~257 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
no match | -/- | 106058 | 41.186 |
http | World Client WDaemon httpd | 34483 | 13.391 |
ntop-http | Ntop web interface | 13923 | 5.407 |
http | 11165 | 4.336 | |
http | WEBrick httpd | 8442 | 3.278 |
ssh | OpenSSH | 8042 | 3.123 |
http | Apache | 6965 | 2.705 |
http | micro_httpd | 6861 | 2.664 |
http | nginx | 4112 | 1.597 |
irc | Dancer ircd | 4095 | 1.59 |
http | Boa HTTPd | 3916 | 1.521 |
http | SonicWALL | 3509 | 1.363 |
chat | AIM or ICQ server | 2531 | 0.983 |
http | Microsoft IIS httpd | 2385 | 0.926 |
jd-gui | JD-GUI Java decompiler | 2020 | 0.784 |
http | Mongrel httpd | 1801 | 0.699 |
http | GeoVision GeoHttpServer for webcams | 1780 | 0.691 |
as-sts | IBM Service Tool Server AS-STS | 1718 | 0.667 |
http | lighttpd | 1581 | 0.614 |
http | Boa httpd | 1514 | 0.588 |
http | Thin | 1480 | 0.575 |
eggdrop | Eggdrop IRC bot console | 1474 | 0.572 |
http | ZyXEL Modem | 1081 | 0.42 |
http | thttpd | 1007 | 0.391 |
http | ServerCP httpd | 811 | 0.315 |
http | Mojolicious (Perl) | 788 | 0.306 |
http | Hikvision-Webs | 750 | 0.291 |
http | Microsoft HTTPAPI httpd | 745 | 0.289 |
rifa-dvr | Rifatron DVR | 733 | 0.285 |
http | Cross Web Server | 664 | 0.258 |
http | AIM | 663 | 0.257 |
http | Httpd | 658 | 0.256 |
http | uc-httpd | 588 | 0.228 |
http | Avtech AVN801 network camera | 562 | 0.218 |
http | RemotelyAnywhere remote PC management httpd | 532 | 0.207 |
http | Netwave IP camera http config | 526 | 0.204 |
vnc | VNC | 499 | 0.194 |
http | mini_httpd | 491 | 0.191 |
upnp | Microsoft Windows UPnP | 489 | 0.19 |
http | GoAhead-Webs httpd | 440 | 0.171 |
irc-proxy | psyBNC | 439 | 0.17 |
http-proxy | DeleGate proxy | 395 | 0.153 |
http | Node.js | 390 | 0.151 |
http | Apache Tomcat/Coyote JSP engine | 380 | 0.148 |
ssl | TLS | 352 | 0.137 |
http | XBMC http interface | 301 | 0.117 |
http | D-Link DIR-300 WAP http admin | 278 | 0.108 |
http | thin 1.2.11 codename Bat-Shit Crazy | 268 | 0.104 |
http | WangWnagSimpleServer | 257 | 0.1 |
http-proxy | EZproxy web proxy | 225 | 0.087 |
http-proxy | Squid http proxy | 220 | 0.085 |
http | Eggdrop stats.mod web statistics module | 211 | 0.082 |
mysql | MySQL | 208 | 0.081 |
http | Polaris Replication Service | 201 | 0.078 |
http | PDR-M800 | 199 | 0.077 |
pppctl | pppctld | 197 | 0.077 |
ftp | FileZilla ftpd | 196 | 0.076 |
ftp | Microsoft ftpd | 188 | 0.073 |
http | Jetty | 181 | 0.07 |
http | GoAhead-Webs embedded httpd | 180 | 0.07 |
http | httpd 1.1 | 178 | 0.069 |
ovm-manager | Oracle VM Manager | 177 | 0.069 |
telnet | ser2net telnetd | 173 | 0.067 |
http | Kerio MailServer http config | 164 | 0.064 |
telnet | 158 | 0.061 | |
http | DVR Systems webcam http interface | 156 | 0.061 |
http | HttpComponents | 148 | 0.057 |
arcserve | ARCserve Discovery | 148 | 0.057 |
http | Gadspot/Avtech AV787 webcam http config | 139 | 0.054 |
ssh | Dropbear sshd | 130 | 0.05 |
http-proxy | Ncat http proxy | 129 | 0.05 |
remoting | MS .NET Remoting services | 128 | 0.05 |
http | Catalyst Framework httpd | 120 | 0.047 |
http | DrcomServer1.0 | 117 | 0.045 |
sdlog | RSA SecureID Ace Server | 115 | 0.045 |
ssh | 113 | 0.044 | |
sgms | Sonicwall Viewpoint SGMSd | 113 | 0.044 |
http | HTTP | 113 | 0.044 |
ftp | 111 | 0.043 | |
telnet | Linux telnetd | 110 | 0.043 |
http | WindWeb | 108 | 0.042 |
http | COSMOS 3000 OPEN (Plueth Regelsysteme GmbH) | 105 | 0.041 |
progress | Progress Database | 98 | 0.038 |
vnc | RealVNC Personal | 93 | 0.036 |
http | Mbedthis-Appweb | 93 | 0.036 |
http | IceWarp webmail httpd | 93 | 0.036 |
telnet | Airaya WAP diagnostics telnetd | 92 | 0.036 |
http | OwnServer1.0 | 91 | 0.035 |
http | Microsoft ISA httpd | 85 | 0.033 |
http | Indy | 85 | 0.033 |
http | Panasonic webcam http config | 84 | 0.033 |
ftp | Pure-FTPd | 82 | 0.032 |
http-proxy | MikroTik http proxy | 79 | 0.031 |
telnet | FirstClass messaging system telnetd | 78 | 0.03 |
http | FC | 78 | 0.03 |
ftp | ProFTPD | 78 | 0.03 |
http | GM Streaming Server httpd | 74 | 0.029 |
http | Buffalo AirStation http config | 71 | 0.028 |
http | Allegro RomPager | 71 | 0.028 |
xml | 69 | 0.027 | |
shoutcast | SHOUTcast server | 68 | 0.026 |
quagga | Quagga routing software | 65 | 0.025 |
rtsp | 64 | 0.025 | |
http | MiniServ | 63 | 0.024 |
http | Dart WebServer Tool | 63 | 0.024 |
vnc | RealVNC Enterprise | 62 | 0.024 |
http | Kerio MailServer Webmail | 62 | 0.024 |
http | Virata-EmWeb | 61 | 0.024 |
ftp | vsftpd | 61 | 0.024 |
http | WYM httpd | 60 | 0.023 |
http | Network Camera | 58 | 0.023 |
http | ExpertAssist | 58 | 0.023 |
smtp | 56 | 0.022 | |
http | W3MFC | 56 | 0.022 |
vnc | 53 | 0.021 | |
http | Router | 53 | 0.021 |
http | Zimbra http config | 50 | 0.019 |
http | uTorrent WebUI | 50 | 0.019 |
http | MS-SDK-HttpServer | 50 | 0.019 |
http | Draytek Vigor ADSL router webadmin | 50 | 0.019 |
directconnect | Direct Connect P2P | 50 | 0.019 |
ssh | MikroTik RouterOS sshd | 49 | 0.019 |
http | http server 1.0 | 48 | 0.019 |
rtsp | Avtech MPEG4 DVR control rtspd | 47 | 0.018 |
http | Knowledge On Demand httpd | 42 | 0.016 |
http | SonicWALL firewall http config | 41 | 0.016 |
http | Small Home Server httpd | 41 | 0.016 |
http | Warp | 40 | 0.016 |
ftp | Serv-U ftpd | 40 | 0.016 |
http | Techno Vision Security System http config | 38 | 0.015 |
http | Intoto httpd | 38 | 0.015 |
telnet | OpenText FirstClass webmail command-line interface | 37 | 0.014 |
smtp | Postfix smtpd | 37 | 0.014 |
smtp | Microsoft ESMTP | 37 | 0.014 |
http | TP-LINK Router | 36 | 0.014 |
openvpn | OpenVPN | 35 | 0.014 |
http | MikroTik router config httpd | 35 | 0.014 |
svnserve | Subversion | 34 | 0.013 |
socks5 | 34 | 0.013 | |
telnet | the MRV Communications' LX Series Server | 33 | 0.013 |
http | monit httpd | 33 | 0.013 |
http | HTTPServer | 32 | 0.012 |
http | Oracle Application Server httpd | 31 | 0.012 |
http | GoAhead-Webs | 30 | 0.012 |
http | uClinux-httpd | 29 | 0.011 |
http | Linksys router http config | 29 | 0.011 |
http | Cisco IOS http config | 29 | 0.011 |
antivir | drweb anti-virus | 29 | 0.011 |
nntp | INN nntpd | 28 | 0.011 |
telnet | FirstClass telnetd | 27 | 0.01 |
smtp | Microsoft Exchange smtpd | 27 | 0.01 |
http | Router Webserver | 27 | 0.01 |
http | Lotus Domino httpd | 27 | 0.01 |
http | ICS - Server | 27 | 0.01 |
http | Ubicom | 26 | 0.01 |
http | TwistedWeb httpd | 25 | 0.01 |
http | Grandstream HT502 VoIP router http config | 25 | 0.01 |
http | DD-WRT milli_httpd | 25 | 0.01 |
telnet | AM8000 SYSTEM (AMOS Version 8.1(102)-2) | 24 | 0.009 |
http | Vivotek 3102 Camera http config | 24 | 0.009 |
http | Secure Computing Sidewinder firewall http admin | 24 | 0.009 |
http | Microsoft IIS | 24 | 0.009 |
telnet | the MRV Communications' LX Series Console Server | 23 | 0.009 |
http | ZNC IRC bouncer http config | 23 | 0.009 |
http | TibetSystem Server 2.0 | 23 | 0.009 |
http | MultView WEB Server V1.1 | 23 | 0.009 |
http | MikroTik router http config | 23 | 0.009 |
napster | WinMX or Lopster Napster P2P client | 22 | 0.009 |
irc | Unreal ircd | 22 | 0.009 |
http | Vivotek IP7131 Network Camera http config | 22 | 0.009 |
http | D-Link/Airlink IP webcam http config | 22 | 0.009 |
telnet | SMC SMC2870W Wireless Ethernet Bridge | 21 | 0.008 |
telnet | Allied Telesis x900-series switch telnetd | 21 | 0.008 |
http | NetApp DFM httpd | 21 | 0.008 |
http | CherryPy httpd | 21 | 0.008 |
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 21 | 0.008 |
eggdrop | Eggdrop irc bot console | 21 | 0.008 |
vnc | Apple remote desktop vnc | 20 | 0.008 |
http | webserver | 20 | 0.008 |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 20 | 0.008 |
http | Mongrel 1.2.0.pre2 | 20 | 0.008 |
http | ADH-Web httpd | 20 | 0.008 |
ftp | Gene6 ftpd | 20 | 0.008 |
ssh | Cisco SSH | 19 | 0.007 |
netbios-ssn | 19 | 0.007 | |
http | ImagiaTek | 19 | 0.007 |
http | Axigen-Webmail | 19 | 0.007 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 19 | 0.007 |
telnet | BusyBox telnetd | 18 | 0.007 |
spy-net | Spy-Net or CyberGate backdoor | 18 | 0.007 |
rtsp | Microsoft Windows Media Server | 18 | 0.007 |
http | go1984 httpd | 18 | 0.007 |
http | dcs-lig-httpd | 18 | 0.007 |
zabbix | Zabbix Monitoring System | 17 | 0.007 |
http | Vivotek Network Camera | 17 | 0.007 |
http | SmarterTools httpd | 17 | 0.007 |
http | QNAP TS-219P NAS http config | 17 | 0.007 |
http-proxy | CCProxy http proxy | 17 | 0.007 |
http | D-Link DCS-910 webcam http config | 17 | 0.007 |
telnet | NewCS card sharing system telnetd | 16 | 0.006 |
http | HttpFileServer httpd | 16 | 0.006 |
http | Embedded HTTP Server | 16 | 0.006 |
varnish-cli | Varnish Cache CLI | 15 | 0.006 |
telnet | BSD-derived telnetd | 15 | 0.006 |
irc-proxy | ShroudBNC irc-proxy | 15 | 0.006 |
http | uhttpd | 15 | 0.006 |
http | Rex media encoder http config | 15 | 0.006 |
http-proxy | F5 BIG-IP load balancer http proxy | 15 | 0.006 |
http | Video Server | 14 | 0.005 |
http | Transmission BitTorrent management httpd | 14 | 0.005 |
http | HeiTel GmbH Webserver | 14 | 0.005 |
http | Fnord httpd | 14 | 0.005 |
http | Bchat | 14 | 0.005 |
ssh | Bitvise WinSSHD | 13 | 0.005 |
http | WebFS httpd | 13 | 0.005 |
http-proxy | Haproxy http proxy | 13 | 0.005 |
http | Kerio Connect webmail httpd | 13 | 0.005 |
http | httpd | 13 | 0.005 |
http | HP StorageWorks AG118A tape autoloader http config | 13 | 0.005 |
http | D-Link DCS-900 webcam http config | 13 | 0.005 |
http | Citrix Metaframe ICA Browser | 13 | 0.005 |
http | ChipPC Extreme httpd | 13 | 0.005 |
http | Caucho Resin JSP engine | 13 | 0.005 |
vnc-http | RealVNC | 12 | 0.005 |
upnp | Portable SDK for UPnP devices | 12 | 0.005 |
telnet | Microsoft Windows XP telnetd | 12 | 0.005 |
telnet | Cisco 1721 router telnetd | 12 | 0.005 |
ssh | SunSSH | 12 | 0.005 |
secure-socket | CA Secure Socket Adapter | 12 | 0.005 |
mon | Perl service monitoring daemon | 12 | 0.005 |
http | Wireless Network Camera | 12 | 0.005 |
http | wg_httpd | 12 | 0.005 |
http | WEB SERVER | 12 | 0.005 |
http | WebServer | 12 | 0.005 |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | 12 | 0.005 |
http | TornadoServer | 12 | 0.005 |
http | NEC Electra Elite IPK II WebPro | 12 | 0.005 |
http | Linksys PAP2 VoIP http config | 12 | 0.005 |
http | BRS WebWeaver httpd | 12 | 0.005 |
irc | ircu ircd | 11 | 0.004 |
http | WIWA | 11 | 0.004 |
http | WDaemon | 11 | 0.004 |
http | VDR Streamdev plugin httpd | 11 | 0.004 |
http | Sun GlassFish | 11 | 0.004 |
http | Microsoft Windows Media Server | 11 | 0.004 |
http | Embedded HTTP Server. | 11 | 0.004 |
http | dsm | 11 | 0.004 |
http | AIM HTTP | 11 | 0.004 |
soap | gSOAP soap | 10 | 0.004 |
printer | Panasonic mfpscdl.exe service | 10 | 0.004 |
ice | Internet Communications Engine | 10 | 0.004 |
http | WebLogic httpd | 10 | 0.004 |
http | Icecast streaming media server | 10 | 0.004 |
http | Accessnet | 10 | 0.004 |