~197 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
http | 61520 | 31.207 | |
ftp | NcFTPd | 47886 | 24.291 |
no match | -/- | 37813 | 19.181 |
http | thttpd | 11632 | 5.901 |
http | SonicWALL | 3488 | 1.769 |
chat | AIM or ICQ server | 2576 | 1.307 |
telnet | Alcatel/Thomson SpeedTouch DSL router admin interface | 2316 | 1.175 |
ssh | OpenSSH | 1963 | 0.996 |
http | Apache | 1694 | 0.859 |
telnet | Sony PCS-G50 telnetd | 1489 | 0.755 |
http | NetEngine Server 1.0 | 1484 | 0.753 |
http-proxy | 3Proxy http proxy | 1385 | 0.703 |
upnp | SuperMicro IPMI UPnP | 1206 | 0.612 |
http | SAP J2EE Engine httpd | 1006 | 0.51 |
http | lighttpd | 956 | 0.485 |
telnet | Sony PCS-1 telnetd | 902 | 0.458 |
telnet | Linux telnetd | 842 | 0.427 |
http | MiniServ | 797 | 0.404 |
http | Panasonic BB-HCM331 Network Camera http config | 757 | 0.384 |
msdtc | Microsoft Distributed Transaction Coordinator | 696 | 0.353 |
http | AIM | 661 | 0.335 |
http | Microsoft IIS httpd | 569 | 0.289 |
http | Microsoft HTTPAPI httpd | 568 | 0.288 |
http | uTorrent WebUI | 535 | 0.271 |
http | Boa HTTPd | 441 | 0.224 |
soap | gSOAP soap | 429 | 0.218 |
ssl | TLS | 420 | 0.213 |
ftp | FileZilla ftpd | 400 | 0.203 |
vnc | VNC | 332 | 0.168 |
http | mini_httpd | 298 | 0.151 |
irc-proxy | psyBNC | 291 | 0.148 |
http | OpenMG Authentication Server | 287 | 0.146 |
socks5 | 259 | 0.131 | |
http | Apache Tomcat/Coyote JSP engine | 230 | 0.117 |
http | Netwave IP camera http config | 215 | 0.109 |
telnet | Sony PCS-G70 telnetd | 184 | 0.093 |
ssh | 177 | 0.09 | |
http | ZNC IRC bouncer http config | 175 | 0.089 |
http | Avtech AVN801 network camera | 169 | 0.086 |
remoting | MS .NET Remoting services | 163 | 0.083 |
upnp | Portable SDK for UPnP devices | 150 | 0.076 |
ftp | Microsoft ftpd | 148 | 0.075 |
http | Panasonic WV-NS202A webcam http config | 140 | 0.071 |
ftp | ProFTPD | 140 | 0.071 |
ftp | 131 | 0.066 | |
honeywell-ripsd | Honeywell ripsd power management server | 125 | 0.063 |
http | DrcomServer1.0 | 120 | 0.061 |
http | Aimetis InfoService httpd | 118 | 0.06 |
http | GoAhead-Webs httpd | 117 | 0.059 |
http | Jetty | 115 | 0.058 |
telnet | Sony PCS-TL30 telnetd | 114 | 0.058 |
http | MMadmServ | 114 | 0.058 |
eggdrop | Eggdrop IRC bot console | 100 | 0.051 |
http | Allegro RomPager | 98 | 0.05 |
telnet | Sony PCS-TL50 telnetd | 95 | 0.048 |
http | GoAhead-Webs | 92 | 0.047 |
telnet | Sony PCS-11 telnetd | 91 | 0.046 |
pcanywheredata | Symantec pcAnywhere | 89 | 0.045 |
http | Httpd | 86 | 0.044 |
http | WangWnagSimpleServer | 80 | 0.041 |
http | nginx | 80 | 0.041 |
http | Panasonic webcam http config | 78 | 0.04 |
mysql | MySQL | 76 | 0.039 |
ftp | Pure-FTPd | 76 | 0.039 |
http | Mbedthis-Appweb | 73 | 0.037 |
http | D-Link DIR-300 WAP http admin | 71 | 0.036 |
irc-proxy | dircproxy | 69 | 0.035 |
xml | 68 | 0.034 | |
http | micro_httpd | 68 | 0.034 |
donkey | MLDonkey multi-network P2P server | 68 | 0.034 |
upnp | Intel UPnP reference SDK | 67 | 0.034 |
http | GoAhead-Webs embedded httpd | 67 | 0.034 |
ftp | Serv-U ftpd | 65 | 0.033 |
backdoor | OptixPro backdoor | 65 | 0.033 |
http | Hikvision-Webs | 63 | 0.032 |
http | Polycom SoundPoint VoIP phone http config | 62 | 0.031 |
ssh | Dropbear sshd | 61 | 0.031 |
http | Muratec Server Ver.1.1 | 61 | 0.031 |
ftp | vsftpd | 61 | 0.031 |
telnet | 60 | 0.03 | |
sybase-adaptive | Sybase Adaptive Server | 60 | 0.03 |
http | NET-DK | 59 | 0.03 |
http | WYM httpd | 58 | 0.029 |
http | uc-httpd | 58 | 0.029 |
http-proxy | Squid http proxy | 55 | 0.028 |
http | MikroTik router config httpd | 55 | 0.028 |
http | http server 1.0 | 55 | 0.028 |
vnc | RealVNC Personal | 54 | 0.027 |
vnc | 52 | 0.026 | |
http | ver2.4 rev0 | 48 | 0.024 |
http | HTTP Server 1.0 | 48 | 0.024 |
vnc | RealVNC Enterprise | 47 | 0.024 |
http | GeoVision GeoHttpServer for webcams | 46 | 0.023 |
http | SAP J2EE Engine | 45 | 0.023 |
http | RemotelyAnywhere remote PC management httpd | 45 | 0.023 |
http | GM Streaming Server httpd | 45 | 0.023 |
http | FLPS | 44 | 0.022 |
http | Transas-NavTech-Server | 43 | 0.022 |
http | DISKPUMP mobile download server | 43 | 0.022 |
http | Buffalo AirStation http config | 42 | 0.021 |
http | PDR-M800 | 41 | 0.021 |
arcserve | ARCserve Discovery | 41 | 0.021 |
upnp | MediaTomb UPnP | 40 | 0.02 |
http | Cross Web Server | 39 | 0.02 |
http | TibetSystem Server 2.0 | 38 | 0.019 |
http | Router | 38 | 0.019 |
bittorrent | Bittorrent P2P client | 38 | 0.019 |
netbios-ssn | 34 | 0.017 | |
http | Intoto httpd | 34 | 0.017 |
http | TP-LINK Router | 33 | 0.017 |
pyro | Python Remote Object Nameserver | 32 | 0.016 |
http | Indy httpd | 32 | 0.016 |
napster | WinMX or Lopster Napster P2P client | 30 | 0.015 |
http | TwistedWeb httpd | 30 | 0.015 |
http | MikroTik router http config | 29 | 0.015 |
smtp | 28 | 0.014 | |
http | Indy | 27 | 0.014 |
smtp | Microsoft ESMTP | 26 | 0.013 |
openvpn | OpenVPN | 26 | 0.013 |
http | POSIX | 26 | 0.013 |
ftp | Gene6 ftpd | 25 | 0.013 |
http | Draytek Vigor ADSL router webadmin | 24 | 0.012 |
vtun | Vtun Virtual Tunnel | 23 | 0.012 |
http | QNAP TS-219P NAS http config | 23 | 0.012 |
rifa-dvr | Rifatron DVR | 22 | 0.011 |
http | Router Webserver | 22 | 0.011 |
http | Microsoft IIS | 22 | 0.011 |
http | DD-WRT milli_httpd | 22 | 0.011 |
http | ADH-Web httpd | 22 | 0.011 |
directconnect | Direct Connect P2P | 22 | 0.011 |
smtp | Postfix smtpd | 21 | 0.011 |
secure-socket | CA Secure Socket Adapter | 21 | 0.011 |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | 21 | 0.011 |
http | iCanWebServer | 21 | 0.011 |
http | httpd 1.1 | 21 | 0.011 |
http | D-Link/Airlink IP webcam http config | 21 | 0.011 |
http | ChipPC Extreme httpd | 21 | 0.011 |
http | BBVS | 21 | 0.011 |
http | Mobotix Camera http config | 20 | 0.01 |
http | fec | 20 | 0.01 |
http | CCcam card sharing system http config | 20 | 0.01 |
http | Web | 19 | 0.01 |
http | dcs-lig-httpd | 19 | 0.01 |
http | CherryPy httpd | 19 | 0.01 |
ssh | Bitvise WinSSHD | 18 | 0.009 |
http | Sagem F@st router httpd | 18 | 0.009 |
http | RapidLogic httpd | 17 | 0.009 |
http | httpd | 17 | 0.009 |
ftp | Synology DiskStation NAS ftpd | 17 | 0.009 |
http | Milestone XProtect video surveillance http interface | 16 | 0.008 |
http | Small Home Server httpd | 15 | 0.008 |
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 15 | 0.008 |
ftp | glFTPd | 15 | 0.008 |
smtp | Symantec Enterprise Security manager smtpd | 14 | 0.007 |
smtp | Microsoft Exchange smtpd | 14 | 0.007 |
http | U S Software Web Server | 14 | 0.007 |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 14 | 0.007 |
http-proxy | F5 BIG-IP load balancer http proxy | 14 | 0.007 |
http | Netgear DG834G router http config | 14 | 0.007 |
http | MS .NET Remoting httpd | 14 | 0.007 |
giop | CORBA naming service | 14 | 0.007 |
zabbix | Zabbix Monitoring System | 13 | 0.007 |
teamspeak | TeamSpeak voice communication | 13 | 0.007 |
rtsp | 13 | 0.007 | |
irc-proxy | ShroudBNC irc-proxy | 13 | 0.007 |
http | WINDOWS | 13 | 0.007 |
http | Thin | 13 | 0.007 |
http | Gadspot/Avtech AV787 webcam http config | 13 | 0.007 |
http | BlueIris-HTTP | 13 | 0.007 |
ftp | Globus GridFTPd | 13 | 0.007 |
flexlm | FlexLM license manager | 13 | 0.007 |
shoutcast | SHOUTcast server | 12 | 0.006 |
netop | NetOp Remote Control | 12 | 0.006 |
http | WindWeb | 12 | 0.006 |
http | Transmission BitTorrent management httpd | 12 | 0.006 |
http | DVR Systems webcam http interface | 12 | 0.006 |
http | BaseHTTPServer | 12 | 0.006 |
audioworks | AudioWorks sound server | 12 | 0.006 |
vnc | Apple remote desktop vnc | 11 | 0.006 |
ssh | WeOnlyDo sshd | 11 | 0.006 |
http | Ubicom | 11 | 0.006 |
http | Secure Computing Sidewinder firewall http admin | 11 | 0.006 |
http | SAP Web Application Server | 11 | 0.006 |
http-proxy | MikroTik http proxy | 11 | 0.006 |
http | Netgear DG834 router http config | 11 | 0.006 |
http | AVT1100 | 11 | 0.006 |
http | AIM HTTP | 11 | 0.006 |
ssh | Cisco SSH | 10 | 0.005 |
smtp | Exim smtpd | 10 | 0.005 |
http | Panasonic DVR slinger http config | 10 | 0.005 |
http | Linksys router http config | 10 | 0.005 |
http | HomeSeer Home Control Web Interface | 10 | 0.005 |
http | AudioCodes Mediant 200 VoIP gateway http config | 10 | 0.005 |