~75 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Count |
Percent |
|---|---|---|---|
| login | Cisco/NetApp logind | 36091 | 47.514 |
| shell | Ricoh rshd | 12797 | 16.847 |
| no match | -/- | 9678 | 12.741 |
| http | 3533 | 4.651 | |
| http | SonicWALL | 3504 | 4.613 |
| chat | AIM or ICQ server | 2585 | 3.403 |
| secure-socket | CA Secure Socket Adapter | 1474 | 1.941 |
| http | lighttpd | 987 | 1.299 |
| tcpwrapped | BSD TCP Wrappers | 821 | 1.081 |
| http | AIM | 673 | 0.886 |
| login | Aficio/NRG/Ricoh printer logind | 470 | 0.619 |
| http | Apache | 391 | 0.515 |
| http | Microsoft IIS httpd | 283 | 0.373 |
| ssh | OpenSSH | 225 | 0.296 |
| http | Microsoft HTTPAPI httpd | 147 | 0.194 |
| http | thttpd | 124 | 0.163 |
| http | DrcomServer1.0 | 114 | 0.15 |
| ssh | 105 | 0.138 | |
| http | Apache Tomcat/Coyote JSP engine | 86 | 0.113 |
| http | Netwave IP camera http config | 82 | 0.108 |
| http | GoAhead-Webs | 77 | 0.101 |
| http | Boa HTTPd | 77 | 0.101 |
| vnc | VNC | 75 | 0.099 |
| http | Avtech AVN801 network camera | 67 | 0.088 |
| arcserve | ARCserve Discovery | 59 | 0.078 |
| shell | OpenVMS shelld | 56 | 0.074 |
| telnet | 55 | 0.072 | |
| http | PDR-M800 | 42 | 0.055 |
| mysql | MySQL | 38 | 0.05 |
| ftp | 35 | 0.046 | |
| ftp | Microsoft ftpd | 33 | 0.043 |
| login | Solaris logind | 32 | 0.042 |
| relp | Reliable Event Logging Protocol | 29 | 0.038 |
| http | mini_httpd | 28 | 0.037 |
| http-proxy | Squid http proxy | 26 | 0.034 |
| tandem-print | Sharp printer tandem printing | 24 | 0.032 |
| http | nginx | 24 | 0.032 |
| http | Hikvision-Webs | 23 | 0.03 |
| smtp | Microsoft ESMTP | 22 | 0.029 |
| shell | Windows Services for Unix rsh | 21 | 0.028 |
| ftp | FileZilla ftpd | 21 | 0.028 |
| vnc | RealVNC Enterprise | 20 | 0.026 |
| http | Mbedthis-Appweb | 20 | 0.026 |
| http | Gadspot/Avtech AV787 webcam http config | 20 | 0.026 |
| ftp | ProFTPD | 20 | 0.026 |
| login | Winsock RSHD | 19 | 0.025 |
| http | uc-httpd | 19 | 0.025 |
| ftp | vsftpd | 18 | 0.024 |
| directconnect | Direct Connect P2P | 17 | 0.022 |
| vnc | 16 | 0.021 | |
| ssl | multi-vendor SSL | 16 | 0.021 |
| http | GoAhead-Webs embedded httpd | 16 | 0.021 |
| ssl | TLS | 14 | 0.018 |
| http | uTorrent WebUI | 14 | 0.018 |
| ftp | Serv-U ftpd | 14 | 0.018 |
| smtp | Microsoft Exchange smtpd | 13 | 0.017 |
| http-proxy | F5 BIG-IP load balancer http proxy | 13 | 0.017 |
| http | DVR Systems webcam http interface | 13 | 0.017 |
| ftp | Pure-FTPd | 13 | 0.017 |
| vnc | RealVNC Personal | 12 | 0.016 |
| smtp | 12 | 0.016 | |
| http | Cross Web Server | 12 | 0.016 |
| ssh | Dropbear sshd | 11 | 0.014 |
| http | Jetty | 10 | 0.013 |
| http | AIM HTTP | 10 | 0.013 |
| domain | ISC BIND | 10 | 0.013 |