~84 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
telnet | Netgear broadband router or ZyXel VoIP adapter telnetd | 39992 | 47.514 |
http | 10401 | 12.357 | |
irc-proxy | psyBNC | 5721 | 6.797 |
no match | -/- | 4741 | 5.633 |
irc | Dancer ircd | 4025 | 4.782 |
http | SonicWALL | 3642 | 4.327 |
http | Microsoft HTTPAPI httpd | 3554 | 4.223 |
chat | AIM or ICQ server | 2209 | 2.625 |
eggdrop | Eggdrop IRC bot console | 1888 | 2.243 |
http | streamts (ps) | 1811 | 2.152 |
ssh | OpenSSH | 711 | 0.845 |
http | lighttpd | 667 | 0.792 |
http | AIM | 646 | 0.768 |
http | Apache | 460 | 0.547 |
http-proxy | Squid http proxy | 283 | 0.336 |
http | ServerView Remote Management iRMC S3 Webserver | 236 | 0.28 |
http | Microsoft IIS httpd | 196 | 0.233 |
irc-proxy | ShroudBNC irc-proxy | 158 | 0.188 |
http | GoAhead-Webs httpd | 103 | 0.122 |
http | Apache Tomcat/Coyote JSP engine | 102 | 0.121 |
http | ZNC IRC bouncer http config | 101 | 0.12 |
ssh | 98 | 0.116 | |
ssh | Dropbear sshd | 75 | 0.089 |
vnc | VNC | 65 | 0.077 |
telnet | 60 | 0.071 | |
http | uTorrent WebUI | 59 | 0.07 |
http | nginx | 58 | 0.069 |
http | Netwave IP camera http config | 57 | 0.068 |
http | Avtech AVN801 network camera | 53 | 0.063 |
smtp | Postfix smtpd | 51 | 0.061 |
irc | Unreal ircd | 51 | 0.061 |
http | Boa HTTPd | 50 | 0.059 |
http | DrayTek Vigor 2800-series ADSL router httpd | 49 | 0.058 |
http | ZNC IRC bouncer httpd | 48 | 0.057 |
http | GoAhead-Webs | 40 | 0.048 |
ftp | 37 | 0.044 | |
http-proxy | 3Proxy http proxy | 36 | 0.043 |
http | thttpd | 35 | 0.042 |
http | PDR-M800 | 34 | 0.04 |
mysql | MySQL | 33 | 0.039 |
http | FLPS | 33 | 0.039 |
ftp | FileZilla ftpd | 33 | 0.039 |
http | Icecast streaming media server | 32 | 0.038 |
directconnect | Direct Connect P2P | 31 | 0.037 |
shell | w4ck1ng-shell | 30 | 0.036 |
http | Allegro RomPager | 28 | 0.033 |
meterpreter | Metasploit meterpreter metsvc | 25 | 0.03 |
http | Jetty | 24 | 0.029 |
http | Hikvision-Webs | 24 | 0.029 |
ssh | SCS sshd | 23 | 0.027 |
http | MiniServ | 23 | 0.027 |
ftp | Microsoft ftpd | 23 | 0.027 |
sip | mini_httpd/1.19 19dec2003 | 21 | 0.025 |
ssh | AllegroSoft RomSShell sshd | 18 | 0.021 |
http | mini_httpd | 18 | 0.021 |
ftp | Serv-U ftpd | 18 | 0.021 |
ftp | Pure-FTPd | 18 | 0.021 |
ftp | ProFTPD | 18 | 0.021 |
smtp | Microsoft ESMTP | 17 | 0.02 |
http | Intoto httpd | 17 | 0.02 |
sip | thttpd/2.25b 29dec2003 | 15 | 0.018 |
http | GeoVision GeoHttpServer for webcams | 15 | 0.018 |
sip | 14 | 0.017 | |
http-proxy | Tinyproxy | 14 | 0.017 |
vnc | RealVNC Enterprise | 13 | 0.015 |
svnserve | Subversion | 13 | 0.015 |
ssl | TLS | 13 | 0.015 |
http | uc-httpd | 13 | 0.015 |
http-proxy | ziproxy http proxy | 13 | 0.015 |
http-proxy | MikroTik http proxy | 13 | 0.015 |
ssh | F-Secure sshd | 12 | 0.014 |
ftp | vsftpd | 12 | 0.014 |
eggdrop | Eggdrop irc bot console | 12 | 0.014 |
vnc | 11 | 0.013 | |
upnp | Portable SDK for UPnP devices | 11 | 0.013 |
upnp | Microsoft Windows UPnP | 11 | 0.013 |
smtp | 11 | 0.013 | |
rtsp | 11 | 0.013 | |
http | Mbedthis-Appweb | 11 | 0.013 |
http | CherryPy httpd | 11 | 0.013 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 11 | 0.013 |
ftp | glFTPd | 11 | 0.013 |
vnc | RealVNC Personal | 10 | 0.012 |
socks5 | 10 | 0.012 | |
smtp | Microsoft Exchange smtpd | 10 | 0.012 |
smtp | Exim smtpd | 10 | 0.012 |
sip | Mbedthis-AppWeb/2.0.4 | 10 | 0.012 |
http-proxy | F5 BIG-IP load balancer http proxy | 10 | 0.012 |
http | GoAhead-Webs embedded httpd | 10 | 0.012 |
http | Cross Web Server | 10 | 0.012 |