~118 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
socks5 | 27422 | 23.162 | |
no match | -/- | 17704 | 14.953 |
http | GoAhead-Webs httpd | 12862 | 10.864 |
http | PWS httpd | 4631 | 3.912 |
http | Secure Computing Sidewinder firewall http admin | 4175 | 3.526 |
irc | Dancer ircd | 4100 | 3.463 |
ssh | OpenSSH | 3848 | 3.25 |
http | 3432 | 2.899 | |
http | Boa httpd | 3317 | 2.802 |
netsupport | NetSupport PC remote control | 2993 | 2.528 |
xml | 2596 | 2.193 | |
chat | AIM or ICQ server | 2523 | 2.131 |
http | Microsoft IIS httpd | 2043 | 1.726 |
http | Boa HTTPd | 1835 | 1.55 |
http | ChipPC Extreme httpd | 1584 | 1.338 |
http | lighttpd | 1391 | 1.175 |
http | Microsoft HTTPAPI httpd | 1325 | 1.119 |
http | OracleAS Web Cache 10g | 1296 | 1.095 |
telnet | 1250 | 1.056 | |
xmpp-transport | Spectrum XMPP file transfer | 1178 | 0.995 |
ssh | MikroTik RouterOS sshd | 1062 | 0.897 |
http | Apache | 1036 | 0.875 |
ssl | TLS | 1022 | 0.863 |
lineage-ii | Lineage II game server | 857 | 0.724 |
http | Apache Tomcat/Coyote JSP engine | 834 | 0.704 |
http | thttpd | 592 | 0.5 |
irc-proxy | psyBNC | 466 | 0.394 |
ftp | Serv-U ftpd | 432 | 0.365 |
vnc | VNC | 417 | 0.352 |
http | MiniServ | 402 | 0.34 |
mysql | MySQL | 363 | 0.307 |
ssh | Dropbear sshd | 347 | 0.293 |
http | Jetty | 308 | 0.26 |
http | Router | 300 | 0.253 |
http | nginx | 292 | 0.247 |
ftp | ProFTPD | 277 | 0.234 |
http | GeoVision GeoHttpServer for webcams | 264 | 0.223 |
ftp | Microsoft ftpd | 226 | 0.191 |
remoting | MS .NET Remoting services | 225 | 0.19 |
http | Virata-EmWeb | 224 | 0.189 |
directconnect | Direct Connect P2P | 222 | 0.188 |
minecraft | Minecraft game server | 214 | 0.181 |
http-proxy | Squid http proxy | 201 | 0.17 |
bandwidth-test | MikroTik bandwidth-test server | 200 | 0.169 |
arcserve | ARCserve Discovery | 181 | 0.153 |
telnet | Openwall GNU/*/Linux telnetd | 180 | 0.152 |
irc | Unreal ircd | 180 | 0.152 |
eggdrop | Eggdrop IRC bot console | 162 | 0.137 |
vnc | RealVNC Enterprise | 149 | 0.126 |
ftp | FileZilla ftpd | 149 | 0.126 |
antivir | Symantec AntiVirus Scan Engine | 144 | 0.122 |
http | ZTE H220N router http config | 140 | 0.118 |
giop | CORBA naming service | 128 | 0.108 |
ftp | 115 | 0.097 | |
ssh | 111 | 0.094 | |
vnc | RealVNC Personal | 109 | 0.092 |
http | Linksys router http config | 108 | 0.091 |
vnc | 105 | 0.089 | |
telnet | Linux telnetd | 103 | 0.087 |
http | Router Webserver | 95 | 0.08 |
http | Oracle XML DB Enterprise Edition httpd | 81 | 0.068 |
http | uTorrent http admin | 80 | 0.068 |
ssh | SCS sshd | 77 | 0.065 |
http-proxy | Tinyproxy | 76 | 0.064 |
upnp | Microsoft Windows UPnP | 74 | 0.063 |
http | httpd 1.1 | 74 | 0.063 |
http | Microsoft ISA httpd | 71 | 0.06 |
irc | InspIRCd | 70 | 0.059 |
http | Ubicom | 69 | 0.058 |
http | webserver | 68 | 0.057 |
http | WebLogic httpd | 68 | 0.057 |
http-proxy | MikroTik http proxy | 66 | 0.056 |
http | Hikvision-Webs | 66 | 0.056 |
http | TP-LINK Router | 62 | 0.052 |
http | Allegro RomPager | 61 | 0.052 |
http | micro_httpd | 58 | 0.049 |
openvpn | OpenVPN | 57 | 0.048 |
ftp | vsftpd | 57 | 0.048 |
napster | WinMX or Lopster Napster P2P client | 56 | 0.047 |
ovm-manager | Oracle VM Manager | 55 | 0.046 |
http | WYM httpd | 53 | 0.045 |
http | Oracle9iAS-Web-Cache | 51 | 0.043 |
http | http server 1.0 | 49 | 0.041 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 46 | 0.039 |
http | uc-httpd | 41 | 0.035 |
jmond | jmond unix resource monitor | 39 | 0.033 |
http | RTB | 39 | 0.033 |
ftp | Pure-FTPd | 38 | 0.032 |
svnserve | Subversion | 35 | 0.03 |
netbios-ssn | 35 | 0.03 | |
smtp | 34 | 0.029 | |
ftp | oftpd | 33 | 0.028 |
smtp | Postfix smtpd | 31 | 0.026 |
http | MS .NET Remoting | 31 | 0.026 |
smtp | Microsoft ESMTP | 30 | 0.025 |
http | Caucho Resin JSP engine | 30 | 0.025 |
telnet | Draytek Vigor ADSL router telnetd | 29 | 0.024 |
http | Httpd | 26 | 0.022 |
ftp | Synology DiskStation NAS ftpd | 26 | 0.022 |
irc | Hybrid-based ircd | 25 | 0.021 |
http | MS .NET Remoting httpd | 25 | 0.021 |
ftp | Gene6 ftpd | 23 | 0.019 |
vnc | Apple remote desktop vnc | 22 | 0.019 |
smtp | Exim smtpd | 22 | 0.019 |
http | Tornado httpd | 22 | 0.019 |
http | NetApp DFM httpd | 22 | 0.019 |
damewaremr | DameWare Mini Remote Control | 22 | 0.019 |
smtp | Microsoft Exchange smtpd | 21 | 0.018 |
http | WEBrick httpd | 21 | 0.018 |
http | Zope httpd | 20 | 0.017 |
http | uhttpd | 20 | 0.017 |
http-proxy | Symantec firewall http proxy | 20 | 0.017 |
ftp | Dreambox ftpd | 20 | 0.017 |
ssh | Cisco SSH | 19 | 0.016 |
irc-proxy | ShroudBNC irc-proxy | 19 | 0.016 |
http | Network Camera | 19 | 0.016 |
http | ImagiaTek | 18 | 0.015 |
http | D-Link router/Airlink NAS http config | 18 | 0.015 |
socks-proxy | Socks4A | 17 | 0.014 |
http | uTorrent WebUI | 17 | 0.014 |
meterpreter | Metasploit browser_autopwn | 16 | 0.014 |
http | Oracle Containers for J2EE | 16 | 0.014 |
0 | 16 | 0.014 | |
mongodb | MongoDB | 15 | 0.013 |
http | Transmission BitTorrent management httpd | 15 | 0.013 |
http | Oracle Application Server httpd | 15 | 0.013 |
http | H3C-Miniware-Webs | 15 | 0.013 |
eggdrop | Eggdrop irc bot console | 15 | 0.013 |
http | WindRiver-WebServer | 14 | 0.012 |
http | BlueIris-HTTP | 14 | 0.012 |
http | WS CDN Server | 13 | 0.011 |
http | WindWeb | 13 | 0.011 |
http | Lotus Domino httpd | 13 | 0.011 |
http | Cougar | 13 | 0.011 |
telnet | Netopia ADSL router telnetd | 12 | 0.01 |
rtsp | 12 | 0.01 | |
jabber | ejabberd | 12 | 0.01 |
http-proxy | F5 BIG-IP load balancer http proxy | 12 | 0.01 |
http | httpd | 12 | 0.01 |
http | Generic router http config | 12 | 0.01 |
fw1-topology | Checkpoint FireWall-1 Topology | 12 | 0.01 |
telnet | X2250 version V.7.2 Rev. 1 IPSec from 2005/09/07 00:00:00 | 11 | 0.009 |
secure-socket | CA Secure Socket Adapter | 11 | 0.009 |
irc | ratbox ircd | 11 | 0.009 |
tandem-print | Sharp printer tandem printing | 10 | 0.008 |
ssh | Bitvise WinSSHD | 10 | 0.008 |
shoutcast-publishing | SHOUTcast publishing port | 10 | 0.008 |
rsync | 10 | 0.008 | |
irc | BitlBee IRCd | 10 | 0.008 |
ice | Internet Communications Engine | 10 | 0.008 |
http | VNC Server Enterprise Edition | 10 | 0.008 |
http | Selesta Server (v1.0) | 10 | 0.008 |
http | rtmp manage | 10 | 0.008 |
http | RealVNC | 10 | 0.008 |
http | CCProxy | 10 | 0.008 |
http | AquaController 4.0 | 10 | 0.008 |