~190 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
no match | -/- | 101245 | 53.221 |
http | 19118 | 10.05 | |
http | Apache | 7207 | 3.788 |
irc | Dancer ircd | 4093 | 2.152 |
http | SonicWALL | 3721 | 1.956 |
eggdrop | Eggdrop IRC bot console | 3170 | 1.666 |
ssh | Cisco/3com IPSSHd | 2722 | 1.431 |
ssl | SSLv3 | 2624 | 1.379 |
chat | AIM or ICQ server | 2456 | 1.291 |
http | wg_httpd | 2370 | 1.246 |
ssh | OpenSSH | 2302 | 1.21 |
donkey | MLDonkey multi-network P2P server control port | 1956 | 1.028 |
rifa-dvr | Rifatron DVR | 1938 | 1.019 |
http | Thin | 1408 | 0.74 |
http | lighttpd | 1384 | 0.728 |
http | Microsoft IIS httpd | 1369 | 0.72 |
arcserve | ARCserve Discovery | 1230 | 0.647 |
http | TopsecOS | 1179 | 0.62 |
http | WEBrick httpd | 1156 | 0.608 |
http | Boa HTTPd | 1099 | 0.578 |
diablo2 | Diablo 2 game server | 1098 | 0.577 |
telnet | MLDonkey telnetd | 839 | 0.441 |
mysql | MySQL | 819 | 0.431 |
http | Httpd | 791 | 0.416 |
http | Avtech AVN801 network camera | 757 | 0.398 |
http | GeoVision GeoHttpServer for webcams | 710 | 0.373 |
http | AIM | 709 | 0.373 |
telnet | the MIPU Telnet Server | 652 | 0.343 |
http | SNF | 651 | 0.342 |
http | thttpd | 643 | 0.338 |
http | Cross Web Server | 623 | 0.327 |
http | Netwave IP camera http config | 607 | 0.319 |
http | Virata-EmWeb | 534 | 0.281 |
http | mini_httpd | 527 | 0.277 |
http-proxy | 3proxy http proxy | 489 | 0.257 |
vnc | VNC | 450 | 0.237 |
http | ALT-N SecurityGateway httpd | 424 | 0.223 |
audioworks | AudioWorks sound server | 387 | 0.203 |
http | uc-httpd | 378 | 0.199 |
http | Hikvision-Webs | 377 | 0.198 |
http | nginx | 351 | 0.185 |
http | Apache Tomcat/Coyote JSP engine | 286 | 0.15 |
http | D-Link DIR-300 WAP http admin | 280 | 0.147 |
http | Draytek Vigor ADSL router webadmin | 267 | 0.14 |
http | Microsoft HTTPAPI httpd | 261 | 0.137 |
http | GoAhead-Webs httpd | 233 | 0.122 |
http | Gadspot/Avtech AV787 webcam http config | 218 | 0.115 |
http | Mongrel httpd | 212 | 0.111 |
http | TBS | 210 | 0.11 |
telnet | 204 | 0.107 | |
socks-proxy | Socks4A | 203 | 0.107 |
http | PDR-M800 | 194 | 0.102 |
ftp | Microsoft ftpd | 193 | 0.101 |
http | thin 1.2.11 codename Bat-Shit Crazy | 189 | 0.099 |
svnserve | Subversion | 182 | 0.096 |
http | RemotelyAnywhere remote PC management httpd | 180 | 0.095 |
http | DVR Systems webcam http interface | 175 | 0.092 |
http | Mbedthis-Appweb | 172 | 0.09 |
telnet | Linux telnetd | 170 | 0.089 |
irc-proxy | ShroudBNC irc-proxy | 155 | 0.081 |
http | GoAhead-Webs embedded httpd | 153 | 0.08 |
ssh | 151 | 0.079 | |
http | WangWnagSimpleServer | 144 | 0.076 |
http | Gemtek | 139 | 0.073 |
http-proxy | Squid http proxy | 134 | 0.07 |
http | GoldStar iPECS 50B PBX http config | 132 | 0.069 |
remoting | MS .NET Remoting services | 130 | 0.068 |
http | World Client WDaemon httpd | 126 | 0.066 |
http | IBM_HTTP_Server | 126 | 0.066 |
ftp | FileZilla ftpd | 124 | 0.065 |
http | Secure Computing Sidewinder firewall http admin | 122 | 0.064 |
vnc | RealVNC Personal | 121 | 0.064 |
ftp | ProFTPD | 120 | 0.063 |
irc | Unreal ircd | 119 | 0.063 |
http | Allegro RomPager | 118 | 0.062 |
http-proxy | EZproxy web proxy | 116 | 0.061 |
ericom | Ericom PowerTermWebConnect | 116 | 0.061 |
upnp | Portable SDK for UPnP devices | 114 | 0.06 |
http | OracleAS Web Cache 10g | 114 | 0.06 |
http | DrcomServer1.0 | 109 | 0.057 |
ntop-http | Ntop web interface | 107 | 0.056 |
http | Catalyst Framework httpd | 102 | 0.054 |
telnet | SMC SMC2870W Wireless Ethernet Bridge | 100 | 0.053 |
shoutcast | SHOUTcast server | 100 | 0.053 |
http | Jetty | 97 | 0.051 |
ice | Internet Communications Engine | 94 | 0.049 |
ftp | 93 | 0.049 | |
soap | gSOAP soap | 92 | 0.048 |
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 90 | 0.047 |
vnc | 82 | 0.043 | |
http | Netgear DG834 router http config | 80 | 0.042 |
http | MiniServ | 79 | 0.042 |
http | uTorrent WebUI | 77 | 0.04 |
http | Network Camera | 76 | 0.04 |
ssh | Dropbear sshd | 75 | 0.039 |
http | Techno Vision Security System http config | 75 | 0.039 |
http | WindWeb | 72 | 0.038 |
ssl | TLS | 69 | 0.036 |
ftp | Serv-U ftpd | 69 | 0.036 |
http | Netgear DG834G router http config | 68 | 0.036 |
http | GM Streaming Server httpd | 68 | 0.036 |
rtsp | 67 | 0.035 | |
http | Ubuntu | 67 | 0.035 |
http | MS .NET Remoting httpd | 64 | 0.034 |
http | TwistedWeb httpd | 62 | 0.033 |
http | streamts | 60 | 0.032 |
secure-socket | CA Secure Socket Adapter | 57 | 0.03 |
vnc | RealVNC Enterprise | 53 | 0.028 |
activemq | Apache ActiveMQ | 51 | 0.027 |
upnp | Microsoft Windows UPnP | 50 | 0.026 |
http | Indy | 50 | 0.026 |
directconnect | Direct Connect P2P | 50 | 0.026 |
http-proxy | MikroTik http proxy | 49 | 0.026 |
http | Boa httpd | 48 | 0.025 |
socks5 | 47 | 0.025 | |
http | dcs-lig-httpd | 47 | 0.025 |
tandem-print | Sharp printer tandem printing | 44 | 0.023 |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | 44 | 0.023 |
ftp | Pure-FTPd | 40 | 0.021 |
http | GoAhead-Webs | 39 | 0.021 |
http | uClinux-httpd | 38 | 0.02 |
http-proxy | CCProxy http proxy | 37 | 0.019 |
ftp | vsftpd | 36 | 0.019 |
http | Vivotek IP7131 Network Camera http config | 35 | 0.018 |
http | TP-LINK Router | 34 | 0.018 |
http | Node.js | 34 | 0.018 |
http | DVR | 34 | 0.018 |
http | Intoto httpd | 33 | 0.017 |
ftp | MikroTik router ftpd | 33 | 0.017 |
ftp | Gene6 ftpd | 33 | 0.017 |
ssl | Microsoft IIS SSL | 32 | 0.017 |
http | Rex media encoder http config | 32 | 0.017 |
openvpn | OpenVPN | 31 | 0.016 |
http | WYM httpd | 31 | 0.016 |
http | ProvideX-WebServer | 31 | 0.016 |
xml | 30 | 0.016 | |
rtsp | Avtech MPEG4 DVR control rtspd | 30 | 0.016 |
http | QNAP TS-219P NAS http config | 30 | 0.016 |
http | DD-WRT milli_httpd | 30 | 0.016 |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 29 | 0.015 |
http | MS-SDK-HttpServer | 29 | 0.015 |
http | ImagiaTek | 29 | 0.015 |
http | CherryPy httpd | 29 | 0.015 |
smtp | Microsoft ESMTP | 28 | 0.015 |
http | HTTPServer | 28 | 0.015 |
smtp | Postfix smtpd | 27 | 0.014 |
http | W3MFC | 27 | 0.014 |
http | PasteWSGIServer | 27 | 0.014 |
http | Linksys router http config | 27 | 0.014 |
http | Netgear DG834GT router http config | 26 | 0.014 |
http | MikroTik router config httpd | 26 | 0.014 |
http | Icecast streaming media server | 26 | 0.014 |
http | httpd 1.1 | 26 | 0.014 |
vnc-http | Ultr@VNC | 24 | 0.013 |
lns | Legalis Intranet legal information server | 24 | 0.013 |
http | Vivotek 3102 Camera http config | 24 | 0.013 |
http | TRMB | 24 | 0.013 |
http | MoxaHttp | 24 | 0.013 |
telnet | the MRV Communications' LX Series Server | 23 | 0.012 |
http | Router | 23 | 0.012 |
http | httpd | 23 | 0.012 |
http | 4D_v12 httpd | 23 | 0.012 |
irc-proxy | psyBNC | 22 | 0.012 |
http | Z-World Rabbit | 22 | 0.012 |
http | WebServer | 22 | 0.012 |
telnet | the MRV Communications' LX Series Console Server | 21 | 0.011 |
ssh | Cisco SSH | 21 | 0.011 |
smtp | Microsoft Exchange smtpd | 21 | 0.011 |
nntp | INN nntpd | 21 | 0.011 |
netbios-ssn | 21 | 0.011 | |
http | HP Integrated Lights-Out http config | 21 | 0.011 |
http | D-Link/Airlink IP webcam http config | 21 | 0.011 |
http | http server 1.0 | 20 | 0.011 |
eggdrop | Eggdrop irc bot console | 20 | 0.011 |
telnet | Efficient router telnetd | 19 | 0.01 |
http | Vivotek Network Camera | 19 | 0.01 |
http | uhttpd | 19 | 0.01 |
http | Oracle-Web-Cache | 19 | 0.01 |
http | http server | 19 | 0.01 |
telnet | CircleMUD telnetd | 18 | 0.009 |
http | T-Com Speedport W 501V WAP http config | 18 | 0.009 |
http | HttpFileServer httpd | 18 | 0.009 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 18 | 0.009 |
smtp | 17 | 0.009 | |
http | Sagem F@st router httpd | 17 | 0.009 |
http | NEC Electra Elite IPK II WebPro | 17 | 0.009 |
http | Mobotix Camera http config | 17 | 0.009 |
http | Lantronix XPort embedded ethernet http config | 17 | 0.009 |
http | DreamConnection WebServer V0.2 | 17 | 0.009 |
http | CCcam card sharing system http config | 17 | 0.009 |
vnc | Apple remote desktop vnc | 16 | 0.008 |
telnet | Draytek Vigor ADSL router telnetd | 16 | 0.008 |
http | Wireless Network Camera | 16 | 0.008 |
http | Ubicom httpd | 16 | 0.008 |
http-proxy | F5 BIG-IP load balancer http proxy | 16 | 0.008 |
http | build-in http server | 16 | 0.008 |
ssh | SunSSH | 15 | 0.008 |
http | WebFS httpd | 15 | 0.008 |
http | T-Com Speedport W 501V http config | 15 | 0.008 |
http | MultView WEB Server V1.1 | 15 | 0.008 |
http | D-Link DCS-920 webcam http config | 15 | 0.008 |
http | D-Link DCS-910 webcam http config | 15 | 0.008 |
http | Caucho Resin JSP engine | 15 | 0.008 |
http | Buffalo AirStation http config | 15 | 0.008 |
vnc-http | RealVNC | 14 | 0.007 |
ssh | WeOnlyDo sshd | 14 | 0.007 |
ssh | Bitvise WinSSHD | 14 | 0.007 |
http | WindRiver-WebServer | 14 | 0.007 |
http | uTorrent utserver web interface | 14 | 0.007 |
http | TornadoServer | 14 | 0.007 |
http | Microsoft ISA httpd | 14 | 0.007 |
http | Gnway Web Server | 14 | 0.007 |
citrix-ica | Citrix Metaframe XP ICA | 14 | 0.007 |
telnet | Cisco 1721 router telnetd | 13 | 0.007 |
telnet | Allied Telesis x900-series switch telnetd | 13 | 0.007 |
ssl | TLSv1 | 13 | 0.007 |
http | OwnServer1.0 | 13 | 0.007 |
vnc-http | VNC Server Enterprise Edition httpd | 12 | 0.006 |
ssh | MikroTik RouterOS sshd | 12 | 0.006 |
insight-manager | Consul InSight Manager | 12 | 0.006 |
http | webserver | 12 | 0.006 |
http | WebLogic httpd | 12 | 0.006 |
http | webcamXP httpd | 12 | 0.006 |
http | TeamViewer httpd | 12 | 0.006 |
http | statusd | 12 | 0.006 |
http | Net-OS 5.xx UPnP | 12 | 0.006 |
http | Microsoft-HTTPAPI | 12 | 0.006 |
http | HTTP Software 1.1 | 12 | 0.006 |
http | AIM HTTP | 12 | 0.006 |
memcache | memcached | 11 | 0.006 |
http | Oracle 9iAS Web Cache | 11 | 0.006 |
http | NetTalk-WebServer | 11 | 0.006 |
http | emBetter | 11 | 0.006 |
http | Dreambox httpd | 11 | 0.006 |
damewaremr | DameWare Mini Remote Control | 11 | 0.006 |
storagecraft-image | StorageCraft Image Manager | 10 | 0.005 |
http | VPON Server | 10 | 0.005 |
http | Ubicom | 10 | 0.005 |
http | Transmission BitTorrent management httpd | 10 | 0.005 |
http | SonicWALL firewall http config | 10 | 0.005 |
http | m0n0wall FreeBSD firewall web interface | 10 | 0.005 |
http | Lotus Domino httpd | 10 | 0.005 |
http | Keil-EWEB | 10 | 0.005 |
http | David WebBox httpd | 10 | 0.005 |
bandwidth-test | MikroTik bandwidth-test server | 10 | 0.005 |