~53 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
http | 9238 | 17.136 | |
no match | -/- | 5341 | 9.907 |
irc | Dancer ircd | 4060 | 7.531 |
http | SonicWALL | 3763 | 6.98 |
http | Apache | 3072 | 5.698 |
http | lighttpd | 2927 | 5.43 |
http | Microsoft IIS httpd | 2186 | 4.055 |
chat | AIM or ICQ server | 2126 | 3.944 |
http | Boa HTTPd | 1659 | 3.077 |
shoutcast | SHOUTcast server | 1483 | 2.751 |
http | Ubicom | 1113 | 2.065 |
http | thttpd | 1105 | 2.05 |
http | Virata-EmWeb | 945 | 1.753 |
http | GoAhead-Webs httpd | 944 | 1.751 |
http | AIM | 725 | 1.345 |
http | Netwave webcam http config | 694 | 1.287 |
xml | 618 | 1.146 | |
http | Symantec AntiVirus Scan Engine http config | 513 | 0.952 |
http | nginx | 492 | 0.913 |
http | Apache Tomcat/Coyote JSP engine | 469 | 0.87 |
ssl | TLS | 379 | 0.703 |
http | Icecast streaming media server | 377 | 0.699 |
http | Netwave IP camera http config | 319 | 0.592 |
http | Netgear FS726TP switch http config | 284 | 0.527 |
ssh | OpenSSH | 248 | 0.46 |
irc-proxy | psyBNC | 247 | 0.458 |
http | Microsoft HTTPAPI httpd | 247 | 0.458 |
http | mini_httpd | 236 | 0.438 |
http | Tiny WebServer | 230 | 0.427 |
http | CherryPy httpd | 204 | 0.378 |
http-proxy | Squid http proxy | 188 | 0.349 |
http | WindWeb | 183 | 0.339 |
http-proxy | F5 BIG-IP load balancer http proxy | 135 | 0.25 |
http | Hikvision-Webs | 135 | 0.25 |
eggdrop | Eggdrop IRC bot console | 131 | 0.243 |
telnet | BusyBox telnetd | 129 | 0.239 |
http | DrcomServer1.0 | 129 | 0.239 |
http | OpenDNS Guide | 115 | 0.213 |
http | Mongrel httpd | 105 | 0.195 |
http | WEBrick httpd | 101 | 0.187 |
http | GoAhead-Webs | 101 | 0.187 |
http | Avtech AVN801 network camera | 99 | 0.184 |
http | Jetty | 96 | 0.178 |
ssh | 95 | 0.176 | |
vnc | VNC | 94 | 0.174 |
http | keywords 1.0.6 | 94 | 0.174 |
telnet | 90 | 0.167 | |
http | Linux | 89 | 0.165 |
http | uTorrent WebUI | 86 | 0.16 |
http | Network Camera | 82 | 0.152 |
http | uTorrent utserver web interface | 80 | 0.148 |
http | Allegro RomPager | 79 | 0.147 |
ice | Internet Communications Engine | 74 | 0.137 |
http | Motion Camera httpd | 74 | 0.137 |
http | Mbedthis-Appweb | 73 | 0.135 |
http | Tornado httpd | 72 | 0.134 |
http | Mobotix Camera http config | 72 | 0.134 |
http | dcs-lig-httpd | 72 | 0.134 |
http | uc-httpd | 69 | 0.128 |
http | FC | 67 | 0.124 |
ftp | 64 | 0.119 | |
http | PDR-M800 | 63 | 0.117 |
http | ADAM-6000 | 62 | 0.115 |
http | WebLogic httpd | 60 | 0.111 |
http | MarkLogic | 57 | 0.106 |
http | GoAhead-Webs embedded httpd | 56 | 0.104 |
http | TornadoServer | 55 | 0.102 |
http | Caucho Resin JSP engine | 52 | 0.096 |
ftp | Microsoft ftpd | 52 | 0.096 |
ssh | Dropbear sshd | 50 | 0.093 |
mysql | MySQL | 48 | 0.089 |
mongodb | MongoDB | 47 | 0.087 |
http | TwistedWeb httpd | 45 | 0.083 |
http | uIP | 43 | 0.08 |
http | GeoVision GeoHttpServer for webcams | 43 | 0.08 |
http | Vivotek 3102 Camera http config | 42 | 0.078 |
http | MS .NET Remoting httpd | 42 | 0.078 |
shoutcast-publishing | SHOUTcast publishing port | 41 | 0.076 |
http | Oracle HTTP Server Powered by Apache | 40 | 0.074 |
http | avtech | 38 | 0.07 |
http | Microsoft-HTTPAPI | 37 | 0.069 |
http | AIP250 | 36 | 0.067 |
http | ver2.4 rev0 | 33 | 0.061 |
http | Thin | 33 | 0.061 |
http | D-Link/Airlink IP webcam http config | 33 | 0.061 |
rtsp | 32 | 0.059 | |
http | Vivotek IP7131 Network Camera http config | 32 | 0.059 |
http | Oracle Application Server 10g httpd | 32 | 0.059 |
http | Cisco IOS http config | 32 | 0.059 |
remoting | MS .NET Remoting services | 31 | 0.058 |
http | Zope httpd | 31 | 0.058 |
http | Snom 300 VoIP phone http config | 31 | 0.058 |
smtp | Communigate Pro SMTP | 30 | 0.056 |
http | MikroTik router config httpd | 30 | 0.056 |
http | Cross Web Server | 30 | 0.056 |
http | GM Streaming Server httpd | 29 | 0.054 |
irc | Unreal ircd | 28 | 0.052 |
http | Httpd | 28 | 0.052 |
http | Allegro-Software-RomPager | 28 | 0.052 |
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 28 | 0.052 |
giop | CORBA naming service | 28 | 0.052 |
http | Wireless Network Camera | 27 | 0.05 |
http | SAP Web Application Server | 27 | 0.05 |
http | SAP J2EE Engine httpd | 27 | 0.05 |
http | Rex media encoder http config | 27 | 0.05 |
http | RemotelyAnywhere remote PC management httpd | 27 | 0.05 |
http | Panasonic BB-HCM331 Network Camera http config | 27 | 0.05 |
http | NS700 Media Center | 27 | 0.05 |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | 26 | 0.048 |
http | Indy | 26 | 0.048 |
http | WYM httpd | 25 | 0.046 |
http | Oracle WebLogic Server | 25 | 0.046 |
http | MiniServ | 25 | 0.046 |
http | D-Link DIR-300 WAP http admin | 25 | 0.046 |
http | DD-WRT milli_httpd | 25 | 0.046 |
ftp | ProFTPD | 25 | 0.046 |
http | Webs | 24 | 0.045 |
http | BaseHTTPServer | 24 | 0.045 |
http | WSGIServer | 23 | 0.043 |
http | IBM HTTP Server | 23 | 0.043 |
http | Fortinet FortiGate 50B firewall http config | 23 | 0.043 |
smtp | Microsoft ESMTP | 21 | 0.039 |
http | TAS embbed http | 21 | 0.039 |
http | Gadspot/Avtech AV787 webcam http config | 21 | 0.039 |
vnc | RealVNC Enterprise | 20 | 0.037 |
http | PasteWSGIServer | 20 | 0.037 |
http | Micro-Web | 20 | 0.037 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 20 | 0.037 |
vnc | 19 | 0.035 | |
http | Engine 12.6.1.369 | 19 | 0.035 |
http | DVR Systems webcam http interface | 19 | 0.035 |
http | Vivotek Network Camera | 18 | 0.033 |
http | RapidLogic httpd | 18 | 0.033 |
http | Ecam | 18 | 0.033 |
http | D-Link DCS-920 webcam http config | 18 | 0.033 |
vnc | RealVNC Personal | 17 | 0.032 |
http-proxy | EZproxy web proxy | 17 | 0.032 |
http | ChipPC Extreme httpd | 17 | 0.032 |
http | adf_http_server | 17 | 0.032 |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 16 | 0.03 |
http | III 100 | 16 | 0.03 |
http | AtHome Video Streaming Server | 16 | 0.03 |
ftp | vsftpd | 16 | 0.03 |
upnp | Portable SDK for UPnP devices | 15 | 0.028 |
jetdirect | JetDirect | 15 | 0.028 |
http | Secure Computing Sidewinder firewall http admin | 15 | 0.028 |
http | Router | 15 | 0.028 |
http | MochiWeb | 15 | 0.028 |
http | http server 1.0 | 15 | 0.028 |
http | D-Link DCS-2120 webcam http config | 15 | 0.028 |
ftp | FileZilla ftpd | 15 | 0.028 |
http | ImagiaTek | 14 | 0.026 |
http | HTTPServer | 14 | 0.026 |
http | gen5th | 14 | 0.026 |
http | D-Link MiniAVServer | 14 | 0.026 |
ftp | Serv-U ftpd | 14 | 0.026 |
http | webserver | 13 | 0.024 |
http | Microsoft IIS | 13 | 0.024 |
http | CCcam card sharing system http config | 13 | 0.024 |
http | ADH-Web httpd | 13 | 0.024 |
java-rmi | Java RMI | 12 | 0.022 |
http | WebServer(IPCamera_Logo) | 12 | 0.022 |
http | thin 1.0.0 codename That | 12 | 0.022 |
http | TAS-Tech IPCam | 12 | 0.022 |
http | RapidLogic | 12 | 0.022 |
http | httpd | 12 | 0.022 |
http | D-Link Internet Camera | 12 | 0.022 |
http | D-Link DCS-910 webcam http config | 12 | 0.022 |
http | BaseHTTP | 12 | 0.022 |
soap | gSOAP soap | 11 | 0.02 |
smtp | 11 | 0.02 | |
http | YTurnServer | 11 | 0.02 |
http | TeleEye | 11 | 0.02 |
http-proxy | MikroTik http proxy | 11 | 0.02 |
http | DrayTek Vigor 3300 router http config | 11 | 0.02 |
http | AIM HTTP | 11 | 0.02 |
socks5 | 10 | 0.019 | |
smtp | Microsoft Exchange smtpd | 10 | 0.019 |
netbios-ssn | 10 | 0.019 | |
http | WebServer | 10 | 0.019 |
http | Vivotek Video Server | 10 | 0.019 |
http | Transmission BitTorrent management httpd | 10 | 0.019 |
http | QNAP TS-219P NAS http config | 10 | 0.019 |
http | MikroTik router http config | 10 | 0.019 |
http | HTTPD | 10 | 0.019 |
http | Foundry EdgeIron switch http config | 10 | 0.019 |
http | D-Link DCS-900 webcam http config | 10 | 0.019 |
http | AXIS 205 network camera web interface | 10 | 0.019 |