~306 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Count | Percent |
---|---|---|---|---|
no match | -/- | -/- | 212499 | 69.327 |
upnp | MiniUPnP | 47627 | 15.538 | |
http | Grandstream HT502 VoIP router http config | 5035 | 1.643 | |
irc | Dancer ircd | 4091 | 1.335 | |
http | Microsoft HTTPAPI httpd | 2.0 | 3809 | 1.243 |
http | Microsoft IIS httpd | 2892 | 0.943 | |
ssh | OpenSSH | 4.3 | 2659 | 0.867 |
chat | AIM or ICQ server | 2488 | 0.812 | |
http | 2342 | 0.764 | ||
omniback | HP OpenView Omniback | 1533 | 0.5 | |
http | monit httpd | 5.0.3 | 1166 | 0.38 |
secure-socket | CA Secure Socket Adapter | 1141 | 0.372 | |
omniback | HP OpenView Omniback/Data Protector | 1125 | 0.367 | |
vnc | VNC | 1072 | 0.35 | |
eggdrop | Eggdrop IRC bot console | 1.6.21 | 901 | 0.294 |
ssh | OpenSSH | 5.3 | 622 | 0.203 |
arcserve | ARCserve Discovery | 618 | 0.202 | |
http | MONyog MySQL http admin | 457 | 0.149 | |
ssh | OpenSSH | 5.8p1 Debian 1ubuntu3 | 446 | 0.146 |
http | lighttpd | 1.4.29 | 435 | 0.142 |
rsync | 425 | 0.139 | ||
http | lighttpd | 1.4.19 | 423 | 0.138 |
http | Boa HTTPd | 0.94.14rc21 | 384 | 0.125 |
irc-proxy | psyBNC | 2.3.2-7 | 383 | 0.125 |
http | GeoVision GeoHttpServer for webcams | 274 | 0.089 | |
http | Virata-EmWeb | 6.0.1 | 271 | 0.088 |
ssl | TLS | 1.0 | 264 | 0.086 |
http | Boa httpd | 259 | 0.084 | |
telnet | 258 | 0.084 | ||
remoting | MS .NET Remoting services | 254 | 0.083 | |
http | MiniServ | 0.01 | 251 | 0.082 |
ovm-manager | Oracle VM Manager | 232 | 0.076 | |
ssh | OpenSSH | 5.1p1 Debian 5 | 211 | 0.069 |
smtp | 211 | 0.069 | ||
ftp | Microsoft ftpd | 179 | 0.058 | |
ftp | 171 | 0.056 | ||
http | thttpd | 2.25b | 169 | 0.055 |
irc-proxy | psyBNC | 2.3.2-6 | 166 | 0.054 |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | 165 | 0.054 |
ssh | Dropbear sshd | 0.52 | 158 | 0.052 |
directconnect | Direct Connect P2P | 151 | 0.049 | |
http | thttpd | 140 | 0.046 | |
vnc | 139 | 0.045 | ||
http | Boa HTTPd | 0.94.13 | 137 | 0.045 |
vnc | RealVNC Enterprise | 133 | 0.043 | |
irc-proxy | psyBNC | 2.3.1 | 133 | 0.043 |
http | MS .NET Remoting httpd | 133 | 0.043 | |
http | MiniServ | 1.550 | 127 | 0.041 |
http | thttpd | 2.24 | 114 | 0.037 |
http | Jetty | 8.0.y.z-SNAPSHOT | 113 | 0.037 |
ssh | OpenSSH | 3.9p1 | 111 | 0.036 |
ssh | 105 | 0.034 | ||
ssh | OpenSSH | 5.5p1 Debian 6+squeeze1 | 102 | 0.033 |
msrpc | Microsoft Windows RPC | 94 | 0.031 | |
vtun | Vtun Virtual Tunnel | 03/15/2006 | 93 | 0.03 |
ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | 93 | 0.03 |
ssh | OpenSSH | 4.5 | 93 | 0.03 |
vnc | RealVNC Personal | 92 | 0.03 | |
roku | Roku SoundBridge | 90 | 0.029 | |
http | Microsoft IIS httpd | 5.1 | 90 | 0.029 |
http | lighttpd | 1.4.20 | 90 | 0.029 |
socks5 | 86 | 0.028 | ||
irc | Unreal ircd | 86 | 0.028 | |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | 84 | 0.027 |
http | MiniServ | 1.540 | 78 | 0.025 |
http | lighttpd | 73 | 0.024 | |
http | Router | 72 | 0.023 | |
jabber | jit-transport jabber-ICQ transport | 71 | 0.023 | |
spotify-login | Spotify login server | 66 | 0.022 | |
http | http server 1.0 | 66 | 0.022 | |
pop3 | 60 | 0.02 | ||
http | nginx | 60 | 0.02 | |
http | MiniServ | 1.530 | 59 | 0.019 |
java-rmi | Java RMI | 58 | 0.019 | |
openvpn | OpenVPN | 57 | 0.019 | |
http | Cross Web Server | 57 | 0.019 | |
xml | 55 | 0.018 | ||
ftp | Pure-FTPd | 55 | 0.018 | |
cisco-lm | Cisco CallManager license manager | 6 | 55 | 0.018 |
http | TP-LINK Router | 53 | 0.017 | |
ssh | OpenSSH | 5.8p1 Debian 7ubuntu1 | 50 | 0.016 |
upnp | Microsoft Windows UPnP | 49 | 0.016 | |
ssh | OpenSSH | 5.5p1 Debian 6 | 48 | 0.016 |
ssh | OpenSSH | 5.1 | 48 | 0.016 |
ssh | OpenSSH | 4.5p1 | 48 | 0.016 |
rtsp | 47 | 0.015 | ||
buildservice | BuildForge Agent | 7.1.2.0-0-0016 | 47 | 0.015 |
tinc | tinc vpn daemon | 46 | 0.015 | |
ssh | NetScreen sshd | 45 | 0.015 | |
http | Jetty | 6.1.x | 45 | 0.015 |
http | Router Webserver | 44 | 0.014 | |
mysql | MySQL | 43 | 0.014 | |
http | WYM httpd | 1.0 | 43 | 0.014 |
http | micro_httpd | 42 | 0.014 | |
http | WEBrick httpd | 1.3.1 | 41 | 0.013 |
http | httpd 1.1 | 41 | 0.013 | |
ftp | Synology DiskStation NAS ftpd | 41 | 0.013 | |
http | LiteSpeed httpd | 39 | 0.013 | |
ftp | FileZilla ftpd | 0.9.41 beta | 39 | 0.013 |
ssh | SCS sshd | 2.0.13 | 38 | 0.012 |
napster | WinMX or Lopster Napster P2P client | 38 | 0.012 | |
http | uc-httpd | 1.0.0 | 38 | 0.012 |
http | lighttpd | 1.4.28 | 38 | 0.012 |
http | webserver | 1.0 | 37 | 0.012 |
http | Panasonic webcam http config | 37 | 0.012 | |
http | Microsoft IIS httpd | 5.0 | 37 | 0.012 |
ssh | OpenSSH | 5.8 | 35 | 0.011 |
ssh | OpenSSH | 5.2 | 35 | 0.011 |
smtp | Symantec Enterprise Security manager smtpd | 35 | 0.011 | |
http | Boa HTTPd | 0.93.15 | 35 | 0.011 |
http | Alcatel/Thomson SpeedTouch ADSL http config | 1.0 | 35 | 0.011 |
vnc | Apple remote desktop vnc | 34 | 0.011 | |
tandem-print | Sharp printer tandem printing | 34 | 0.011 | |
postgresql | PostgreSQL DB | 32 | 0.01 | |
smtp | Postfix smtpd | 31 | 0.01 | |
ssh | OpenSSH | 2.3.0 mikrotik 2.9 | 30 | 0.01 |
ssh | OpenSSH | 5.4p1 | 29 | 0.009 |
http | NETWORK | 29 | 0.009 | |
smtp | Microsoft ESMTP | 6.0.3790.4675 | 27 | 0.009 |
irc-proxy | ShroudBNC irc-proxy | 1.2 revision 1080 | 27 | 0.009 |
http | Ubicom | 1.1 | 26 | 0.008 |
http | Techno Vision Security System http config | 2.0 | 26 | 0.008 |
ssh | OpenSSH | 5.1p1 | 25 | 0.008 |
svnserve | Subversion | 24 | 0.008 | |
http-proxy | MikroTik http proxy | 24 | 0.008 | |
http | D-Link router/Airlink NAS http config | 24 | 0.008 | |
ftp | FileZilla ftpd | 0.9.40 beta | 24 | 0.008 |
ssh | OpenSSH | 5.9 | 23 | 0.008 |
ssh | OpenSSH | 5.6 | 23 | 0.008 |
jabber | ejabberd | 23 | 0.008 | |
stargazer | Stargazer Billing System | 22 | 0.007 | |
http | Sagem F@st router httpd | 22 | 0.007 | |
http | Microsoft HTTPAPI httpd | 1.0 | 22 | 0.007 |
http | lighttpd | 1.4.26 | 22 | 0.007 |
telnet | Linux telnetd | 21 | 0.007 | |
irc | IRCnet ircd | 21 | 0.007 | |
http | Jetty | 6.1.5 | 21 | 0.007 |
http | ASSP (Anti-Spam SMTP Proxy) httpd | 1.3.9.1 | 21 | 0.007 |
ftp | FileZilla ftpd | 0.9.37 beta | 21 | 0.007 |
ssh | Dropbear sshd | 0.53.1 | 20 | 0.007 |
ssh | Cisco SSH | 1.25 | 20 | 0.007 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 20 | 0.007 | |
ftp | Serv-U ftpd | 6.4 | 20 | 0.007 |
ftp | FileZilla ftpd | 0.9.39 beta | 20 | 0.007 |
eggdrop | Eggdrop IRC bot console | 1.6.20 | 20 | 0.007 |
ssh | OpenSSH | 6.0 | 19 | 0.006 |
ssh | OpenSSH | 4.3p2 Debian 9etch3 | 19 | 0.006 |
smtp | Microsoft Exchange smtpd | 19 | 0.006 | |
netsupport | NetSupport PC remote control | 19 | 0.006 | |
irc | ircu ircd | 19 | 0.006 | |
http | nginx | 1.0.6 | 19 | 0.006 |
ssh | OpenSSH | 5.5p1 Debian 4ubuntu6 | 18 | 0.006 |
ssh | OpenSSH | 4.7p1 Debian 8ubuntu3 | 18 | 0.006 |
ssh | Dropbear sshd | 0.51 | 18 | 0.006 |
smtp | Exim smtpd | 4.71 | 18 | 0.006 |
http | Oracle Universal Content Management httpd | 18 | 0.006 | |
upnp | Conexant-EmWeb | 6.1.0 | 17 | 0.006 |
ssh | OpenSSH | 4.7 | 17 | 0.006 |
ssh | OpenSSH | 4.3p2 Debian 9 | 17 | 0.006 |
ssh | OpenSSH | 4.2 | 17 | 0.006 |
http | nginx | 1.2.0 | 17 | 0.006 |
http | MiniServ | 1.580 | 17 | 0.006 |
http | jAnrufmonitor | 5.0 | 17 | 0.006 |
geovision-mobile | Geovision mobile device support | 17 | 0.006 | |
eggdrop | Eggdrop irc bot console | 17 | 0.006 | |
ssh | OpenSSH | 5.5 | 16 | 0.005 |
ssh | OpenSSH | 4.7p1 Debian 8ubuntu1.2 | 16 | 0.005 |
ftp | MikroTik router ftpd | 5.14 | 16 | 0.005 |
ssh | OpenSSH | 6.0p1 Debian 2 | 15 | 0.005 |
ssh | OpenSSH | 5.9p1-hpn13v11 | 15 | 0.005 |
netbios-ssn | 15 | 0.005 | ||
http | World Client WDaemon httpd | 4.0 | 15 | 0.005 |
ftp | vsftpd | 2.2.2 | 15 | 0.005 |