~118 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Count | Percent |
---|---|---|---|---|
socks5 | 27422 | 23.162 | ||
no match | -/- | -/- | 17704 | 14.953 |
http | GoAhead-Webs httpd | 12862 | 10.864 | |
http | Secure Computing Sidewinder firewall http admin | 4175 | 3.526 | |
irc | Dancer ircd | 4100 | 3.463 | |
http | 3432 | 2.899 | ||
http | Boa httpd | 3317 | 2.802 | |
netsupport | NetSupport PC remote control | 2993 | 2.528 | |
xml | 2596 | 2.193 | ||
chat | AIM or ICQ server | 2523 | 2.131 | |
http | PWS httpd | 8.0.9.3 | 2365 | 1.998 |
http | PWS httpd | 1.7.3.13 | 2185 | 1.846 |
http | Microsoft IIS httpd | 2041 | 1.724 | |
http | ChipPC Extreme httpd | 1584 | 1.338 | |
http | Microsoft HTTPAPI httpd | 2.0 | 1301 | 1.099 |
telnet | 1250 | 1.056 | ||
http | Boa HTTPd | 0.94.13 | 1192 | 1.007 |
ssh | OpenSSH | 4.3 | 1184 | 1.0 |
xmpp-transport | Spectrum XMPP file transfer | 1178 | 0.995 | |
ssh | MikroTik RouterOS sshd | 1062 | 0.897 | |
ssl | TLS | 1.0 | 1022 | 0.863 |
lineage-ii | Lineage II game server | 857 | 0.724 | |
http | Apache Tomcat/Coyote JSP engine | 1.1 | 830 | 0.701 |
http | OracleAS Web Cache 10g | 10.1.2.0.2 | 671 | 0.567 |
http | lighttpd | 1.4.19 | 459 | 0.388 |
http | Boa HTTPd | 0.94.14rc21 | 445 | 0.376 |
irc-proxy | psyBNC | 2.3.2-7 | 424 | 0.358 |
vnc | VNC | 417 | 0.352 | |
ssh | OpenSSH | 3.9p1 | 408 | 0.345 |
http | OracleAS Web Cache 10g | 10.1.2.3.0 | 373 | 0.315 |
ftp | Serv-U ftpd | 5.0 | 318 | 0.269 |
http | Router | 300 | 0.253 | |
ssh | OpenSSH | 5.3 | 294 | 0.248 |
mysql | MySQL | 4.1.18 | 286 | 0.242 |
http | thttpd | 2.25b | 268 | 0.226 |
http | lighttpd | 1.4.26 | 267 | 0.226 |
http | GeoVision GeoHttpServer for webcams | 264 | 0.223 | |
http | Apache | 1.3.26 | 241 | 0.204 |
remoting | MS .NET Remoting services | 225 | 0.19 | |
http | lighttpd | 1.4.28 | 224 | 0.189 |
directconnect | Direct Connect P2P | 222 | 0.188 | |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | 221 | 0.187 |
http | lighttpd | 1.4.29 | 221 | 0.187 |
http | Virata-EmWeb | 6.0.1 | 219 | 0.185 |
minecraft | Minecraft game server | 214 | 0.181 | |
ftp | Microsoft ftpd | 212 | 0.179 | |
http | thttpd | 205 | 0.173 | |
bandwidth-test | MikroTik bandwidth-test server | 200 | 0.169 | |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | 194 | 0.164 |
ssh | OpenSSH | 5.1p1 Debian 5 | 194 | 0.164 |
http | Apache | 2.2.3 | 194 | 0.164 |
arcserve | ARCserve Discovery | 181 | 0.153 | |
telnet | Openwall GNU/*/Linux telnetd | 180 | 0.152 | |
irc | Unreal ircd | 180 | 0.152 | |
http | MiniServ | 0.01 | 175 | 0.148 |
vnc | RealVNC Enterprise | 149 | 0.126 | |
antivir | Symantec AntiVirus Scan Engine | 144 | 0.122 | |
http | Boa HTTPd | 0.93.15 | 143 | 0.121 |
http | ZTE H220N router http config | 1.0 | 140 | 0.118 |
eggdrop | Eggdrop IRC bot console | 1.6.20 | 137 | 0.116 |
giop | CORBA naming service | 128 | 0.108 | |
ssh | Dropbear sshd | 2012.55 | 120 | 0.101 |
ssh | Dropbear sshd | 0.51 | 115 | 0.097 |
http | MiniServ | 1.590 | 115 | 0.097 |
ftp | 115 | 0.097 | ||
ssh | 111 | 0.094 | ||
vnc | RealVNC Personal | 109 | 0.092 | |
http | Linksys router http config | 108 | 0.091 | |
ssh | OpenSSH | 5.4p1 | 107 | 0.09 |
vnc | 105 | 0.089 | ||
http | Apache | 2 | 104 | 0.088 |
telnet | Linux telnetd | 103 | 0.087 | |
ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | 101 | 0.085 |
http | Router Webserver | 95 | 0.08 | |
http | lighttpd | 93 | 0.079 | |
ftp | FileZilla ftpd | 0.9.41 beta | 88 | 0.074 |
http | OracleAS Web Cache 10g | 10.1.2.2.0 | 87 | 0.073 |
http | OracleAS Web Cache 10g | 9.0.4.0.0 | 86 | 0.073 |
http | nginx | 84 | 0.071 | |
http | Oracle XML DB Enterprise Edition httpd | 81 | 0.068 | |
http | uTorrent http admin | 3.0 | 80 | 0.068 |
ssh | Dropbear sshd | 0.52 | 76 | 0.064 |
ftp | Serv-U ftpd | 6.4 | 76 | 0.064 |
upnp | Microsoft Windows UPnP | 74 | 0.063 | |
ssh | SCS sshd | 2.0.13 | 74 | 0.063 |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze1 | 74 | 0.063 |
http | httpd 1.1 | 74 | 0.063 | |
http | thttpd | 2.24 | 73 | 0.062 |
http | Microsoft ISA httpd | 71 | 0.06 | |
irc | InspIRCd | 70 | 0.059 | |
http | Jetty | 6.1.26 | 70 | 0.059 |
http | Ubicom | 1.1 | 69 | 0.058 |
http | MiniServ | 1.580 | 69 | 0.058 |
http | Jetty | 6.1.x | 69 | 0.058 |
http | webserver | 1.0 | 68 | 0.057 |
http | WebLogic httpd | 68 | 0.057 | |
ssh | OpenSSH | 5.5 | 66 | 0.056 |
http-proxy | MikroTik http proxy | 66 | 0.056 | |
http | Hikvision-Webs | 66 | 0.056 | |
ssh | OpenSSH | 5.8p1 Debian 7ubuntu1 | 62 | 0.052 |
http | TP-LINK Router | 62 | 0.052 | |
ftp | ProFTPD | 1.3.2 | 61 | 0.052 |
ssh | OpenSSH | 5.8p2_hpn13v11 | 60 | 0.051 |
http | Apache | 2.2.16 | 60 | 0.051 |
http | Apache | 2.2.14 | 60 | 0.051 |
http | micro_httpd | 58 | 0.049 | |
openvpn | OpenVPN | 57 | 0.048 | |
napster | WinMX or Lopster Napster P2P client | 56 | 0.047 | |
ssh | OpenSSH | 5.1 | 55 | 0.046 |
ovm-manager | Oracle VM Manager | 55 | 0.046 | |
http | WYM httpd | 1.0 | 53 | 0.045 |
ftp | ProFTPD | 1.3.3a | 53 | 0.045 |
ssh | OpenSSH | 5.8p1 Debian 1ubuntu3 | 52 | 0.044 |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu3 | 49 | 0.041 |
http | http server 1.0 | 49 | 0.041 | |
http | lighttpd | 1.4.30 | 47 | 0.04 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 46 | 0.039 | |
ftp | ProFTPD | 1.3.1 | 46 | 0.039 |
ssh | OpenSSH | 4.6 | 45 | 0.038 |
http | PWS httpd | 8.0.9 | 43 | 0.036 |
ssh | OpenSSH | 5.5p1 Debian 6 | 42 | 0.035 |
http-proxy | Tinyproxy | 1.6.3 | 42 | 0.035 |
http | uc-httpd | 1.0.0 | 41 | 0.035 |
ssh | OpenSSH | 5.2 | 40 | 0.034 |
http-proxy | Squid http proxy | 2.7.STABLE9 | 40 | 0.034 |
jmond | jmond unix resource monitor | 39 | 0.033 | |
http | RTB | 39 | 0.033 | |
http | PWS httpd | 1.7.3.9 | 38 | 0.032 |
http-proxy | Squid http proxy | 3.1.18 | 38 | 0.032 |
ftp | Pure-FTPd | 38 | 0.032 | |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu4 | 36 | 0.03 |
svnserve | Subversion | 35 | 0.03 | |
netbios-ssn | 35 | 0.03 | ||
http | Jetty | 6.0.2 | 35 | 0.03 |
smtp | 34 | 0.029 | ||
http | lighttpd | 1.4.20 | 33 | 0.028 |
http | Apache | 2.2.9 | 33 | 0.028 |
http | Apache | 2.2.15 | 33 | 0.028 |
ftp | oftpd | 33 | 0.028 | |
ssh | OpenSSH | 5.6 | 32 | 0.027 |
http | Apache | 2.2.22 | 32 | 0.027 |
ftp | ProFTPD | 1.3.4a | 32 | 0.027 |
ssh | OpenSSH | 5.8 | 31 | 0.026 |
http-proxy | Squid http proxy | 2.6.STABLE21 | 31 | 0.026 |
http | MS .NET Remoting | 31 | 0.026 | |
ssh | OpenSSH | 4.7p1 Debian 8ubuntu1.2 | 30 | 0.025 |
smtp | Postfix smtpd | 30 | 0.025 | |
ftp | ProFTPD | 1.3.2c | 30 | 0.025 |
telnet | Draytek Vigor ADSL router telnetd | 29 | 0.024 | |
ssh | OpenSSH | 4.3p2 Debian 9etch3 | 29 | 0.024 |
http | MiniServ | 1.570 | 29 | 0.024 |
http | Apache | 1.3.12 | 28 | 0.024 |
ssh | OpenSSH | 5.1p1 | 27 | 0.023 |
irc-proxy | psyBNC | 2.3.1 | 27 | 0.023 |
http | Apache | 1.3.22 | 27 | 0.023 |
http | Jetty | 6.1.5 | 26 | 0.022 |
ftp | vsftpd | 2.0.5 | 26 | 0.022 |
ftp | Synology DiskStation NAS ftpd | 26 | 0.022 | |
irc | Hybrid-based ircd | 25 | 0.021 | |
http | MS .NET Remoting httpd | 25 | 0.021 | |
http | Httpd | 1.0 | 25 | 0.021 |
http | Allegro RomPager | 4.07 UPnP/1.0 | 25 | 0.021 |
http | Microsoft HTTPAPI httpd | 1.0 | 24 | 0.02 |
http | Apache | 2.2.0 | 24 | 0.02 |
http | Apache | 1.3.41 | 23 | 0.019 |
vnc | Apple remote desktop vnc | 22 | 0.019 | |
http | OracleAS Web Cache 10g | 10.1.2.3.2 | 22 | 0.019 |
http | NetApp DFM httpd | 22 | 0.019 | |
ftp | FileZilla ftpd | 0.9.39 beta | 22 | 0.019 |
damewaremr | DameWare Mini Remote Control | 22 | 0.019 | |
ssh | OpenSSH | 4.2 | 21 | 0.018 |
http | WEBrick httpd | 1.3.1 | 21 | 0.018 |
http | Oracle9iAS-Web-Cache | 9.0.2.0.0 | 21 | 0.018 |
http | nginx | 1.2.3 | 21 | 0.018 |
http | Allegro RomPager | 4.51 UPnP/1.0 | 21 | 0.018 |
ssh | OpenSSH | 5.9 | 20 | 0.017 |
ssh | OpenSSH | 4.7p1 Debian 8ubuntu3 | 20 | 0.017 |
smtp | Microsoft Exchange smtpd | 20 | 0.017 | |
smtp | Exim smtpd | 20 | 0.017 | |
http | uhttpd | 1.0.0 | 20 | 0.017 |
http-proxy | Tinyproxy | 1.6.5 | 20 | 0.017 |
http-proxy | Symantec firewall http proxy | 20 | 0.017 | |
http | Boa HTTPd | 0.94.11 | 20 | 0.017 |
ftp | Dreambox ftpd | 20 | 0.017 | |
ssh | Cisco SSH | 1.25 | 19 | 0.016 |
http | Network Camera | 19 | 0.016 | |
http | Apache | 2.2.17 | 19 | 0.016 |
ssh | OpenSSH | 5.2p1 | 18 | 0.015 |
http | nginx | 1.0.15 | 18 | 0.015 |
http | ImagiaTek | 18 | 0.015 | |
http | D-Link router/Airlink NAS http config | 18 | 0.015 | |
ssh | OpenSSH | 5.5p1 Debian 4ubuntu6 | 17 | 0.014 |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu6 | 17 | 0.014 |
ssh | OpenSSH | 2.3.0 mikrotik 2.9 | 17 | 0.014 |
socks-proxy | Socks4A | 17 | 0.014 | |
http | uTorrent WebUI | 17 | 0.014 | |
http | OracleAS Web Cache 10g | 10.1.2.0.0 | 17 | 0.014 |
http | nginx | 1.2.2 | 17 | 0.014 |
http | Boa HTTPd | 0.94.14rc18-ipcam | 17 | 0.014 |
meterpreter | Metasploit browser_autopwn | 16 | 0.014 | |
http-proxy | Squid http proxy | 2.7.STABLE7 | 16 | 0.014 |
http | Oracle Containers for J2EE | 16 | 0.014 | |
http | OracleAS Web Cache 10g | 9.0.4.3.0 | 16 | 0.014 |
ftp | Gene6 ftpd | 3.10.0 build 2 | 16 | 0.014 |
0 | 16 | 0.014 | ||
http | Transmission BitTorrent management httpd | 15 | 0.013 | |
http-proxy | Squid http proxy | 3.1.19 | 15 | 0.013 |
http | OracleAS Web Cache 10g | 9.0.4.2.0 | 15 | 0.013 |
http | Oracle9iAS-Web-Cache | 9.0.2.3.0 | 15 | 0.013 |
http | H3C-Miniware-Webs | 15 | 0.013 | |
http | Caucho Resin JSP engine | 2.1.10 | 15 | 0.013 |
http | Apache | 2.0.52 | 15 | 0.013 |
ftp | FileZilla ftpd | 0.9.37 beta | 15 | 0.013 |