
chat | AIM or ICQ server | 2612 | 0.678 |
http | RemotelyAnywhere remote PC management httpd | 2403 | 0.623 |
http | Boa HTTPd | 2024 | 0.525 |
ssl | SSLv3 | 1684 | 0.437 |
http | Microsoft IIS httpd | 1146 | 0.297 |
http | thttpd | 809 | 0.21 |
telnet | Pocket CMD telnetd | 728 | 0.189 |
http | ConfSrv | 713 | 0.185 |
ssh | OpenSSH | 695 | 0.18 |
http | AIM | 690 | 0.179 |
http | Netwave IP camera http config | 552 | 0.143 |
irc-proxy | ShroudBNC irc-proxy | 487 | 0.126 |
ftp | Ipswitch notification ftpd | 431 | 0.112 |
http | Gateway-Webs | 411 | 0.107 |
http | GoAhead-Webs httpd | 392 | 0.102 |
http | Avtech AVN801 network camera | 360 | 0.093 |
ftp | vsftpd | 327 | 0.085 |
http | WangWnagSimpleServer | 312 | 0.081 |
http | CordaServer | 310 | 0.08 |
telnet | Linux telnetd | 295 | 0.077 |
http | GoAhead-Webs embedded httpd | 286 | 0.074 |
telnet | SMC SMC2870W Wireless Ethernet Bridge | 284 | 0.074 |
ssl | TLSv1 | 238 | 0.062 |
vdr | VDR | 232 | 0.06 |
ftp | Microsoft ftpd | 229 | 0.059 |
vnc | RealVNC Personal | 220 | 0.057 |
vnc | 220 | 0.057 | |
http | Microsoft HTTPAPI httpd | 213 | 0.055 |
http | Apache Tomcat/Coyote JSP engine | 206 | 0.053 |
http | mini_httpd | 197 | 0.051 |
rtsp | 194 | 0.05 | |
ssh | Cisco SSH | 169 | 0.044 |
http | uc-httpd | 162 | 0.042 |
ftp | ProFTPD | 152 | 0.039 |
http | GeoVision GeoHttpServer for webcams | 150 | 0.039 |
http | webserver | 149 | 0.039 |
vnc | VNC | 148 | 0.038 |
http | Cross Web Server | 146 | 0.038 |
telnet | corporate network! | 141 | 0.037 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 139 | 0.036 |
ftp | Serv-U ftpd | 138 | 0.036 |
ssh | Dropbear sshd | 132 | 0.034 |
remoting | MS .NET Remoting services | 132 | 0.034 |
http | Hikvision-Webs | 132 | 0.034 |
irc-proxy | psyBNC | 131 | 0.034 |
telnet | ser2net telnetd | 126 | 0.033 |
http-proxy | Squid http proxy | 125 | 0.032 |
telnet | PE-4 Router | 119 | 0.031 |
http | DrcomServer1.0 | 119 | 0.031 |
ssh | 111 | 0.029 | |
smtp | Postfix smtpd | 107 | 0.028 |
http | GM Streaming Server httpd | 106 | 0.027 |
http | dcs-lig-httpd | 96 | 0.025 |
http | D-Link DIR-300 WAP http admin | 95 | 0.025 |
http | PDR-M800 | 90 | 0.023 |
ftp | 89 | 0.023 | |
http | nginx | 85 | 0.022 |
telnet | Frontier Internet * | 82 | 0.021 |
ftp | FileZilla ftpd | 82 | 0.021 |
ftp | MikroTik router ftpd | 80 | 0.021 |
telnet | cisco router pgp-gw3.ccl.ru | 79 | 0.02 |
rifa-dvr | Rifatron DVR | 78 | 0.02 |
http | httpd | 77 | 0.02 |
telnet | GW1-PWQ1.2day.kz | 76 | 0.02 |
telnet | This Router | 72 | 0.019 |
http | World Client WDaemon httpd | 71 | 0.018 |
http | Mobotix Camera http config | 68 | 0.018 |
http | Jetty | 64 | 0.017 |
nbd | Network Block Device | 63 | 0.016 |
telnet | Cisco 2514 router telnetd | 59 | 0.015 |
ftp | Pure-FTPd | 58 | 0.015 |
http | Mbedthis-Appweb | 57 | 0.015 |
http | Gadspot/Avtech AV787 webcam http config | 56 | 0.015 |
http | GoAhead-Webs | 53 | 0.014 |
http | uTorrent WebUI | 52 | 0.013 |
telnet | cisco router tusm-gw3.ccl.ru | 50 | 0.013 |
http | Xitami httpd admin port | 50 | 0.013 |
http | MiniServ | 49 | 0.013 |
arcserve | ARCserve Discovery | 49 | 0.013 |
http | DVR Systems webcam http interface | 47 | 0.012 |
http | Httpd | 45 | 0.012 |
http | Bchat | 42 | 0.011 |
vnc | RealVNC Enterprise | 41 | 0.011 |
http | Network Camera | 40 | 0.01 |
http | Vivotek 3102 Camera http config | 39 | 0.01 |
http | Monkey httpd | 39 | 0.01 |
http | Gateway Controller 3560 | 39 | 0.01 |
upnp | Portable SDK for UPnP devices | 38 | 0.01 |
socks5 | 38 | 0.01 | |
http | Virata-EmWeb | 38 | 0.01 |
mysql | MySQL | 37 | 0.01 |
http | Vivotek IP7131 Network Camera http config | 37 | 0.01 |
http | DD-WRT milli_httpd | 37 | 0.01 |
ssl | TLS | 36 | 0.009 |
http | IBM httpd | 36 | 0.009 |
telnet | the Sirius Star System ! | 34 | 0.009 |
http | Wireless Network Camera | 34 | 0.009 |
telnet | VPN-5 Router | 32 | 0.008 |
http | Draytek Vigor ADSL router webadmin | 31 | 0.008 |
http | WYM httpd | 30 | 0.008 |
http | MultView WEB Server V1.1 | 30 | 0.008 |
http | Gateway Controller 3550 | 29 | 0.008 |
svnserve | Subversion | 28 | 0.007 |
telnet | Openwall GNU/*/Linux telnetd | 27 | 0.007 |
http | Foundry EdgeIron switch http config | 26 | 0.007 |
dominoconsole | Lotus Domino Console | 26 | 0.007 |
http | CCcam card sharing system http config | 25 | 0.006 |
http | build-in http server | 25 | 0.006 |
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 25 | 0.006 |
shoutcast-publishing | SHOUTcast publishing port | 24 | 0.006 |
http | D-Link/Airlink IP webcam http config | 24 | 0.006 |
shoutcast | SHOUTcast server | 22 | 0.006 |
mongodb | MongoDB | 22 | 0.006 |
http | Zope httpd | 22 | 0.006 |
smtp | OpenBSD spamd | 21 | 0.005 |
smtp | Exim smtpd | 21 | 0.005 |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 21 | 0.005 |
giop | CORBA naming service | 21 | 0.005 |
directconnect | Direct Connect P2P | 21 | 0.005 |
rtsp | Avtech MPEG4 DVR control rtspd | 20 | 0.005 |
openvpn | OpenVPN | 20 | 0.005 |
http | Rex media encoder http config | 20 | 0.005 |
http | Allegro RomPager | 20 | 0.005 |
telnet | PE-5 Router | 19 | 0.005 |
xml | 18 | 0.005 | |
vnc-http | Ultr@VNC | 18 | 0.005 |
telnet | the BCC terminal server | 18 | 0.005 |
nntp | INN nntpd | 18 | 0.005 |
telnet | Mulberry Co-op Telco *** | 17 | 0.004 |
ovm-manager | Oracle VM Manager | 17 | 0.004 |
meetingmaker | Meeting Maker calendaring | 17 | 0.004 |
http | QNAP TS-219P NAS http config | 17 | 0.004 |
http | MikroTik router http config | 17 | 0.004 |
http | CherryPy httpd | 17 | 0.004 |
telnet | the EmNet Ltd | 16 | 0.004 |
telnet | cisco router pgp-gw6.ccl.ru | 16 | 0.004 |
netbios-ssn | 16 | 0.004 | |
http | Vivotek Network Camera | 16 | 0.004 |
http | uClinux-httpd | 16 | 0.004 |
http | Thin | 16 | 0.004 |
http | PopChart Pro | 16 | 0.004 |
http | D-Link DCS-900 webcam http config | 16 | 0.004 |
http | CordaServer (PopChartServer compatible) 5.1.2h | 16 | 0.004 |
telnet | cisco router sovetskaia47b-gw1.ccl.ru | 15 | 0.004 |
telnet | BSD-derived telnetd | 15 | 0.004 |
smtp | Microsoft Exchange smtpd | 15 | 0.004 |
http | WebServer | 15 | 0.004 |
http-proxy | Haproxy http proxy | 15 | 0.004 |
http | avtech httpd | 15 | 0.004 |
printer | Panasonic mfpscdl.exe service | 14 | 0.004 |
http | TwistedWeb httpd | 14 | 0.004 |
http-proxy | F5 BIG-IP load balancer http proxy | 14 | 0.004 |
http | LevelOne WCS-2030 webcam http config | 14 | 0.004 |
http | JDav server 1.0 | 14 | 0.004 |
http | Intoto httpd | 14 | 0.004 |
http | Indy | 14 | 0.004 |
vnc-http | VNC Server Enterprise Edition httpd | 13 | 0.003 |
telnet | EPIX Your Worldwide Internet Access | 13 | 0.003 |
soap | gSOAP soap | 13 | 0.003 |
smtp | Microsoft ESMTP | 13 | 0.003 |
http | Sun ScApp bytecode transfer httpd | 13 | 0.003 |
http | ise GmbH HTTP-Server v2.0 | 13 | 0.003 |
http | AIM HTTP | 13 | 0.003 |
citrix-ica | Citrix Metaframe XP ICA | 13 | 0.003 |
telnet | the Antares Star System ! | 12 | 0.003 |
telnet | First Link Technology, Inc. | 12 | 0.003 |
smtp | 12 | 0.003 | |
http | MS-SDK-HttpServer | 12 | 0.003 |
http | HiCommandDeviceManagerServer | 12 | 0.003 |
http | D-Link DCS-920 webcam http config | 12 | 0.003 |
http | AXIS 205 network camera web interface | 12 | 0.003 |
vnc-http | RealVNC | 11 | 0.003 |
telnet | Allied Telesis x900-series switch telnetd | 11 | 0.003 |
spy-net | Spy-Net or CyberGate backdoor | 11 | 0.003 |
sieve | Dovecot timsieved | 11 | 0.003 |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | 11 | 0.003 |
http | Techno Vision Security System http config | 11 | 0.003 |
http-proxy | Ncat http proxy | 11 | 0.003 |
http | NEC Electra Elite IPK II WebPro | 11 | 0.003 |
http | HTTP Software 1.1 | 11 | 0.003 |
ftp | Gene6 ftpd | 11 | 0.003 |
time | 10 | 0.003 | |
telnet | Mid-Rivers Internet. Unauthorized use prohibited and will be prosecuted! | 10 | 0.003 |
telnet | cisco router mira102-gw2.ccl.ru | 10 | 0.003 |
secure-socket | CA Secure Socket Adapter | 10 | 0.003 |
http | WebLogic httpd | 10 | 0.003 |
http | WebFS httpd | 10 | 0.003 |
http | TP-LINK WR841N WAP http config | 10 | 0.003 |
http | Oracle-iPlanet-Web-Server | 10 | 0.003 |
http | HTTPServer | 10 | 0.003 |
http | HTTPD 1.0 | 10 | 0.003 |
http | GS-Webs | 10 | 0.003 |
http | Gateway Controller 3500 | 10 | 0.003 |
http | FlashCom | 10 | 0.003 |
http | Embedded HTTP Server | 10 | 0.003 |
http | D-Link DI-524 http config | 10 | 0.003 |
http | D-Link DCS-5220 webcam http config | 10 | 0.003 |
http | Caucho Resin JSP engine | 10 | 0.003 |
http | Boa | 10 | 0.003 |
ftp | Synology DiskStation NAS ftpd | 10 | 0.003 |