~197 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Count | Percent |
---|---|---|---|---|
http | 61520 | 31.207 | ||
ftp | NcFTPd | 47886 | 24.291 | |
no match | -/- | -/- | 37813 | 19.181 |
http | thttpd | 11313 | 5.739 | |
http | SonicWALL | 3488 | 1.769 | |
chat | AIM or ICQ server | 2576 | 1.307 | |
telnet | Alcatel/Thomson SpeedTouch DSL router admin interface | 2316 | 1.175 | |
telnet | Sony PCS-G50 telnetd | 1489 | 0.755 | |
http | NetEngine Server 1.0 | 1484 | 0.753 | |
http-proxy | 3Proxy http proxy | 1385 | 0.703 | |
upnp | SuperMicro IPMI UPnP | 1206 | 0.612 | |
telnet | Sony PCS-1 telnetd | 902 | 0.458 | |
telnet | Linux telnetd | 842 | 0.427 | |
http | Panasonic BB-HCM331 Network Camera http config | 757 | 0.384 | |
msdtc | Microsoft Distributed Transaction Coordinator | 696 | 0.353 | |
http | AIM | 1.0 | 661 | 0.335 |
http | uTorrent WebUI | 535 | 0.271 | |
ssh | OpenSSH | 4.3 | 521 | 0.264 |
http | Microsoft HTTPAPI httpd | 2.0 | 520 | 0.264 |
http | Apache | 511 | 0.259 | |
http | lighttpd | 1.4.19 | 435 | 0.221 |
soap | gSOAP soap | 2.7 | 428 | 0.217 |
ssl | TLS | 1.0 | 420 | 0.213 |
http | Microsoft IIS httpd | 419 | 0.213 | |
http | SAP J2EE Engine httpd | 7.00 | 405 | 0.205 |
http | MiniServ | 0.01 | 394 | 0.2 |
http | SAP J2EE Engine httpd | 7.01 | 358 | 0.182 |
vnc | VNC | 332 | 0.168 | |
http | mini_httpd | 1.19 19dec2003 | 298 | 0.151 |
http | OpenMG Authentication Server | 287 | 0.146 | |
http | Boa HTTPd | 0.94.14rc21 | 276 | 0.14 |
socks5 | 259 | 0.131 | ||
http | Apache Tomcat/Coyote JSP engine | 1.1 | 230 | 0.117 |
http | lighttpd | 1.4.29 | 227 | 0.115 |
http | Netwave IP camera http config | 215 | 0.109 | |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | 210 | 0.107 |
http | SAP J2EE Engine httpd | 7.02 | 203 | 0.103 |
telnet | Sony PCS-G70 telnetd | 184 | 0.093 | |
ssh | 177 | 0.09 | ||
http | ZNC IRC bouncer http config | 0.097 or later | 175 | 0.089 |
http | Avtech AVN801 network camera | 1.0 | 169 | 0.086 |
http | Apache | 2.2.22 | 166 | 0.084 |
remoting | MS .NET Remoting services | 163 | 0.083 | |
irc-proxy | psyBNC | 2.3.2-7 | 151 | 0.077 |
http | lighttpd | 150 | 0.076 | |
http | thttpd | 2.25b | 144 | 0.073 |
http | MiniServ | 1.590 | 142 | 0.072 |
http | Panasonic WV-NS202A webcam http config | 140 | 0.071 | |
http | Apache | 2.2.13 | 140 | 0.071 |
ftp | Microsoft ftpd | 140 | 0.071 | |
ftp | FileZilla ftpd | 0.9.41 beta | 134 | 0.068 |
ftp | 131 | 0.066 | ||
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | 127 | 0.064 |
honeywell-ripsd | Honeywell ripsd power management server | 125 | 0.063 | |
http | MiniServ | 1.580 | 124 | 0.063 |
ssh | OpenSSH | 5.3 | 122 | 0.062 |
http | DrcomServer1.0 | 120 | 0.061 | |
http | GoAhead-Webs httpd | 117 | 0.059 | |
upnp | Portable SDK for UPnP devices | 1.6.6 | 115 | 0.058 |
telnet | Sony PCS-TL30 telnetd | 114 | 0.058 | |
http | Apache | 2.2.14 | 113 | 0.057 |
http | MMadmServ | MMadmServ | 111 | 0.056 |
irc-proxy | psyBNC | 2.3.2-9 | 100 | 0.051 |
http | Apache | 2.2.3 | 100 | 0.051 |
http | Apache | 2.2.17 | 100 | 0.051 |
http | Apache | 1.3.6 | 100 | 0.051 |
telnet | Sony PCS-TL50 telnetd | 95 | 0.048 | |
ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | 92 | 0.047 |
telnet | Sony PCS-11 telnetd | 91 | 0.046 | |
http | GoAhead-Webs | 91 | 0.046 | |
pcanywheredata | Symantec pcAnywhere | 89 | 0.045 | |
ftp | FileZilla ftpd | 0.9.40 beta | 89 | 0.045 |
eggdrop | Eggdrop IRC bot console | 1.6.20 | 87 | 0.044 |
http | Httpd | 1.0 | 84 | 0.043 |
http | WangWnagSimpleServer | 1.0 | 80 | 0.041 |
ssh | OpenSSH | 3.9p1 | 79 | 0.04 |
http | Panasonic webcam http config | 78 | 0.04 | |
ftp | Pure-FTPd | 76 | 0.039 | |
http | Apache | 2.2.16 | 73 | 0.037 |
http | thttpd | 2.25b 29dec2003 | 72 | 0.037 |
http | D-Link DIR-300 WAP http admin | 71 | 0.036 | |
irc-proxy | dircproxy | 69 | 0.035 | |
xml | 68 | 0.034 | ||
http | micro_httpd | 68 | 0.034 | |
http | Allegro RomPager | 4.51 UPnP/1.0 | 68 | 0.034 |
donkey | MLDonkey multi-network P2P server | 68 | 0.034 | |
upnp | Intel UPnP reference SDK | 1.6.6 | 67 | 0.034 |
http | Mbedthis-Appweb | 2.0.4 | 67 | 0.034 |
http | GoAhead-Webs embedded httpd | 67 | 0.034 | |
http | Boa HTTPd | 0.94.13 | 65 | 0.033 |
backdoor | OptixPro backdoor | 65 | 0.033 | |
http | Hikvision-Webs | 63 | 0.032 | |
http | Polycom SoundPoint VoIP phone http config | 62 | 0.031 | |
http | Muratec Server Ver.1.1 | 61 | 0.031 | |
telnet | 60 | 0.03 | ||
sybase-adaptive | Sybase Adaptive Server | 60 | 0.03 | |
http | NET-DK | 1.0 | 59 | 0.03 |
http | WYM httpd | 1.0 | 58 | 0.029 |
http | uc-httpd | 1.0.0 | 58 | 0.029 |
http | Microsoft IIS httpd | 5.1 | 58 | 0.029 |
http | Boa HTTPd | 0.93.15 | 56 | 0.028 |
http | MikroTik router config httpd | 55 | 0.028 | |
http | http server 1.0 | 55 | 0.028 | |
vnc | RealVNC Personal | 54 | 0.027 | |
ftp | FileZilla ftpd | 0.9.37 beta | 54 | 0.027 |
vnc | 52 | 0.026 | ||
http | lighttpd | 1.4.28 | 51 | 0.026 |
ssh | OpenSSH | 5.8p1 Debian 1ubuntu3 | 50 | 0.025 |
http | ver2.4 rev0 | 48 | 0.024 | |
http | Microsoft HTTPAPI httpd | 1.0 | 48 | 0.024 |
http | HTTP Server 1.0 | 48 | 0.024 | |
vnc | RealVNC Enterprise | 47 | 0.024 | |
ssh | OpenSSH | 5.1p1 Debian 6ubuntu2 | 47 | 0.024 |
http | Apache | 2.2.15 | 47 | 0.024 |
ftp | ProFTPD | 1.3.3 | 47 | 0.024 |
http | GeoVision GeoHttpServer for webcams | 46 | 0.023 | |
ftp | FileZilla ftpd | 0.9.39 beta | 46 | 0.023 |
http | GM Streaming Server httpd | 45 | 0.023 | |
http | Microsoft IIS httpd | 6.0 | 44 | 0.022 |
http | FLPS | 44 | 0.022 | |
ssh | OpenSSH | 5.8p1 Debian 7ubuntu1 | 43 | 0.022 |
http | DISKPUMP mobile download server | 0.9.6 - gyHong | 43 | 0.022 |
http | Buffalo AirStation http config | 42 | 0.021 | |
ssh | OpenSSH | 5.1p1 Debian 5 | 41 | 0.021 |
http | PDR-M800 | 1.0 | 41 | 0.021 |
http | MiniServ | 1.570 | 41 | 0.021 |
arcserve | ARCserve Discovery | 41 | 0.021 | |
ssh | OpenSSH | 5.5p1 Debian 4ubuntu6 | 40 | 0.02 |
irc-proxy | psyBNC | 2.3.1 | 40 | 0.02 |
http | SAP J2EE Engine httpd | 6.40 | 40 | 0.02 |
http | SAP J2EE Engine | 39 | 0.02 | |
http | Jetty | 6.1.5 | 39 | 0.02 |
http | Cross Web Server | 39 | 0.02 | |
http | TibetSystem Server 2.0 | 38 | 0.019 | |
http | Router | 38 | 0.019 | |
http | MiniServ | 1.550 | 38 | 0.019 |
bittorrent | Bittorrent P2P client | 38 | 0.019 | |
http | Jetty | 6.1.x | 36 | 0.018 |
ssh | OpenSSH | 4.2 | 35 | 0.018 |
netbios-ssn | 34 | 0.017 | ||
http | Intoto httpd | 1.0 | 34 | 0.017 |
http | TP-LINK Router | 33 | 0.017 | |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze1 | 32 | 0.016 |
ssh | Dropbear sshd | 0.52 | 32 | 0.016 |
pyro | Python Remote Object Nameserver | 32 | 0.016 | |
ssh | OpenSSH | 6.0 | 30 | 0.015 |
napster | WinMX or Lopster Napster P2P client | 30 | 0.015 | |
http | Apache | 2.2.21 | 30 | 0.015 |
http | MikroTik router http config | 29 | 0.015 | |
smtp | 28 | 0.014 | ||
http | Indy httpd | 9.0.18 | 28 | 0.014 |
http | Apache | 2.2.9 | 28 | 0.014 |
http | RemotelyAnywhere remote PC management httpd | 8.0.668 | 27 | 0.014 |
ssh | OpenSSH | 5.8 | 26 | 0.013 |
openvpn | OpenVPN | 26 | 0.013 | |
http | TwistedWeb httpd | 8.2.0 | 26 | 0.013 |
http | POSIX | 26 | 0.013 | |
ssh | OpenSSH | 5.1 | 25 | 0.013 |
ssh | OpenSSH | 4.7p1 Debian 8ubuntu3 | 25 | 0.013 |
http | Apache | 2.2 | 25 | 0.013 |
http | Apache | 1.3.41 | 25 | 0.013 |
ssh | OpenSSH | 5.4p1 | 24 | 0.012 |
http-proxy | Squid http proxy | 24 | 0.012 | |
http | Draytek Vigor ADSL router webadmin | 24 | 0.012 | |
http | Apache | 2.2.8 | 24 | 0.012 |
ssh | OpenSSH | 5.9 | 23 | 0.012 |
http | Transas-NavTech-Server | 1.02.0034 Transas-Configuration | 23 | 0.012 |
http | QNAP TS-219P NAS http config | 1.0 | 23 | 0.012 |
ftp | Serv-U ftpd | 6.4 | 23 | 0.012 |
ftp | ProFTPD | 23 | 0.012 | |
ssh | OpenSSH | 5.5p1 Debian 6 | 22 | 0.011 |
rifa-dvr | Rifatron DVR | 22 | 0.011 | |
http | Router Webserver | 22 | 0.011 | |
http | Microsoft IIS | 22 | 0.011 | |
http | DD-WRT milli_httpd | 22 | 0.011 | |
http | ADH-Web httpd | 22 | 0.011 | |
directconnect | Direct Connect P2P | 22 | 0.011 | |
upnp | MediaTomb UPnP | 0.11.0 | 21 | 0.011 |
smtp | Postfix smtpd | 21 | 0.011 | |
secure-socket | CA Secure Socket Adapter | 21 | 0.011 | |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | 21 | 0.011 | |
http | lighttpd | 1.4.11 | 21 | 0.011 |
http | iCanWebServer | 1.1 | 21 | 0.011 |
http | httpd 1.1 | 21 | 0.011 | |
http | D-Link/Airlink IP webcam http config | 1.0 | 21 | 0.011 |
http | ChipPC Extreme httpd | 21 | 0.011 | |
ssh | OpenSSH | 4.7 | 20 | 0.01 |
http | Mobotix Camera http config | 20 | 0.01 | |
http | MiniServ | 1.560 | 20 | 0.01 |
http | fec | 1.0 (Funkwerk BOSS) | 20 | 0.01 |
upnp | Portable SDK for UPnP devices | 1.3.1 | 19 | 0.01 |
ssh | OpenSSH | 5.2p1 | 19 | 0.01 |
http | Web | 19 | 0.01 | |
http | Transas-NavTech-Server | 1.03.0045 Transas-Configuration | 19 | 0.01 |
http | Microsoft IIS httpd | 7.5 | 19 | 0.01 |
http | lighttpd | 1.4.23 | 19 | 0.01 |
http | dcs-lig-httpd | 19 | 0.01 | |
http | Apache | 1.3.28 | 19 | 0.01 |
ftp | ProFTPD | 1.3.4a | 19 | 0.01 |
http | thttpd | 2.19-MX Jul 1 2010 | 18 | 0.009 |
http | Sagem F@st router httpd | 18 | 0.009 | |
http | RapidLogic httpd | 1.1 | 17 | 0.009 |
http | lighttpd | 1.4.20 | 17 | 0.009 |
http | httpd | 17 | 0.009 | |
http | BBVS | BBVS | 17 | 0.009 |
http | Apache | 0.6.5 | 17 | 0.009 |
ftp | Synology DiskStation NAS ftpd | 17 | 0.009 | |
ftp | Serv-U ftpd | 6.0 | 17 | 0.009 |
ftp | ProFTPD | 1.3.1 | 17 | 0.009 |
ftp | Gene6 ftpd | 3.10.0 build 2 | 17 | 0.009 |
ftp | FileZilla ftpd | 0.9.36 beta | 17 | 0.009 |
ssh | OpenSSH | 5.8p2_hpn13v11 | 16 | 0.008 |
ssh | OpenSSH | 5.2 | 16 | 0.008 |
http | Milestone XProtect video surveillance http interface | 16 | 0.008 | |
http | CCcam card sharing system http config | 16 | 0.008 | |
ssh | OpenSSH | 6.0p1 Debian 2 | 15 | 0.008 |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu4 | 15 | 0.008 |
smtp | Microsoft ESMTP | 6.0.3790.4675 | 15 | 0.008 |
http | thttpd | 2.19-MX Oct 19 2011 | 15 | 0.008 |
http | Small Home Server httpd | 15 | 0.008 | |
http | MiniServ | 1.588 | 15 | 0.008 |
http | Microsoft IIS httpd | 5.0 | 15 | 0.008 |
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 15 | 0.008 | |
ftp | vsftpd | 2.2.2 | 15 | 0.008 |
ftp | vsftpd | 2.0.8 or later | 15 | 0.008 |
ftp | glFTPd | 2.01 | 15 | 0.008 |
ftp | FileZilla ftpd | 0.9.34 beta | 15 | 0.008 |