~664 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
http-proxy | Squid http proxy | 399420 | 60.121 |
no match | -/- | 63913 | 9.62 |
http | Apache | 61742 | 9.294 |
http | 34413 | 5.18 | |
http | Microsoft IIS httpd | 19098 | 2.875 |
http | alphapd | 9911 | 1.492 |
http | Apache (Linux) | 8506 | 1.28 |
http | GoAhead-Webs httpd | 7084 | 1.066 |
http-proxy | MikroTik http proxy | 4921 | 0.741 |
http-proxy | BlueCoat http proxy | 4700 | 0.707 |
irc | Dancer ircd | 4095 | 0.616 |
http | SonicWALL | 3952 | 0.595 |
http | Secure Computing Sidewinder firewall http admin | 3791 | 0.571 |
http | GoAhead-Webs embedded httpd | 3762 | 0.566 |
http-proxy | 3Proxy http proxy | 3609 | 0.543 |
http | wanduck | 2944 | 0.443 |
http | dcs-lig-httpd | 2729 | 0.411 |
chat | AIM or ICQ server | 2582 | 0.389 |
http | lighttpd | 2420 | 0.364 |
http-proxy | 3proxy http proxy | 2014 | 0.303 |
http | Urchin RSS aggregator | 1767 | 0.266 |
http | thttpd | 1244 | 0.187 |
http | Tiny redirect server | 851 | 0.128 |
http | nginx | 839 | 0.126 |
http | UserGate http report area | 818 | 0.123 |
http | AIM | 662 | 0.1 |
http-proxy | Tinyproxy | 507 | 0.076 |
http-proxy | NetApp NetCache http proxy | 496 | 0.075 |
http-proxy | Oops! http proxy | 492 | 0.074 |
ssh | OpenSSH | 428 | 0.064 |
socks-proxy | Socks4A | 401 | 0.06 |
http-proxy | WinRoute http proxy | 353 | 0.053 |
http | WangWnagSimpleServer | 340 | 0.051 |
http-proxy | DansGuardian HTTP proxy | 295 | 0.044 |
http-proxy | CCProxy http proxy | 279 | 0.042 |
http | TreeNeWS httpd | 255 | 0.038 |
http-proxy | EZproxy web proxy | 228 | 0.034 |
http | CCProxy | 227 | 0.034 |
http | Boa HTTPd | 222 | 0.033 |
http | DrcomServer1.0 | 213 | 0.032 |
http-proxy | Kerio Control http proxy | 195 | 0.029 |
http | Microsoft HTTPAPI httpd | 192 | 0.029 |
http | Avtech AVN801 network camera | 192 | 0.029 |
http | Apache Tomcat/Coyote JSP engine | 191 | 0.029 |
http | GeoVision GeoHttpServer for webcams | 187 | 0.028 |
http-proxy | JanaServer http proxy | 172 | 0.026 |
http | Netwave IP camera http config | 152 | 0.023 |
http | TBS | 143 | 0.022 |
http | NCSA | 137 | 0.021 |
http | HandyCache | 114 | 0.017 |
http | Ubuntu | 113 | 0.017 |
http-proxy | MikroTik HttpProxy | 112 | 0.017 |
http | mini_httpd | 112 | 0.017 |
vnc | VNC | 106 | 0.016 |
ssh | 105 | 0.016 | |
http | uc-httpd | 102 | 0.015 |
http | Allegro RomPager | 102 | 0.015 |
http | MikroTik router config httpd | 101 | 0.015 |
http-proxy | AVM KEN! http proxy | 93 | 0.014 |
upnp | Portable SDK for UPnP devices | 92 | 0.014 |
socks5 | 90 | 0.014 | |
http | Hikvision-Webs | 89 | 0.013 |
http | AppWork GmbH HttpServer | 89 | 0.013 |
http | Lusca | 86 | 0.013 |
http | WORLDWLAN PREMIUM Edition Server by XCONY | 83 | 0.012 |
http | Squid | 83 | 0.012 |
http | UserGate Firewall and Proxy Server | 77 | 0.012 |
http | Jetty | 76 | 0.011 |
http-proxy | FreeProxy http proxy | 73 | 0.011 |
telnet | 72 | 0.011 | |
http | DD-WRT milli_httpd | 70 | 0.011 |
http | Linksys wireless-G WAP http config | 67 | 0.01 |
http | uTorrent WebUI | 66 | 0.01 |
http | squid | 64 | 0.01 |
http | PDR-M800 | 64 | 0.01 |
http-proxy | UserGate http proxy | 63 | 0.009 |
http | Linksys router http config | 62 | 0.009 |
http | Speedr | 58 | 0.009 |
arcserve | ARCserve Discovery | 57 | 0.009 |
http-proxy | WinProxy http proxy | 56 | 0.008 |
ftp | Microsoft ftpd | 46 | 0.007 |
http | Gadspot/Avtech AV787 webcam http config | 45 | 0.007 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 45 | 0.007 |
http-proxy | Microsoft ISA Server http proxy | 44 | 0.007 |
http-proxy | Fortech Proxy+ http admin | 44 | 0.007 |
http-proxy | BlueCoat SG-400 http proxy | 44 | 0.007 |
ssh | Dropbear sshd | 42 | 0.006 |
mysql | MySQL | 39 | 0.006 |
http | Intoto httpd | 39 | 0.006 |
http | DrayTek Vigor 2800-series ADSL router httpd | 39 | 0.006 |
http-proxy | Symantec firewall http proxy | 38 | 0.006 |
ftp | FileZilla ftpd | 38 | 0.006 |
rationalsoft | Rational Soft Hidden Administrator Server | 37 | 0.006 |
ftp | 37 | 0.006 | |
http | Mbedthis-Appweb | 34 | 0.005 |
http | GoAhead-Webs | 34 | 0.005 |
http | Draytek Vigor ADSL router webadmin | 34 | 0.005 |
http | XCN/3 | 33 | 0.005 |
http-proxy | awarrenhttp http proxy | 33 | 0.005 |
remoting | MS .NET Remoting services | 32 | 0.005 |
http | TP-LINK Router | 32 | 0.005 |
http | AsyncWeb | 32 | 0.005 |
ssl | TLS | 30 | 0.005 |
http | Cross Web Server | 30 | 0.005 |
http | micro_httpd | 29 | 0.004 |
nntp | INN nntpd | 28 | 0.004 |
http | uTorrent utserver web interface | 28 | 0.004 |
http | D-Link DIR-300 WAP http admin | 28 | 0.004 |
smtp | Exim smtpd | 27 | 0.004 |
http | DVR Systems webcam http interface | 27 | 0.004 |
http | awarrenhttp | 27 | 0.004 |
http | squid3 | 26 | 0.004 |
http | Netgear DG834G router http config | 25 | 0.004 |
ftp | Pure-FTPd | 25 | 0.004 |
ftp | ProFTPD | 25 | 0.004 |
vnc | RealVNC Enterprise | 24 | 0.004 |
http | Ubicom | 24 | 0.004 |
http-proxy | ziproxy http proxy | 24 | 0.004 |
http | Jana-Server | 24 | 0.004 |
upnp | Microsoft Windows UPnP | 23 | 0.003 |
http | WinGate Engine | 23 | 0.003 |
http | Indy | 23 | 0.003 |
smtp | Microsoft ESMTP | 22 | 0.003 |
http | Router Webserver | 22 | 0.003 |
http | MikroTik router http config | 22 | 0.003 |
vnc | 21 | 0.003 | |
http | Virata-EmWeb | 21 | 0.003 |
http | Router | 21 | 0.003 |
ftp | Serv-U ftpd | 21 | 0.003 |
http | Netgear DG834 router http config | 20 | 0.003 |
http | BusyBox httpd | 20 | 0.003 |
http | uTorrent http admin | 19 | 0.003 |
http | TwistedWeb httpd | 19 | 0.003 |
http | Tomato WAP firmware httpd | 19 | 0.003 |
netbios-ssn | 18 | 0.003 | |
irc | Unreal ircd | 18 | 0.003 |
http | Transmission BitTorrent management httpd | 18 | 0.003 |
http | MiniServ | 18 | 0.003 |
http | http server 1.0 | 18 | 0.003 |
http | Buffalo AirStation http config | 18 | 0.003 |
http | antid | 18 | 0.003 |
ftp | vsftpd | 18 | 0.003 |
webcache | webcache | 17 | 0.003 |
smtp | 17 | 0.003 | |
directconnect | Direct Connect P2P | 17 | 0.003 |
http | Zope httpd | 16 | 0.002 |
http | RemotelyAnywhere remote PC management httpd | 16 | 0.002 |
http-proxy | F5 BIG-IP load balancer http proxy | 16 | 0.002 |
http | Net-OS 5.xx UPnP | 16 | 0.002 |
ssh | MikroTik RouterOS sshd | 15 | 0.002 |
rtsp | Avtech MPEG4 DVR control rtspd | 15 | 0.002 |
openvpn | OpenVPN | 15 | 0.002 |
http | WYM httpd | 15 | 0.002 |
http | Microsoft ISA httpd | 15 | 0.002 |
ssh | SCS sshd | 14 | 0.002 |
smtp | Postfix smtpd | 14 | 0.002 |
http | webcamXP httpd | 14 | 0.002 |
http-proxy | WinGate httpd | 14 | 0.002 |
http | ESET NOD32 anti-virus update httpd | 14 | 0.002 |
http | Eproxy | 14 | 0.002 |
vnc | Apple remote desktop vnc | 13 | 0.002 |
http-proxy | Kerio WinRoute Pro http proxy | 13 | 0.002 |
http | Boa httpd | 13 | 0.002 |
vnc | RealVNC Personal | 12 | 0.002 |
ssh | APC AOS cryptlib sshd | 12 | 0.002 |
socks4 | Connection ok | 12 | 0.002 |
socks4 | Connection failed; username required | 12 | 0.002 |
smtp | Microsoft Exchange smtpd | 12 | 0.002 |
http | WindWeb | 12 | 0.002 |
http | Embedded HTTP Server | 12 | 0.002 |
http | AIM HTTP | 12 | 0.002 |
http | World Client WDaemon httpd | 11 | 0.002 |
http | WebLogic httpd | 11 | 0.002 |
http | Ubicom httpd | 11 | 0.002 |
http | TP-LINK WR841N WAP http config | 11 | 0.002 |
http | TeamViewer httpd | 11 | 0.002 |
http-proxy | HAVP anti-virus web proxy | 11 | 0.002 |
http | HttpFileServer httpd | 11 | 0.002 |
http | Eserv | 11 | 0.002 |
http | Datum | 11 | 0.002 |
http | avtech httpd | 11 | 0.002 |
shoutcast | SHOUTcast server | 10 | 0.002 |
rtsp | 10 | 0.002 | |
java-rmi | Java RMI | 10 | 0.002 |
http | TP-LINK WR340G WAP http config | 10 | 0.002 |
http-proxy | Haproxy http proxy | 10 | 0.002 |
http | Panasonic webcam http config | 10 | 0.002 |
http | MS-SDK-HttpServer | 10 | 0.002 |
http | IronPort WSA firewall http admin | 10 | 0.002 |
http | Check Point R65 firewall http config | 10 | 0.002 |