~190 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Count | Percent |
---|---|---|---|---|
no match | -/- | -/- | 101245 | 53.221 |
http | 19118 | 10.05 | ||
irc | Dancer ircd | 4093 | 2.152 | |
http | SonicWALL | 3721 | 1.956 | |
http | Apache | 2.2.16 | 3304 | 1.737 |
eggdrop | Eggdrop IRC bot console | 1.6.21 | 3167 | 1.665 |
ssh | Cisco/3com IPSSHd | 6.5.0 | 2722 | 1.431 |
ssl | SSLv3 | 2624 | 1.379 | |
chat | AIM or ICQ server | 2456 | 1.291 | |
http | wg_httpd | 1.0(based Boa | 2370 | 1.246 |
rifa-dvr | Rifatron DVR | 1938 | 1.019 | |
donkey | MLDonkey multi-network P2P server control port | 1924 | 1.011 | |
ssh | OpenSSH | 4.3 | 1567 | 0.824 |
arcserve | ARCserve Discovery | 1230 | 0.647 | |
http | TopsecOS | 1179 | 0.62 | |
http | WEBrick httpd | 1.3.1 | 1156 | 0.608 |
diablo2 | Diablo 2 game server | 1098 | 0.577 | |
http | Apache | 2.2.14 | 893 | 0.469 |
http | Httpd | 1.0 | 791 | 0.416 |
http | Avtech AVN801 network camera | 1.0 | 757 | 0.398 |
http | GeoVision GeoHttpServer for webcams | 710 | 0.373 | |
http | AIM | 1.0 | 709 | 0.373 |
http | Microsoft IIS httpd | 6.0 | 662 | 0.348 |
telnet | the MIPU Telnet Server | 652 | 0.343 | |
http | Apache | 652 | 0.343 | |
http | SNF | 0.1 | 651 | 0.342 |
http | Cross Web Server | 623 | 0.327 | |
http | Thin | 1.2.4 | 618 | 0.325 |
http | Netwave IP camera http config | 607 | 0.319 | |
http | Boa HTTPd | 0.94.14rc21 | 559 | 0.294 |
http | Virata-EmWeb | 6.0.1 | 526 | 0.277 |
http | mini_httpd | 1.19 19dec2003 | 515 | 0.271 |
http | lighttpd | 1.4.29 | 493 | 0.259 |
http-proxy | 3proxy http proxy | 489 | 0.257 | |
http | Thin | 1.3.1 | 485 | 0.255 |
http | lighttpd | 1.4.19 | 478 | 0.251 |
http | Boa HTTPd | 0.94.13 | 470 | 0.247 |
vnc | VNC | 450 | 0.237 | |
http | Apache | 2.2.22 | 438 | 0.23 |
mysql | MySQL | 5.0.51a-24+lenny5-log | 434 | 0.228 |
audioworks | AudioWorks sound server | 387 | 0.203 | |
http | uc-httpd | 1.0.0 | 378 | 0.199 |
http | Hikvision-Webs | 377 | 0.198 | |
http | Apache | 2.2.15 | 319 | 0.168 |
http | Apache Tomcat/Coyote JSP engine | 1.1 | 286 | 0.15 |
http | D-Link DIR-300 WAP http admin | 280 | 0.147 | |
http | Draytek Vigor ADSL router webadmin | 267 | 0.14 | |
http | ALT-N SecurityGateway httpd | 2.0.7 | 254 | 0.134 |
http | Microsoft HTTPAPI httpd | 2.0 | 240 | 0.126 |
http | GoAhead-Webs httpd | 233 | 0.122 | |
http | Microsoft IIS httpd | 7.5 | 222 | 0.117 |
http | Gadspot/Avtech AV787 webcam http config | 218 | 0.115 | |
http | TBS | R2 UPnP | 210 | 0.11 |
telnet | 204 | 0.107 | ||
socks-proxy | Socks4A | 203 | 0.107 | |
http | Apache | 1.3.22 | 197 | 0.104 |
http | PDR-M800 | 1.0 | 194 | 0.102 |
mysql | MySQL | 4.1.18 | 191 | 0.1 |
http | Thin | 1.4.1 | 189 | 0.099 |
http | thin 1.2.11 codename Bat-Shit Crazy | 189 | 0.099 | |
svnserve | Subversion | 182 | 0.096 | |
http | Mongrel httpd | 1.1.5 | 175 | 0.092 |
http | DVR Systems webcam http interface | 175 | 0.092 | |
ftp | Microsoft ftpd | 175 | 0.092 | |
telnet | Linux telnetd | 170 | 0.089 | |
http | thttpd | 2.25b 29dec2003 | 170 | 0.089 |
http | Microsoft IIS httpd | 169 | 0.089 | |
http | Apache | 2.2.3 | 168 | 0.088 |
http | Mbedthis-Appweb | 2.0.4 | 165 | 0.087 |
http | Apache | 1.3.6 | 156 | 0.082 |
http | GoAhead-Webs embedded httpd | 153 | 0.08 | |
irc-proxy | ShroudBNC irc-proxy | 1.2 revision 1080 | 152 | 0.08 |
ssh | 151 | 0.079 | ||
http | thttpd | 150 | 0.079 | |
telnet | MLDonkey telnetd | 3.1.0 | 145 | 0.076 |
http | WangWnagSimpleServer | 1.0 | 144 | 0.076 |
http | Gemtek | 0.899 | 139 | 0.073 |
http | lighttpd | 1.4.26 | 138 | 0.073 |
http | GoldStar iPECS 50B PBX http config | 132 | 0.069 | |
http | Microsoft IIS httpd | 5.0 | 131 | 0.069 |
remoting | MS .NET Remoting services | 130 | 0.068 | |
http | IBM_HTTP_Server | 6.0.2.27 Apache | 126 | 0.066 |
http | Secure Computing Sidewinder firewall http admin | 122 | 0.064 | |
vnc | RealVNC Personal | 121 | 0.064 | |
irc | Unreal ircd | 119 | 0.063 | |
http-proxy | EZproxy web proxy | 116 | 0.061 | |
ericom | Ericom PowerTermWebConnect | 1.0 | 116 | 0.061 |
upnp | Portable SDK for UPnP devices | 1.3.1 | 113 | 0.059 |
http | Microsoft IIS httpd | 7.0 | 112 | 0.059 |
http | DrcomServer1.0 | 109 | 0.057 | |
http | Apache | 2.2.8 | 106 | 0.056 |
telnet | SMC SMC2870W Wireless Ethernet Bridge | 100 | 0.053 | |
http | lighttpd | 1.4.28 | 99 | 0.052 |
http | Apache | 2.2.9 | 99 | 0.052 |
http | Catalyst Framework httpd | 5.90007 | 95 | 0.05 |
http | Apache | 2.2.2 | 95 | 0.05 |
ice | Internet Communications Engine | 94 | 0.049 | |
http | lighttpd | 1.4.20 | 93 | 0.049 |
http | Apache | 2.2.17 | 93 | 0.049 |
ftp | 93 | 0.049 | ||
telnet | MLDonkey telnetd | 3.0.7 | 91 | 0.048 |
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 90 | 0.047 | |
ntop-http | Ntop web interface | 3.3 | 86 | 0.045 |
shoutcast | SHOUTcast server | 1.9.8 | 85 | 0.045 |
http | Apache | 2.2.13 | 85 | 0.045 |
http | ALT-N SecurityGateway httpd | 2.0.6 | 84 | 0.044 |
vnc | 82 | 0.043 | ||
soap | gSOAP soap | 2.6 | 81 | 0.043 |
http | Apache | 2.2.21 | 81 | 0.043 |
http | thttpd | 2.25b | 80 | 0.042 |
http | RemotelyAnywhere remote PC management httpd | 8.0.668 | 80 | 0.042 |
http | OracleAS Web Cache 10g | 9.0.4.0.0 | 80 | 0.042 |
http | Netgear DG834 router http config | 80 | 0.042 | |
http | Apache | 1.3.9 (Unix) (Red Hat | 79 | 0.042 |
http | thttpd | 2.24 26oct2003 | 78 | 0.041 |
telnet | MLDonkey telnetd | 2.9.3 | 77 | 0.04 |
http | uTorrent WebUI | 77 | 0.04 | |
http | Network Camera | 76 | 0.04 | |
http | Techno Vision Security System http config | 2.0 | 75 | 0.039 |
http | nginx | 1.0.10 | 74 | 0.039 |
telnet | MLDonkey telnetd | 3.0.3 | 73 | 0.038 |
http | Microsoft IIS httpd | 5.1 | 73 | 0.038 |
ssh | OpenSSH | 5.3 | 72 | 0.038 |
http | WindWeb | 2.0 | 70 | 0.037 |
telnet | MLDonkey telnetd | 3.0.0 | 69 | 0.036 |
ssl | TLS | 1.0 | 69 | 0.036 |
telnet | MLDonkey telnetd | 3.0.6 | 68 | 0.036 |
http | Netgear DG834G router http config | 68 | 0.036 | |
http | GM Streaming Server httpd | 68 | 0.036 | |
rtsp | 67 | 0.035 | ||
http | Ubuntu | lucid UPnP | 67 | 0.035 |
ssh | OpenSSH | 5.1p1 Debian 5 | 65 | 0.034 |
http | Thin | 1.2.7 | 64 | 0.034 |
http | MS .NET Remoting httpd | 64 | 0.034 | |
http | World Client WDaemon httpd | 4.0 | 61 | 0.032 |
http | streamts | 60 | 0.032 | |
telnet | MLDonkey telnetd | 3.0.0.CVS | 58 | 0.03 |
ssh | OpenSSH | 3.9p1 | 58 | 0.03 |
http | Allegro RomPager | 4.07 UPnP/1.0 | 58 | 0.03 |
secure-socket | CA Secure Socket Adapter | 57 | 0.03 | |
vnc | RealVNC Enterprise | 53 | 0.028 | |
telnet | MLDonkey telnetd | 3.0.1 | 53 | 0.028 |
activemq | Apache ActiveMQ | 51 | 0.027 | |
upnp | Microsoft Windows UPnP | 50 | 0.026 | |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | 50 | 0.026 |
directconnect | Direct Connect P2P | 50 | 0.026 | |
http-proxy | MikroTik http proxy | 49 | 0.026 | |
http | Boa httpd | 48 | 0.025 | |
socks5 | 47 | 0.025 | ||
http | dcs-lig-httpd | 47 | 0.025 | |
ftp | FileZilla ftpd | 0.9.41 beta | 46 | 0.024 |
http | Allegro RomPager | 4.51 UPnP/1.0 | 45 | 0.024 |
tandem-print | Sharp printer tandem printing | 44 | 0.023 | |
http | TwistedWeb httpd | 8.2.0 | 44 | 0.023 |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | 44 | 0.023 | |
http | Apache | 1.3.28 | 44 | 0.023 |
http | thttpd | 2.24 | 43 | 0.023 |
http | ALT-N SecurityGateway httpd | 2.0.4 | 42 | 0.022 |
ftp | Serv-U ftpd | 42 | 0.022 | |
http | nginx | 41 | 0.022 | |
http | Apache | 1.3.41 | 40 | 0.021 |
ftp | Pure-FTPd | 40 | 0.021 | |
http | uClinux-httpd | 0.2.2 | 38 | 0.02 |
telnet | MLDonkey telnetd | 3.1.1 | 37 | 0.019 |
http-proxy | CCProxy http proxy | 37 | 0.019 | |
http | nginx | 0.8.54 | 37 | 0.019 |
telnet | MLDonkey telnetd | 3.1.2 | 36 | 0.019 |
http-proxy | Squid http proxy | 2.7.STABLE9 | 36 | 0.019 |
http | Vivotek IP7131 Network Camera http config | 35 | 0.018 | |
http | lighttpd | 35 | 0.018 | |
http | GoAhead-Webs | 35 | 0.018 | |
http | Apache | 2.2.11 | 35 | 0.018 |
http | TP-LINK Router | 34 | 0.018 | |
http | Node.js | 34 | 0.018 | |
http | DVR | 34 | 0.018 | |
ftp | vsftpd | 2.0.8 or later | 34 | 0.018 |
ssh | Dropbear sshd | 0.52 | 33 | 0.017 |
http | Intoto httpd | 1.0 | 33 | 0.017 |
ssl | Microsoft IIS SSL | 32 | 0.017 | |
http | MiniServ | 0.01 | 32 | 0.017 |
openvpn | OpenVPN | 31 | 0.016 | |
http | WYM httpd | 1.0 | 31 | 0.016 |
xml | 30 | 0.016 | ||
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | 30 | 0.016 |
ssh | OpenSSH | 4.3p2 | 30 | 0.016 |
rtsp | Avtech MPEG4 DVR control rtspd | 30 | 0.016 | |
http | QNAP TS-219P NAS http config | 1.0 | 30 | 0.016 |
http | DD-WRT milli_httpd | 30 | 0.016 | |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 29 | 0.015 | |
http | MS-SDK-HttpServer | 1.0 | 29 | 0.015 |
http | ImagiaTek | 29 | 0.015 | |
ftp | MikroTik router ftpd | 3.30 | 29 | 0.015 |
http | Jetty | 6.1.x | 28 | 0.015 |
http | HTTPServer | 28 | 0.015 | |
telnet | MLDonkey telnetd | 2.9.5.CVS | 27 | 0.014 |
smtp | Postfix smtpd | 27 | 0.014 | |
http | RemotelyAnywhere remote PC management httpd | 10.0.1086 | 27 | 0.014 |
http | PasteWSGIServer | 0.5 | 27 | 0.014 |
http | Linksys router http config | 27 | 0.014 | |
http | Apache | 2.0.53 | 27 | 0.014 |
donkey | MLDonkey multi-network P2P server control port | 2.8.2 | 27 | 0.014 |
ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | 26 | 0.014 |
ssh | OpenSSH | 5.8 | 26 | 0.014 |
http | Netgear DG834GT router http config | 26 | 0.014 | |
http | MiniServ | 1.580 | 26 | 0.014 |
http | MikroTik router config httpd | 26 | 0.014 | |
http | Icecast streaming media server | 26 | 0.014 | |
http | httpd 1.1 | 26 | 0.014 | |
vnc-http | Ultr@VNC | 24 | 0.013 | |
lns | Legalis Intranet legal information server | 24 | 0.013 | |
http | Vivotek 3102 Camera http config | 24 | 0.013 | |
http | TRMB | 1.0 | 24 | 0.013 |
http | MoxaHttp | 1.0 | 24 | 0.013 |
http | Apache | 2.0.54 | 24 | 0.013 |
telnet | the MRV Communications' LX Series Server | 23 | 0.012 | |
mysql | MySQL | 23 | 0.012 | |
http | W3MFC | 1.68 | 23 | 0.012 |
http | Router | 23 | 0.012 | |
http | nginx | 1.0.0 | 23 | 0.012 |
http | Apache | 2.2.6 | 23 | 0.012 |
ssh | OpenSSH | 5.4p1 | 22 | 0.012 |
http | Z-World Rabbit | 22 | 0.012 | |
http | httpd | 22 | 0.012 | |
telnet | the MRV Communications' LX Series Console Server | 21 | 0.011 | |
telnet | MLDonkey telnetd | 2.9.5 | 21 | 0.011 |
ssh | Cisco SSH | 1.25 | 21 | 0.011 |
smtp | Microsoft Exchange smtpd | 21 | 0.011 | |
nntp | INN nntpd | 21 | 0.011 | |
netbios-ssn | 21 | 0.011 | ||
http-proxy | Squid http proxy | 2.6.STABLE21 | 21 | 0.011 |
http | Microsoft HTTPAPI httpd | 1.0 | 21 | 0.011 |
http | HP Integrated Lights-Out http config | 21 | 0.011 | |
http | D-Link/Airlink IP webcam http config | 1.0 | 21 | 0.011 |
http | Boa HTTPd | 0.93.15 | 21 | 0.011 |
http | Apache | 0.6.5 | 21 | 0.011 |
ssh | OpenSSH | 5.8p1 Debian 7ubuntu1 | 20 | 0.011 |
http | nginx | 1.2.1 | 20 | 0.011 |
http | nginx | 0.7.67 | 20 | 0.011 |
http | http server 1.0 | 20 | 0.011 | |
http | Apache | 2.2.20 | 20 | 0.011 |
http | Apache | 1.3.27 | 20 | 0.011 |
ftp | Gene6 ftpd | 3.9.0 build 2 | 20 | 0.011 |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze1 | 19 | 0.01 |
ssh | OpenSSH | 5.2 | 19 | 0.01 |
http | Vivotek Network Camera | 19 | 0.01 | |
http | http server | everfocus | 19 | 0.01 |
http | Apache | 2.2.4 | 19 | 0.01 |
ftp | ProFTPD | 1.3.1 | 19 | 0.01 |
ftp | ProFTPD | 19 | 0.01 | |
telnet | Efficient router telnetd | 5.3.20 | 18 | 0.009 |
http | uhttpd | 1.0.0 | 18 | 0.009 |
http | thttpd | 2.23beta1 26may2002 | 18 | 0.009 |
http | T-Com Speedport W 501V WAP http config | 18 | 0.009 | |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 18 | 0.009 | |
ftp | Microsoft ftpd | 5.0 | 18 | 0.009 |
smtp | 17 | 0.009 | ||
http | Thin | 1.2.8 | 17 | 0.009 |
http | Thin | 1.2.5 | 17 | 0.009 |
http | Sagem F@st router httpd | 17 | 0.009 | |
http | ProvideX-WebServer | 1.3.16 | 17 | 0.009 |
http | NEC Electra Elite IPK II WebPro | 17 | 0.009 | |
http | Mobotix Camera http config | 17 | 0.009 | |
http | Lantronix XPort embedded ethernet http config | 17 | 0.009 | |
http | DreamConnection WebServer V0.2 | 17 | 0.009 | |
http | CherryPy httpd | 3.2.0 | 17 | 0.009 |
ftp | FileZilla ftpd | 0.9.40 beta | 17 | 0.009 |
vnc | Apple remote desktop vnc | 16 | 0.008 | |
telnet | MLDonkey telnetd | 3.1.0.CVS | 16 | 0.008 |
telnet | Draytek Vigor ADSL router telnetd | 16 | 0.008 | |
ssh | Dropbear sshd | 0.51 | 16 | 0.008 |
smtp | Microsoft ESMTP | 6.0.3790.4675 | 16 | 0.008 |
http | Wireless Network Camera | 16 | 0.008 | |
http | WebServer | 16 | 0.008 | |
http | Ubicom httpd | 1.1 | 16 | 0.008 |
http-proxy | F5 BIG-IP load balancer http proxy | 16 | 0.008 | |
http | Jetty | 6.1.5 | 16 | 0.008 |
http | build-in http server | 16 | 0.008 | |
http | Apache | 2.2.19 | 16 | 0.008 |
http | Apache | 1.3.33 | 16 | 0.008 |
ftp | FileZilla ftpd | 0.9.37 beta | 16 | 0.008 |
telnet | MLDonkey telnetd | 2.9.6 | 15 | 0.008 |
ssh | OpenSSH | 5.8p2_hpn13v11 | 15 | 0.008 |
ssh | OpenSSH | 5.5 | 15 | 0.008 |
http | WebFS httpd | 1.21 | 15 | 0.008 |
http | T-Com Speedport W 501V http config | 15 | 0.008 | |
http | RemotelyAnywhere remote PC management httpd | 8.0.605 | 15 | 0.008 |
http | Oracle-Web-Cache | 10g (10.1.2) | 15 | 0.008 |
http | MultView WEB Server V1.1 | 15 | 0.008 | |
http | D-Link DCS-920 webcam http config | 15 | 0.008 | |
http | D-Link DCS-910 webcam http config | 15 | 0.008 | |
http | Buffalo AirStation http config | 15 | 0.008 | |
http | Apache | 2.0.55 | 15 | 0.008 |
http | ALT-N SecurityGateway httpd | 2.0.2 | 15 | 0.008 |
http | 4D_v12 httpd | 12.3.0 | 15 | 0.008 |
ftp | FileZilla ftpd | 0.9.29 beta | 15 | 0.008 |