~306 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
no match | -/- | 212499 | 69.327 |
upnp | MiniUPnP | 47629 | 15.539 |
ssh | OpenSSH | 5403 | 1.763 |
http | Grandstream HT502 VoIP router http config | 5035 | 1.643 |
irc | Dancer ircd | 4091 | 1.335 |
http | Microsoft HTTPAPI httpd | 3831 | 1.25 |
http | Microsoft IIS httpd | 3019 | 0.985 |
chat | AIM or ICQ server | 2488 | 0.812 |
http | 2342 | 0.764 | |
omniback | HP OpenView Omniback | 1533 | 0.5 |
http | monit httpd | 1185 | 0.387 |
secure-socket | CA Secure Socket Adapter | 1141 | 0.372 |
omniback | HP OpenView Omniback/Data Protector | 1125 | 0.367 |
http | lighttpd | 1114 | 0.363 |
vnc | VNC | 1072 | 0.35 |
eggdrop | Eggdrop IRC bot console | 924 | 0.301 |
irc-proxy | psyBNC | 692 | 0.226 |
arcserve | ARCserve Discovery | 618 | 0.202 |
http | Boa HTTPd | 594 | 0.194 |
http | MiniServ | 558 | 0.182 |
http | thttpd | 498 | 0.162 |
http | MONyog MySQL http admin | 457 | 0.149 |
rsync | 425 | 0.139 | |
http | Virata-EmWeb | 276 | 0.09 |
http | GeoVision GeoHttpServer for webcams | 274 | 0.089 |
ssl | TLS | 264 | 0.086 |
http | Boa httpd | 259 | 0.084 |
telnet | 258 | 0.084 | |
remoting | MS .NET Remoting services | 254 | 0.083 |
ovm-manager | Oracle VM Manager | 232 | 0.076 |
ssh | Dropbear sshd | 221 | 0.072 |
smtp | 211 | 0.069 | |
http | Jetty | 209 | 0.068 |
ftp | Microsoft ftpd | 185 | 0.06 |
http | nginx | 173 | 0.056 |
ftp | 171 | 0.056 | |
directconnect | Direct Connect P2P | 151 | 0.049 |
vtun | Vtun Virtual Tunnel | 142 | 0.046 |
vnc | 139 | 0.045 | |
ftp | FileZilla ftpd | 139 | 0.045 |
vnc | RealVNC Enterprise | 133 | 0.043 |
http | MS .NET Remoting httpd | 133 | 0.043 |
mysql | MySQL | 118 | 0.038 |
ssh | 105 | 0.034 | |
msrpc | Microsoft Windows RPC | 94 | 0.031 |
vnc | RealVNC Personal | 92 | 0.03 |
roku | Roku SoundBridge | 90 | 0.029 |
socks5 | 86 | 0.028 | |
irc | Unreal ircd | 86 | 0.028 |
postgresql | PostgreSQL DB | 85 | 0.028 |
ftp | Serv-U ftpd | 80 | 0.026 |
http | Router | 72 | 0.023 |
jabber | jit-transport jabber-ICQ transport | 71 | 0.023 |
buildservice | BuildForge Agent | 71 | 0.023 |
java-rmi | Java RMI | 69 | 0.023 |
spotify-login | Spotify login server | 66 | 0.022 |
http | http server 1.0 | 66 | 0.022 |
ftp | ProFTPD | 65 | 0.021 |
eggdrop | Eggdrop irc bot console | 64 | 0.021 |
pop3 | 60 | 0.02 | |
openvpn | OpenVPN | 57 | 0.019 |
http | Cross Web Server | 57 | 0.019 |
xml | 55 | 0.018 | |
ftp | Pure-FTPd | 55 | 0.018 |
cisco-lm | Cisco CallManager license manager | 55 | 0.018 |
http | TP-LINK Router | 53 | 0.017 |
upnp | Microsoft Windows UPnP | 49 | 0.016 |
rtsp | 47 | 0.015 | |
ftp | vsftpd | 47 | 0.015 |
tinc | tinc vpn daemon | 46 | 0.015 |
ssh | NetScreen sshd | 45 | 0.015 |
http | Router Webserver | 44 | 0.014 |
http | WYM httpd | 43 | 0.014 |
http | micro_httpd | 42 | 0.014 |
smtp | Microsoft ESMTP | 41 | 0.013 |
smtp | Exim smtpd | 41 | 0.013 |
http | WEBrick httpd | 41 | 0.013 |
http | httpd 1.1 | 41 | 0.013 |
ftp | Synology DiskStation NAS ftpd | 41 | 0.013 |
ssh | SCS sshd | 40 | 0.013 |
http | LiteSpeed httpd | 39 | 0.013 |
napster | WinMX or Lopster Napster P2P client | 38 | 0.012 |
http | uc-httpd | 38 | 0.012 |
http | webserver | 37 | 0.012 |
http | Panasonic webcam http config | 37 | 0.012 |
smtp | Symantec Enterprise Security manager smtpd | 35 | 0.011 |
http | Alcatel/Thomson SpeedTouch ADSL http config | 35 | 0.011 |
vnc | Apple remote desktop vnc | 34 | 0.011 |
tandem-print | Sharp printer tandem printing | 34 | 0.011 |
http | ASSP (Anti-Spam SMTP Proxy) httpd | 34 | 0.011 |
ftp | MikroTik router ftpd | 32 | 0.01 |
smtp | Postfix smtpd | 31 | 0.01 |
irc-proxy | ShroudBNC irc-proxy | 30 | 0.01 |
http | NETWORK | 29 | 0.009 |
http | Ubicom | 26 | 0.008 |
http | Techno Vision Security System http config | 26 | 0.008 |
http | World Client WDaemon httpd | 25 | 0.008 |
svnserve | Subversion | 24 | 0.008 |
http-proxy | MikroTik http proxy | 24 | 0.008 |
http | D-Link router/Airlink NAS http config | 24 | 0.008 |
jabber | ejabberd | 23 | 0.008 |
stargazer | Stargazer Billing System | 22 | 0.007 |
http | Sagem F@st router httpd | 22 | 0.007 |
telnet | Linux telnetd | 21 | 0.007 |
smtp | Sendmail | 21 | 0.007 |
irc | IRCnet ircd | 21 | 0.007 |
ssh | Cisco SSH | 20 | 0.007 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 20 | 0.007 |
smtp | Microsoft Exchange smtpd | 19 | 0.006 |
netsupport | NetSupport PC remote control | 19 | 0.006 |
irc | ircu ircd | 19 | 0.006 |
http | Oracle Universal Content Management httpd | 18 | 0.006 |
upnp | Conexant-EmWeb | 17 | 0.006 |
http | jAnrufmonitor | 17 | 0.006 |
geovision-mobile | Geovision mobile device support | 17 | 0.006 |
http | Cougar | 16 | 0.005 |
netbios-ssn | 15 | 0.005 | |
domain | ISC BIND | 15 | 0.005 |
psql | Pervasive.SQL Server - Relational Engine | 14 | 0.005 |
http | Netgear WGR614v7 WAP http config | 14 | 0.005 |
http | Linksys router http config | 14 | 0.005 |
http | ImagiaTek | 14 | 0.005 |
ssh | MikroTik RouterOS sshd | 13 | 0.004 |
ssh | Bitvise WinSSHD | 13 | 0.004 |
http | BlueIris-HTTP | 13 | 0.004 |
giop | CORBA naming service | 13 | 0.004 |
socks-proxy | Socks4A | 12 | 0.004 |
ftp | Gene6 ftpd | 12 | 0.004 |
ftp | Dreambox ftpd | 12 | 0.004 |
dominoconsole | Lotus Domino Console | 12 | 0.004 |
irc | 10 | 0.003 | |
http | NetApp DFM httpd | 10 | 0.003 |
http | GoAhead-Webs httpd | 10 | 0.003 |
http | adp perl webserver | 10 | 0.003 |
damewaremr | DameWare Mini Remote Control | 10 | 0.003 |