~125 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
X11 | 45900 | 36.648 | |
telnet | 21518 | 17.181 | |
no match | -/- | 13211 | 10.548 |
telnet | NASLite-SMB/Sveasoft Alchemy firmware telnetd | 6613 | 5.28 |
http | 4704 | 3.756 | |
irc | Dancer ircd | 3899 | 3.113 |
http | SonicWALL | 3544 | 2.83 |
vnc | VNC | 2265 | 1.808 |
chat | AIM or ICQ server | 1979 | 1.58 |
http | Microsoft IIS httpd | 1255 | 1.002 |
telnet | BusyBox telnetd | 1148 | 0.917 |
http | Apache | 1080 | 0.862 |
ssh | OpenSSH | 933 | 0.745 |
http | lighttpd | 901 | 0.719 |
telnet | Pocket CMD telnetd | 628 | 0.501 |
X11 | NetSarang XManager | 599 | 0.478 |
telnet | LG-Ericsson LIP-8002 (SIP IP Phone) | 596 | 0.476 |
http | POSIX | 573 | 0.457 |
vnc | 570 | 0.455 | |
http | Boa HTTPd | 538 | 0.43 |
telnet | Enterasys XSR Security Router telnetd | 502 | 0.401 |
mysql | MySQL | 386 | 0.308 |
http-proxy | Squid http proxy | 360 | 0.287 |
vnc | RealVNC Enterprise | 355 | 0.283 |
telnet | Nortel-LG VoIP IAD telnetd | 336 | 0.268 |
vnc | RealVNC Personal | 335 | 0.267 |
http | GoAhead-Webs httpd | 306 | 0.244 |
http | thttpd | 286 | 0.228 |
X11 | X.Org | 262 | 0.209 |
http | GeoVision GeoHttpServer for webcams | 259 | 0.207 |
http | Apache Tomcat/Coyote JSP engine | 257 | 0.205 |
http | Microsoft HTTPAPI httpd | 249 | 0.199 |
http | Avtech AVN801 network camera | 248 | 0.198 |
soap | gSOAP soap | 202 | 0.161 |
http | Boa httpd | 200 | 0.16 |
http | Allegro RomPager | 194 | 0.155 |
http | mini_httpd | 190 | 0.152 |
X11 | Hummingbird Exceed X server | 181 | 0.145 |
telnet | Net2Phone MAX | 180 | 0.144 |
http | Hikvision-Webs | 170 | 0.136 |
irc-proxy | ShroudBNC irc-proxy | 166 | 0.133 |
X11 | XFree86 | 164 | 0.131 |
telnet | LG-Nortel LIP-6812D (MGCP IP Phone) | 162 | 0.129 |
http | http server 1.0 | 152 | 0.121 |
http | RealVNC | 148 | 0.118 |
ftp | Microsoft ftpd | 146 | 0.117 |
http | uc-httpd | 137 | 0.109 |
ftp | Pure-FTPd | 135 | 0.108 |
smtp | Microsoft ESMTP | 128 | 0.102 |
irc-proxy | psyBNC | 115 | 0.092 |
ssh | 106 | 0.085 | |
ftp | FileZilla ftpd | 104 | 0.083 |
arcserve | ARCserve Discovery | 104 | 0.083 |
ftp | 101 | 0.081 | |
http-proxy | 3proxy http proxy | 99 | 0.079 |
telnet | LG-Nortel LIP-6830D (MGCP IP Phone) | 95 | 0.076 |
http | Gateway Controller 3550 | 88 | 0.07 |
vtun | Vtun Virtual Tunnel | 87 | 0.069 |
X11 | StarNet X-Win32 | 85 | 0.068 |
ftp | Serv-U ftpd | 84 | 0.067 |
X11 | Xming X server | 82 | 0.065 |
http | Mbedthis-Appweb | 80 | 0.064 |
http | BusyBox httpd | 79 | 0.063 |
http | Gateway Controller 3560 | 72 | 0.057 |
http | DrayTek Vigor 2800-series ADSL router httpd | 71 | 0.057 |
telnet | LG-Ericsson IP8830 (SIP IP Phone) | 70 | 0.056 |
http | nginx | 69 | 0.055 |
http | DVR Systems webcam http interface | 66 | 0.053 |
websocket | websockify | 61 | 0.049 |
ovm-manager | Oracle VM Manager | 59 | 0.047 |
http | RemotelyAnywhere remote PC management httpd | 58 | 0.046 |
http | Gordano Web Server v5.06.0016 | 57 | 0.046 |
http | OwnServer1.0 | 53 | 0.042 |
smtp | Microsoft Exchange smtpd | 52 | 0.042 |
telnet | LG-Ericsson IP8802 (SIP IP Phone) | 51 | 0.041 |
ssh | Dropbear sshd | 49 | 0.039 |
ftp | ProFTPD | 49 | 0.039 |
vnc | Apple remote desktop vnc | 48 | 0.038 |
http | dcs-lig-httpd | 47 | 0.038 |
telnet | LGE XS-GATE/AX-2100 (Internet Phone Gateway) | 46 | 0.037 |
rtsp | 45 | 0.036 | |
rifa-dvr | Rifatron DVR | 45 | 0.036 |
X11 | XSun Solaris X11 server | 44 | 0.035 |
telnet | LGIC ITGC(Internet Telephony Gateway Circuit) | 43 | 0.034 |
smtp | 42 | 0.034 | |
directconnect | Direct Connect P2P | 42 | 0.034 |
telnet | LG-Nortel TS-350i (SIP IP Phone) | 41 | 0.033 |
oracle-tns | Oracle TNS Listener | 41 | 0.033 |
http | Network Camera | 41 | 0.033 |
http | Techno Vision Security System http config | 40 | 0.032 |
http | FlashCom | 39 | 0.031 |
http | VNC Server Enterprise Edition | 38 | 0.03 |
http | TP-LINK Router | 37 | 0.03 |
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 37 | 0.03 |
zebedee | Zebedee encrypted tunnel | 36 | 0.029 |
vnc | Ultr@VNC Repeater | 36 | 0.029 |
telnet | SMC SMC2870W Wireless Ethernet Bridge | 36 | 0.029 |
http | Vivotek Network Camera | 36 | 0.029 |
telnet | LG-Ericsson LIP-8008E (IPKTS Phone) | 35 | 0.028 |
irc | Unreal ircd | 35 | 0.028 |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 34 | 0.027 |
X11 | Cygwin X Server Project | 33 | 0.026 |
http | Transmission BitTorrent management httpd | 33 | 0.026 |
ssl | TLS | 32 | 0.026 |
http | Virata-EmWeb | 32 | 0.026 |
http | NetBox httpd | 32 | 0.026 |
telnet | LGE AX1100S (Internet Phone Gateway) | 31 | 0.025 |
http | Jetty | 31 | 0.025 |
http | Ubicom | 30 | 0.024 |
irc | InspIRCd | 29 | 0.023 |
X11 | SCO X server | 28 | 0.022 |
telnet | LG-Ericsson IP8815 (SIP IP Phone) | 28 | 0.022 |
http | TwistedWeb httpd | 28 | 0.022 |
http | Rex | 28 | 0.022 |
http | Caucho Resin JSP engine | 28 | 0.022 |
telnet | LG-Nortel LIP-6830D (SIP IP Phone) | 27 | 0.022 |
telnet | LG-Nortel LIP-6812D (SIP IP Phone) | 27 | 0.022 |
http | SEEnergy SVR-116 | 27 | 0.022 |
remoting | MS .NET Remoting services | 26 | 0.021 |
http | wg_httpd | 26 | 0.021 |
ftp | Synology DiskStation NAS ftpd | 26 | 0.021 |
ssl | OpenSSL | 24 | 0.019 |
rtsp | Vivotek IP7131 or IP7138 webcam rtspd | 24 | 0.019 |
openvpn | OpenVPN | 24 | 0.019 |
http | World Client WDaemon httpd | 24 | 0.019 |
ssh | MikroTik RouterOS sshd | 23 | 0.018 |
http | Linksys router http config | 23 | 0.018 |
http | httpd 1.1 | 23 | 0.018 |
http | httpd | 23 | 0.018 |
http | D-Link Internet Camera | 23 | 0.018 |
telnet | the MRV Communications' LX Series Server | 21 | 0.017 |
telnet | Linux telnetd | 21 | 0.017 |
socks5 | 21 | 0.017 | |
http | Cougar | 21 | 0.017 |
ftp | vsftpd | 21 | 0.017 |
xml | 20 | 0.016 | |
smtp | Postfix smtpd | 20 | 0.016 |
secure-socket | CA Secure Socket Adapter | 20 | 0.016 |
http | WindWeb | 20 | 0.016 |
http | Router | 20 | 0.016 |
nntp | INN nntpd | 19 | 0.015 |
http-proxy | F5 BIG-IP load balancer http proxy | 19 | 0.015 |
remote-control | Alchemy Lab Remote Control PRO remote management | 18 | 0.014 |
http | Wireless Network Camera | 18 | 0.014 |
http | Mongrel httpd | 18 | 0.014 |
http | Aviosys | 18 | 0.014 |
rtsp | Avtech MPEG4 DVR control rtspd | 17 | 0.014 |
telnet | Internet Phone Gateway (H323) | 16 | 0.013 |
napster | WinMX or Lopster Napster P2P client | 16 | 0.013 |
http | HP StorageWorks AG118A tape autoloader http config | 16 | 0.013 |
X11 | ReflectionX | 15 | 0.012 |
upnp | Portable SDK for UPnP devices | 15 | 0.012 |
telnet | the MRV Communications' LX Series Console Server | 15 | 0.012 |
telnet | Net2Phone MAX8 | 15 | 0.012 |
http | WYM httpd | 15 | 0.012 |
http | Thin | 15 | 0.012 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 15 | 0.012 |
damewaremr | DameWare Mini Remote Control | 15 | 0.012 |
telnet | Net2Phone MAX8 Plus | 14 | 0.011 |
telnet | LG-Ericsson IP8850 (SIP IP Phone) | 14 | 0.011 |
teamspeak | TeamSpeak voice communication | 14 | 0.011 |
ssh | Cisco SSH | 14 | 0.011 |
tandem-print | Sharp printer tandem printing | 13 | 0.01 |
smtp | Exim smtpd | 13 | 0.01 |
ncacn_http | Microsoft Windows RPC over HTTP | 13 | 0.01 |
irc-proxy | sbnc | 13 | 0.01 |
http | WebLogic httpd | 13 | 0.01 |
http-proxy | EZproxy web proxy | 13 | 0.01 |
http | NetApp DFM httpd | 13 | 0.01 |
http | H3C-Miniware-Webs | 13 | 0.01 |
http | Chat Anywhere | 13 | 0.01 |
eggdrop | Eggdrop IRC bot console | 13 | 0.01 |
http | ImagiaTek | 12 | 0.01 |
http | David WebBox httpd | 12 | 0.01 |
http | avtech | 12 | 0.01 |
http | AIM HTTP | 12 | 0.01 |
http | ADH-Web | 12 | 0.01 |
upnp | Microsoft Windows UPnP | 11 | 0.009 |
printer | Panasonic mfpscdl.exe service | 11 | 0.009 |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | 11 | 0.009 |
http | Oracle WebLogic Server | 11 | 0.009 |
http | Gateway Controller 3500 | 11 | 0.009 |
http | FlashCom httpd | 11 | 0.009 |
http | CherryPy httpd | 11 | 0.009 |
svnserve | Subversion | 10 | 0.008 |
http | Web-Based Enterprise Management CIM serverOpenPegasus WBEM httpd | 10 | 0.008 |
http | Huawei-3Com HTTPD | 10 | 0.008 |