~385 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Count | Percent |
---|---|---|---|---|
telnet | Cisco IOS telnetd | 114931 | 29.812 | |
telnet | 76928 | 19.954 | ||
telnet | Cisco 1721 router telnetd | 57323 | 14.869 | |
no match | -/- | -/- | 54231 | 14.067 |
http | 14836 | 3.848 | ||
telnet | Cisco router telnetd | 13512 | 3.505 | |
http | lf | 0.7 | 4277 | 1.109 |
irc | Dancer ircd | 4094 | 1.062 | |
http | SonicWALL | 3943 | 1.023 | |
http | lighttpd | 1.4.20 | 2688 | 0.697 |
chat | AIM or ICQ server | 2612 | 0.678 | |
http | lighttpd | 1.4.28 | 2199 | 0.57 |
http | lighttpd | 1.4.26 | 2106 | 0.546 |
http | Apache | 2021 | 0.524 | |
http | Boa HTTPd | 0.94.14rc21 | 1719 | 0.446 |
ssl | SSLv3 | 1684 | 0.437 | |
http | RemotelyAnywhere remote PC management httpd | 8.0.668 | 1037 | 0.269 |
telnet | Pocket CMD telnetd | 728 | 0.189 | |
http | ConfSrv | 713 | 0.185 | |
http | AIM | 1.0 | 690 | 0.179 |
http | Apache | 2.0.55 | 607 | 0.157 |
http | lighttpd | 1.4.19 | 597 | 0.155 |
http | Netwave IP camera http config | 552 | 0.143 | |
http | Microsoft IIS httpd | 6.0 | 522 | 0.135 |
http | Apache | 2.2.3 | 517 | 0.134 |
irc-proxy | ShroudBNC irc-proxy | 1.1 revision 371 | 486 | 0.126 |
http | lighttpd | 1.4.29 | 451 | 0.117 |
ftp | Ipswitch notification ftpd | 431 | 0.112 | |
http | Gateway-Webs | 411 | 0.107 | |
http | RemotelyAnywhere remote PC management httpd | 10.0.1086 | 399 | 0.103 |
http | GoAhead-Webs httpd | 392 | 0.102 | |
http | Avtech AVN801 network camera | 1.0 | 360 | 0.093 |
http | Apache | 2.2.19 | 341 | 0.088 |
ftp | vsftpd | 2.0.8 or later | 318 | 0.082 |
http | WangWnagSimpleServer | 1.0 | 312 | 0.081 |
telnet | Linux telnetd | 295 | 0.077 | |
http | GoAhead-Webs embedded httpd | 286 | 0.074 | |
telnet | SMC SMC2870W Wireless Ethernet Bridge | 284 | 0.074 | |
http | Microsoft IIS httpd | 254 | 0.066 | |
ssl | TLSv1 | 238 | 0.062 | |
http | RemotelyAnywhere remote PC management httpd | 8.0.747 | 226 | 0.059 |
vnc | RealVNC Personal | 220 | 0.057 | |
vnc | 220 | 0.057 | ||
http | RemotelyAnywhere remote PC management httpd | 8.0.597 | 220 | 0.057 |
http | lf | 0.1 | 218 | 0.057 |
ftp | Microsoft ftpd | 212 | 0.055 | |
http | thttpd | 2.25b 29dec2003 | 206 | 0.053 |
http | Microsoft HTTPAPI httpd | 2.0 | 206 | 0.053 |
http | Apache Tomcat/Coyote JSP engine | 1.1 | 206 | 0.053 |
http | Boa HTTPd | 0.94.13 | 202 | 0.052 |
http | thttpd | 196 | 0.051 | |
rtsp | 194 | 0.05 | ||
http | mini_httpd | 1.19 19dec2003 | 186 | 0.048 |
ssh | Cisco SSH | 1.25 | 169 | 0.044 |
http | uc-httpd | 1.0.0 | 162 | 0.042 |
http | GeoVision GeoHttpServer for webcams | 150 | 0.039 | |
http | webserver | 1.0 | 149 | 0.039 |
vnc | VNC | 148 | 0.038 | |
http | Cross Web Server | 146 | 0.038 | |
http | Microsoft IIS httpd | 7.5 | 144 | 0.037 |
telnet | corporate network! | 141 | 0.037 | |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 139 | 0.036 | |
remoting | MS .NET Remoting services | 132 | 0.034 | |
http | Hikvision-Webs | 132 | 0.034 | |
irc-proxy | psyBNC | 2.3.2-7 | 130 | 0.034 |
telnet | ser2net telnetd | 126 | 0.033 | |
ssh | OpenSSH | 4.3 | 125 | 0.032 |
telnet | PE-4 Router | 119 | 0.031 | |
http | DrcomServer1.0 | 119 | 0.031 | |
ssh | 111 | 0.029 | ||
http | RemotelyAnywhere remote PC management httpd | 6.20.467 | 111 | 0.029 |
smtp | Postfix smtpd | 107 | 0.028 | |
http | GM Streaming Server httpd | 106 | 0.027 | |
ssh | OpenSSH | 5.1p1 Debian 5 | 101 | 0.026 |
http | thttpd | 2.25b | 100 | 0.026 |
http | Microsoft IIS httpd | 7.0 | 98 | 0.025 |
http | dcs-lig-httpd | 96 | 0.025 | |
http | lf | 0.6 | 95 | 0.025 |
http | D-Link DIR-300 WAP http admin | 95 | 0.025 | |
http | PDR-M800 | 1.0 | 90 | 0.023 |
ftp | 89 | 0.023 | ||
http | RemotelyAnywhere remote PC management httpd | 8.0.605 | 88 | 0.023 |
vdr | VDR | 1.7.21 | 86 | 0.022 |
http | thttpd | 2.24 26oct2003 | 85 | 0.022 |
http | Apache | 2.2.22 | 85 | 0.022 |
http | Microsoft IIS httpd | 5.1 | 83 | 0.022 |
telnet | Frontier Internet * | 82 | 0.021 | |
http | Apache | 2.2.16 | 81 | 0.021 |
telnet | cisco router pgp-gw3.ccl.ru | 79 | 0.02 | |
rifa-dvr | Rifatron DVR | 78 | 0.02 | |
http | httpd | 77 | 0.02 | |
telnet | GW1-PWQ1.2day.kz | 76 | 0.02 | |
http | Apache | 2.2.14 | 73 | 0.019 |
telnet | This Router | 72 | 0.019 | |
http | Mobotix Camera http config | 68 | 0.018 | |
http | Apache | 2.0.63 | 68 | 0.018 |
vdr | VDR | 66 | 0.017 | |
ftp | ProFTPD | 1.3.3rc3 | 66 | 0.017 |
http | RemotelyAnywhere remote PC management httpd | 9.0.856 | 65 | 0.017 |
nbd | Network Block Device | 63 | 0.016 | |
ftp | Serv-U ftpd | 6.4 | 61 | 0.016 |
telnet | Cisco 2514 router telnetd | 59 | 0.015 | |
ftp | Pure-FTPd | 58 | 0.015 | |
http | RemotelyAnywhere remote PC management httpd | 7.10.552 | 56 | 0.015 |
http | Gadspot/Avtech AV787 webcam http config | 56 | 0.015 | |
ssh | Dropbear sshd | 0.51 | 53 | 0.014 |
http | RemotelyAnywhere remote PC management httpd | 7.00.531 | 53 | 0.014 |
http | GoAhead-Webs | 53 | 0.014 | |
http | uTorrent WebUI | 52 | 0.013 | |
telnet | cisco router tusm-gw3.ccl.ru | 50 | 0.013 | |
http | Xitami httpd admin port | 50 | 0.013 | |
http | Mbedthis-Appweb | 2.0.4 | 49 | 0.013 |
arcserve | ARCserve Discovery | 49 | 0.013 | |
http-proxy | Squid http proxy | 48 | 0.012 | |
http | DVR Systems webcam http interface | 47 | 0.012 | |
http | thttpd | 2.24 | 46 | 0.012 |
http | Microsoft IIS httpd | 5.0 | 45 | 0.012 |
http | Httpd | 1.0 | 44 | 0.011 |
http | Bchat | 42 | 0.011 | |
vnc | RealVNC Enterprise | 41 | 0.011 | |
http | CordaServer | 7.2.5.3711 | 41 | 0.011 |
ssh | OpenSSH | 5.3 | 40 | 0.01 |
http | Network Camera | 40 | 0.01 | |
http | Vivotek 3102 Camera http config | 39 | 0.01 | |
http | Gateway Controller 3560 | 39 | 0.01 | |
http | CordaServer | 6.0.483 | 39 | 0.01 |
socks5 | 38 | 0.01 | ||
http | Apache | 2.2.17 | 38 | 0.01 |
http | Apache | 2.2.15 | 38 | 0.01 |
upnp | Portable SDK for UPnP devices | 1.3.1 | 37 | 0.01 |
http | Vivotek IP7131 Network Camera http config | 37 | 0.01 | |
http | DD-WRT milli_httpd | 37 | 0.01 | |
ssl | TLS | 1.0 | 36 | 0.009 |
http | Monkey httpd | 0.9.3 | 36 | 0.009 |
http | IBM httpd | 1.0 | 36 | 0.009 |
http | Apache | 2.2.9 | 36 | 0.009 |
http | Apache | 1.3.28 | 36 | 0.009 |
telnet | the Sirius Star System ! | 34 | 0.009 | |
http | Wireless Network Camera | 34 | 0.009 | |
http | Virata-EmWeb | 6.0.1 | 34 | 0.009 |
http | Boa HTTPd | 0.92o | 34 | 0.009 |
telnet | VPN-5 Router | 32 | 0.008 | |
http | RemotelyAnywhere remote PC management httpd | 6.00.449 | 32 | 0.008 |
http | Draytek Vigor ADSL router webadmin | 31 | 0.008 | |
http | WYM httpd | 1.0 | 30 | 0.008 |
http | MultView WEB Server V1.1 | 30 | 0.008 | |
http | lighttpd | 1.4.13 | 30 | 0.008 |
http | Gateway Controller 3550 | 29 | 0.008 | |
svnserve | Subversion | 28 | 0.007 | |
ssh | Dropbear sshd | 0.48 | 28 | 0.007 |
http | thttpd | 2.19-MX Jul 1 2010 | 28 | 0.007 |
http | CordaServer | 6.0.597 | 28 | 0.007 |
telnet | Openwall GNU/*/Linux telnetd | 27 | 0.007 | |
ssh | OpenSSH | 3.9p1 | 27 | 0.007 |
http | World Client WDaemon httpd | 4.0 | 27 | 0.007 |
http | RemotelyAnywhere remote PC management httpd | 10.0.2100 | 27 | 0.007 |
http-proxy | Squid http proxy | 2.7.STABLE9 | 27 | 0.007 |
http | Apache | 2.0.52 | 27 | 0.007 |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | 26 | 0.007 |
ssh | Dropbear sshd | 0.52 | 26 | 0.007 |
http | Foundry EdgeIron switch http config | 26 | 0.007 | |
http | Apache | 2.2.8 | 26 | 0.007 |
dominoconsole | Lotus Domino Console | 26 | 0.007 | |
ssh | OpenSSH | 4.7 | 25 | 0.006 |
http | build-in http server | 25 | 0.006 | |
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 25 | 0.006 | |
shoutcast-publishing | SHOUTcast publishing port | 24 | 0.006 | |
http | nginx | 0.7.65 | 24 | 0.006 |
http | D-Link/Airlink IP webcam http config | 1.0 | 24 | 0.006 |
http | CordaServer | 7.0.1.1366 | 24 | 0.006 |
http | CCcam card sharing system http config | 24 | 0.006 | |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze1 | 23 | 0.006 |
http | Jetty | 5.1.2 | 23 | 0.006 |
http | Boa HTTPd | 0.94.14rc18 | 23 | 0.006 |
http | Boa HTTPd | 0.93.15 | 23 | 0.006 |
http | Apache | 2.0.53 | 23 | 0.006 |
http | Apache | 2 | 23 | 0.006 |
ftp | MikroTik router ftpd | 5.14 | 23 | 0.006 |
ssh | OpenSSH | 3.1p1 | 22 | 0.006 |
http | thttpd | 2.19-MX Oct 19 2011 | 22 | 0.006 |
http | Apache | 2.2.21 | 22 | 0.006 |
http | Apache | 1.3.41 | 22 | 0.006 |
ftp | Serv-U ftpd | 6.3 | 22 | 0.006 |
ftp | ProFTPD | 22 | 0.006 | |
ftp | FileZilla ftpd | 0.9.41 beta | 22 | 0.006 |
vdr | VDR | 1.6.0-2 | 21 | 0.005 |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | 21 | 0.005 |
smtp | OpenBSD spamd | 21 | 0.005 | |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 21 | 0.005 | |
http | RemotelyAnywhere remote PC management httpd | 21 | 0.005 | |
http | Apache | 2.2.11 | 21 | 0.005 |
giop | CORBA naming service | 21 | 0.005 | |
directconnect | Direct Connect P2P | 21 | 0.005 | |
rtsp | Avtech MPEG4 DVR control rtspd | 20 | 0.005 | |
openvpn | OpenVPN | 20 | 0.005 | |
http | Zope httpd | 2.13.8 | 20 | 0.005 |
http | World Client WDaemon httpd | 2.2.3 | 20 | 0.005 |
http | thttpd | 2.19-MX Dec 8 2009 | 20 | 0.005 |
http | Jetty | 6.1.x | 20 | 0.005 |
telnet | PE-5 Router | 19 | 0.005 | |
ssh | OpenSSH | 5.1 | 19 | 0.005 |
http | MiniServ | 0.01 | 19 | 0.005 |
http | Apache | 2.0.59 | 19 | 0.005 |
ftp | MikroTik router ftpd | 5.4 | 19 | 0.005 |
xml | 18 | 0.005 | ||
vnc-http | Ultr@VNC | 18 | 0.005 | |
telnet | the BCC terminal server | 18 | 0.005 | |
nntp | INN nntpd | 18 | 0.005 | |
http | RemotelyAnywhere remote PC management httpd | 9.1.1016 | 18 | 0.005 |
http | CordaServer | 6.0.706 | 18 | 0.005 |
vdr | VDR | 1.4.7 | 17 | 0.004 |
telnet | Mulberry Co-op Telco *** | 17 | 0.004 | |
ssh | OpenSSH | 5.4p1 | 17 | 0.004 |
smtp | Exim smtpd | 4.77 | 17 | 0.004 |
ovm-manager | Oracle VM Manager | 17 | 0.004 | |
meetingmaker | Meeting Maker calendaring | 17 | 0.004 | |
http | thttpd | 2.19-MX Apr 26 2011 | 17 | 0.004 |
http | QNAP TS-219P NAS http config | 1.0 | 17 | 0.004 |
http | MikroTik router http config | 17 | 0.004 | |
http | CordaServer | 7.0.2.1454 | 17 | 0.004 |
ftp | Microsoft ftpd | 5.0 | 17 | 0.004 |
telnet | the EmNet Ltd | 16 | 0.004 | |
telnet | cisco router pgp-gw6.ccl.ru | 16 | 0.004 | |
shoutcast | SHOUTcast server | 1.9.5 | 16 | 0.004 |
netbios-ssn | 16 | 0.004 | ||
http | Vivotek Network Camera | 16 | 0.004 | |
http | uClinux-httpd | 0.2.2 | 16 | 0.004 |
http | RemotelyAnywhere remote PC management httpd | 7.01.541 | 16 | 0.004 |
http | MiniServ | 1.550 | 16 | 0.004 |
http | lighttpd | 16 | 0.004 | |
http | D-Link DCS-900 webcam http config | 16 | 0.004 | |
http | CordaServer (PopChartServer compatible) 5.1.2h | 16 | 0.004 | |
http | CordaServer | 7.1.0.2116 | 16 | 0.004 |
http | CordaServer | 6.0.727 | 16 | 0.004 |
http | Apache | 1.3.33 | 16 | 0.004 |
telnet | cisco router sovetskaia47b-gw1.ccl.ru | 15 | 0.004 | |
telnet | BSD-derived telnetd | 15 | 0.004 | |
ssh | OpenSSH | 5.2 | 15 | 0.004 |
ssh | OpenSSH | 4.6 | 15 | 0.004 |
smtp | Microsoft Exchange smtpd | 15 | 0.004 | |
http | WebServer | 15 | 0.004 | |
http-proxy | Haproxy http proxy | 15 | 0.004 | |
http | avtech httpd | 1.0 | 15 | 0.004 |