~39 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
no match | -/- | 10951 | 27.393 |
http | 4787 | 11.974 | |
irc | Dancer ircd | 4051 | 10.133 |
http | SonicWALL | 3581 | 8.958 |
chat | AIM or ICQ server | 2181 | 5.456 |
eggdrop | Eggdrop IRC bot console | 1130 | 2.827 |
ssh | OpenSSH | 1042 | 2.606 |
http | Techno Vision Security System http config | 1011 | 2.529 |
http | Mongrel httpd | 1008 | 2.521 |
http | Apache | 996 | 2.491 |
http | lighttpd | 993 | 2.484 |
http | AIM | 671 | 1.678 |
telnet | 555 | 1.388 | |
http | Microsoft IIS httpd | 553 | 1.383 |
http | Boa HTTPd | 433 | 1.083 |
http | Thin | 419 | 1.048 |
vnc | VNC | 345 | 0.863 |
http | thttpd | 250 | 0.625 |
http-proxy | EZproxy web proxy | 227 | 0.568 |
http | WangWnagSimpleServer | 193 | 0.483 |
http | Microsoft HTTPAPI httpd | 162 | 0.405 |
pop3 | 156 | 0.39 | |
http | nginx | 154 | 0.385 |
http | Netwave IP camera http config | 137 | 0.343 |
http | DrcomServer1.0 | 121 | 0.303 |
http | WEBrick httpd | 114 | 0.285 |
http | Apache Tomcat/Coyote JSP engine | 104 | 0.26 |
ssh | 99 | 0.248 | |
http | Avtech AVN801 network camera | 99 | 0.248 |
http | GoAhead-Webs | 94 | 0.235 |
sdlog | RSA SecureID Ace Server | 91 | 0.228 |
telnet | Pocket CMD telnetd | 88 | 0.22 |
pppctl | pppctld | 76 | 0.19 |
http | thin 1.2.11 codename Bat-Shit Crazy | 68 | 0.17 |
mysql | MySQL | 62 | 0.155 |
http | NewCS satellite card sharing system http config | 62 | 0.155 |
rtsp | 59 | 0.148 | |
upnp | Microsoft Windows UPnP | 58 | 0.145 |
http | PDR-M800 | 56 | 0.14 |
ftp | Microsoft ftpd | 56 | 0.14 |
telnet | Cisco 1721 router telnetd | 52 | 0.13 |
http-proxy | Squid http proxy | 52 | 0.13 |
http | Mobotix Camera http config | 51 | 0.128 |
http | Httpd | 51 | 0.128 |
ssh | Dropbear sshd | 46 | 0.115 |
http | mini_httpd | 45 | 0.113 |
arcserve | ARCserve Discovery | 44 | 0.11 |
telnet | Allied Telesis x900-series switch telnetd | 40 | 0.1 |
progress | Progress Database | 39 | 0.098 |
telnet | AIX telnetd | 36 | 0.09 |
ssh | Cisco SSH | 36 | 0.09 |
http | GoAhead-Webs embedded httpd | 36 | 0.09 |
http | Cross Web Server | 36 | 0.09 |
http | uc-httpd | 35 | 0.088 |
vnc | 34 | 0.085 | |
http | monit httpd | 34 | 0.085 |
smtp | Postfix smtpd | 32 | 0.08 |
http | RemotelyAnywhere remote PC management httpd | 31 | 0.078 |
ftp | ProFTPD | 31 | 0.078 |
http | Hikvision-Webs | 29 | 0.073 |
ssl | TLS | 28 | 0.07 |
nntp | INN nntpd | 28 | 0.07 |
http | GoAhead-Webs httpd | 28 | 0.07 |
ftp | 28 | 0.07 | |
telnet | NewCS card sharing system telnetd | 27 | 0.068 |
http | Secure Computing Sidewinder firewall http admin | 27 | 0.068 |
http | Mbedthis-Appweb | 25 | 0.063 |
ftp | vsftpd | 25 | 0.063 |
telnet | Cisco IOS telnetd | 24 | 0.06 |
http | World Client WDaemon httpd | 24 | 0.06 |
http | Network Camera | 24 | 0.06 |
http | Apache Embedded Server | 24 | 0.06 |
vnc | RealVNC Personal | 23 | 0.058 |
http | uTorrent WebUI | 23 | 0.058 |
ovm-manager | Oracle VM Manager | 22 | 0.055 |
irc-proxy | psyBNC | 22 | 0.055 |
http | Jetty | 22 | 0.055 |
http | GeoVision GeoHttpServer for webcams | 21 | 0.053 |
ftp | FileZilla ftpd | 21 | 0.053 |
upnp | Portable SDK for UPnP devices | 19 | 0.048 |
telnet | FirstClass messaging system telnetd | 19 | 0.048 |
socks5 | 19 | 0.048 | |
vnc | RealVNC Enterprise | 18 | 0.045 |
telnet | Linux telnetd | 18 | 0.045 |
smtp | Microsoft ESMTP | 18 | 0.045 |
http | Node.js | 18 | 0.045 |
http | Indy | 17 | 0.043 |
http | Gadspot/Avtech AV787 webcam http config | 17 | 0.043 |
http | DVR Systems webcam http interface | 17 | 0.043 |
http | webserver | 16 | 0.04 |
ftp | Pure-FTPd | 16 | 0.04 |
openvpn | OpenVPN | 15 | 0.038 |
directconnect | Direct Connect P2P | 15 | 0.038 |
xml | 14 | 0.035 | |
http | TMeter | 14 | 0.035 |
smtp | Microsoft Exchange smtpd | 12 | 0.03 |
http | dcs-lig-httpd | 12 | 0.03 |
http | Allegro RomPager | 12 | 0.03 |
http | AIM HTTP | 12 | 0.03 |
telnet | SMC SMC2870W Wireless Ethernet Bridge | 11 | 0.028 |
http | WYM httpd | 11 | 0.028 |
http-proxy | F5 BIG-IP load balancer http proxy | 11 | 0.028 |
http | D-Link DIR-300 WAP http admin | 11 | 0.028 |
ftp | Serv-U ftpd | 11 | 0.028 |
citrix-ica | Citrix Metaframe XP ICA | 11 | 0.028 |
vnc | Apple remote desktop vnc | 10 | 0.025 |
ssh | Kojoney SSH honeypot | 10 | 0.025 |
smtp | 10 | 0.025 | |
shoutcast | SHOUTcast server | 10 | 0.025 |
rtsp | Avtech MPEG4 DVR control rtspd | 10 | 0.025 |
http | HeiTel GmbH Web Server | 10 | 0.025 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 10 | 0.025 |