~116 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
socks5 | 43714 | 37.624 | |
no match | -/- | 19125 | 16.46 |
socks-proxy | Socks4A | 7727 | 6.65 |
irc | Unreal ircd | 5357 | 4.611 |
irc | Dancer ircd | 4142 | 3.565 |
http | 3755 | 3.232 | |
ssh | OpenSSH | 3332 | 2.868 |
melange | Melange Chat Server | 2724 | 2.344 |
chat | AIM or ICQ server | 2569 | 2.211 |
telnet | Cisco telnetd | 2058 | 1.771 |
http | Microsoft IIS httpd | 1898 | 1.634 |
http-proxy | Squid http proxy | 1248 | 1.074 |
vnc | VNC | 1139 | 0.98 |
irc | InspIRCd | 1095 | 0.942 |
http | Microsoft HTTPAPI httpd | 815 | 0.701 |
telnet | 790 | 0.68 | |
http | lighttpd | 739 | 0.636 |
http | Boa HTTPd | 729 | 0.627 |
http | thttpd | 584 | 0.503 |
irc | ircu ircd | 527 | 0.454 |
http | Apache Tomcat/Coyote JSP engine | 500 | 0.43 |
http | GoAhead-Webs httpd | 450 | 0.387 |
http | Apache | 416 | 0.358 |
http | Virata-EmWeb | 381 | 0.328 |
irc | 379 | 0.326 | |
ca-mq | CA Message Queuing Server | 349 | 0.3 |
remoting | MS .NET Remoting services | 334 | 0.287 |
http | nginx | 299 | 0.257 |
eggdrop | Eggdrop irc bot console | 290 | 0.25 |
irc | IRCnet ircd | 286 | 0.246 |
irc | ratbox ircd | 272 | 0.234 |
ssh | MikroTik RouterOS sshd | 253 | 0.218 |
ssl | TLS | 236 | 0.203 |
http | Hikvision-Webs | 200 | 0.172 |
http | ProLinux | 197 | 0.17 |
ftp | FileZilla ftpd | 187 | 0.161 |
ftp | Serv-U ftpd | 179 | 0.154 |
directconnect | Direct Connect P2P | 175 | 0.151 |
vnc | RealVNC Personal | 174 | 0.15 |
http | Router | 168 | 0.145 |
vnc | RealVNC Enterprise | 158 | 0.136 |
http | PROLinux | 146 | 0.126 |
smtp | 141 | 0.121 | |
ftp | Microsoft ftpd | 139 | 0.12 |
ssh | Dropbear sshd | 137 | 0.118 |
mysql | MySQL | 137 | 0.118 |
http | Jetty | 129 | 0.111 |
ftp | 122 | 0.105 | |
irc | IRCnet-based ircd | 116 | 0.1 |
http | TP-LINK Router | 114 | 0.098 |
arcserve | ARCserve Discovery | 114 | 0.098 |
ssh | 110 | 0.095 | |
ftp | ProFTPD | 110 | 0.095 |
ftp | vsftpd | 109 | 0.094 |
intranetchat | Intranet Chat Server | 108 | 0.093 |
http | MiniServ | 96 | 0.083 |
irc | BitlBee IRCd | 94 | 0.081 |
http | micro_httpd | 94 | 0.081 |
ovm-manager | Oracle VM Manager | 89 | 0.077 |
telnet | CircleMUD telnetd | 81 | 0.07 |
irc-proxy | psyBNC | 75 | 0.065 |
vnc | 70 | 0.06 | |
eggdrop | Eggdrop IRC bot console | 70 | 0.06 |
lexlm | Lexmark language monitor | 66 | 0.057 |
upnp | Microsoft Windows UPnP | 65 | 0.056 |
http | MpVodServer | 65 | 0.056 |
mongodb | MongoDB | 62 | 0.053 |
http | http server 1.0 | 62 | 0.053 |
xml | 59 | 0.051 | |
napster | WinMX or Lopster Napster P2P client | 54 | 0.046 |
ftp | Pure-FTPd | 53 | 0.046 |
http | Ubicom | 51 | 0.044 |
http | Linksys router http config | 49 | 0.042 |
http | Allegro RomPager | 48 | 0.041 |
http | Boa httpd | 46 | 0.04 |
ftp | Gene6 ftpd | 45 | 0.039 |
http-proxy | MikroTik http proxy | 44 | 0.038 |
jabber | Jabber instant messaging server | 41 | 0.035 |
svnserve | Subversion | 40 | 0.034 |
http | GeoVision GeoHttpServer for webcams | 39 | 0.034 |
ssh | WeOnlyDo sshd | 36 | 0.031 |
http | webserver | 36 | 0.031 |
smtp | Postfix smtpd | 33 | 0.028 |
shell | w4ck1ng-shell | 33 | 0.028 |
irc | Hybrid-based ircd | 33 | 0.028 |
http | WYM httpd | 32 | 0.028 |
smtp | Microsoft ESMTP | 31 | 0.027 |
http | uTorrent http admin | 29 | 0.025 |
http | Router Webserver | 29 | 0.025 |
http-proxy | Haproxy http proxy | 29 | 0.025 |
http | InterSect Alliance SNARE http config | 28 | 0.024 |
http | H3C-Miniware-Webs | 28 | 0.024 |
vnc | Apple remote desktop vnc | 26 | 0.022 |
mpd | Music Player Daemon | 26 | 0.022 |
irc-proxy | ShroudBNC irc-proxy | 26 | 0.022 |
telnet | Linux telnetd | 25 | 0.022 |
ntop-http | Ntop web interface | 25 | 0.022 |
smtp | Microsoft Exchange smtpd | 24 | 0.021 |
ssh | SCS sshd | 23 | 0.02 |
http | RealVNC | 22 | 0.019 |
http | Microsoft ISA httpd | 22 | 0.019 |
http | httpd 1.1 | 22 | 0.019 |
http | AR7 embedded httpd | 22 | 0.019 |
ftp | Synology DiskStation NAS ftpd | 22 | 0.019 |
socks4 | Connection ok | 21 | 0.018 |
openvpn | OpenVPN | 21 | 0.018 |
netbios-ssn | 21 | 0.018 | |
irc | ngircd | 20 | 0.017 |
soap | gSOAP soap | 19 | 0.016 |
java-rmi | Java RMI | 19 | 0.016 |
http | WebLogic httpd | 19 | 0.016 |
http | Cisco IOS http config | 19 | 0.016 |
ftp | Dreambox ftpd | 19 | 0.016 |
ssh | Cisco SSH | 18 | 0.015 |
http | MS .NET Remoting httpd | 18 | 0.015 |
ftp | IndiFTPD | 18 | 0.015 |
upnp | Conexant-EmWeb | 17 | 0.015 |
http | uTorrent WebUI | 17 | 0.015 |
http | Sagem F@st router httpd | 17 | 0.015 |
tcpwrapped | BSD TCP Wrappers | 16 | 0.014 |
smtp | Exim smtpd | 16 | 0.014 |
http-proxy | CCProxy http proxy | 16 | 0.014 |
http | Network Camera | 16 | 0.014 |
http | monit httpd | 16 | 0.014 |
ftp | SHARP MX-4100N printer ftpd | 16 | 0.014 |
ssh | Bitvise WinSSHD | 15 | 0.013 |
http-proxy | Tinyproxy | 14 | 0.012 |
ssl | TLSv1 | 13 | 0.011 |
ssh | NetScreen sshd | 12 | 0.01 |
imap | Microsoft Exchange 2007-2010 imapd | 12 | 0.01 |
http | Oracle XML DB Enterprise Edition httpd | 12 | 0.01 |
http | Caucho Resin JSP engine | 12 | 0.01 |
spotify-login | Spotify login server | 11 | 0.009 |
http | World Client WDaemon httpd | 11 | 0.009 |
http | WindWeb | 11 | 0.009 |
http | wg_httpd | 11 | 0.009 |
http | uhttpd | 11 | 0.009 |
http | Transmission BitTorrent management httpd | 11 | 0.009 |
damewaremr | DameWare Mini Remote Control | 11 | 0.009 |
vtun | Vtun Virtual Tunnel | 10 | 0.009 |
telnet | EPIX Your Worldwide Internet Access | 10 | 0.009 |
telnet | BusyBox telnetd | 10 | 0.009 |
rtsp | 10 | 0.009 | |
netsupport | NetSupport PC remote control | 10 | 0.009 |
http | uc-httpd | 10 | 0.009 |
http | linux | 10 | 0.009 |
http | Embedded HTTP Server. | 10 | 0.009 |