~280 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
http | Port25 PowerMTA mail gateway http admin | 127927 | 45.556 |
http | 27980 | 9.964 | |
http | Mini web server | 15563 | 5.542 |
http | Apache | 9041 | 3.22 |
http | HiQ Flash Server | 7805 | 2.779 |
http | lighttpd | 7459 | 2.656 |
http | Microsoft IIS httpd | 7049 | 2.51 |
http | Bluecat Networks Proteus IPAM or Enterasys Dragon IDS http config | 5680 | 2.023 |
http | JBoss service httpd | 5321 | 1.895 |
http | Apache Tomcat/Coyote JSP engine | 4379 | 1.559 |
irc | Dancer ircd | 4028 | 1.434 |
http | SonicWALL | 3708 | 1.32 |
http | Boa HTTPd | 3679 | 1.31 |
no match | -/- | 3301 | 1.176 |
http | Netwave webcam http config | 2789 | 0.993 |
http | thttpd | 2471 | 0.88 |
http | Mini web server 1.0 ZTE corp 2005. | 2236 | 0.796 |
chat | AIM or ICQ server | 2036 | 0.725 |
http | GoAhead-Webs httpd | 1726 | 0.615 |
http | Netwave IP camera http config | 1696 | 0.604 |
http | HTTPD 1.0 | 1659 | 0.591 |
http | Cdn Cache Server V2.0 | 1475 | 0.525 |
http | CherryPy httpd | 1414 | 0.504 |
http | NAI EPO Agent framework | 1241 | 0.442 |
ssl | TLS | 1032 | 0.368 |
http | nginx | 946 | 0.337 |
http | Speedr | 763 | 0.272 |
http | AIM | 714 | 0.254 |
http | Jetty | 687 | 0.245 |
http-proxy | MikroTik http proxy | 594 | 0.212 |
http | Traffic Manager 3.1.3-unstable | 577 | 0.205 |
http | mini_httpd | 545 | 0.194 |
http | Microsoft HTTPAPI httpd | 544 | 0.194 |
http | dcs-lig-httpd | 471 | 0.168 |
http | Traffic Manager 3.0.4 | 451 | 0.161 |
http | Allegro RomPager | 431 | 0.153 |
http-proxy | Squid http proxy | 425 | 0.151 |
http | Ubicom | 415 | 0.148 |
http | MikroTik router config httpd | 414 | 0.147 |
http | uc-httpd | 351 | 0.125 |
http | Network Camera | 349 | 0.124 |
http | GoAhead-Webs embedded httpd | 348 | 0.124 |
http | Network Associates ePolicy Orchestrator | 341 | 0.121 |
http | Caucho Resin JSP engine | 339 | 0.121 |
http | GeoVision GeoHttpServer for webcams | 327 | 0.116 |
http | Hikvision-Webs | 316 | 0.113 |
http | Avtech AVN801 network camera | 315 | 0.112 |
http | Secure Computing Sidewinder firewall http admin | 280 | 0.1 |
ssh | OpenSSH | 275 | 0.098 |
http | uhttpd | 256 | 0.091 |
http | Linux | 251 | 0.089 |
http | Zope httpd | 244 | 0.087 |
http | ZyXEL ZyWALL USG 200 firewall http config | 234 | 0.083 |
http | Mobotix Camera http config | 222 | 0.079 |
http | MikroTik router http config | 206 | 0.073 |
http | DrcomServer1.0 | 204 | 0.073 |
http | Motion Camera httpd | 199 | 0.071 |
http | Cross Web Server | 199 | 0.071 |
http | TornadoServer | 191 | 0.068 |
http | DD-WRT milli_httpd | 188 | 0.067 |
http | Microsoft-HTTPAPI | 175 | 0.062 |
http | uTorrent utserver web interface | 169 | 0.06 |
http | Z-World Rabbit | 161 | 0.057 |
ssh | NetScreen sshd | 156 | 0.056 |
http | Citrix Metaframe ICA Browser | 147 | 0.052 |
http | TwistedWeb httpd | 143 | 0.051 |
http | Mbedthis-Appweb | 143 | 0.051 |
http | Simple java | 141 | 0.05 |
http | GoAhead-Webs | 138 | 0.049 |
http | Wireless Network Camera | 137 | 0.049 |
http | Aftograf Application Server | 136 | 0.048 |
http | Rex media encoder http config | 128 | 0.046 |
http | D-Link DIR-300 WAP http admin | 118 | 0.042 |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | 117 | 0.042 |
http | OpenDNS Guide | 116 | 0.041 |
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 111 | 0.04 |
http | Linksys PAP2 VoIP http config | 110 | 0.039 |
http | Cisco IOS http config | 109 | 0.039 |
http | Indy | 103 | 0.037 |
ssh | 100 | 0.036 | |
remoting | MS .NET Remoting services | 100 | 0.036 |
http | Vivotek 3102 Camera http config | 95 | 0.034 |
http | WYM httpd | 90 | 0.032 |
vnc | VNC | 89 | 0.032 |
http | Router | 89 | 0.032 |
xml-rpc | ABYSS httpd | 88 | 0.031 |
http | webserver | 88 | 0.031 |
http | DVR Systems webcam http interface | 88 | 0.031 |
http | D-Link/Airlink IP webcam http config | 88 | 0.031 |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 86 | 0.031 |
http | QNAP TS-219P NAS http config | 85 | 0.03 |
http | D-Link DCS-920 webcam http config | 84 | 0.03 |
http | http server 1.0 | 83 | 0.03 |
http | D-Link Internet Camera | 83 | 0.03 |
http | Z-World Rabbit microcontroller httpd | 82 | 0.029 |
http | MyChat HTTP Server v.1.0 | 82 | 0.029 |
http | TP-LINK Router | 81 | 0.029 |
telnet | 76 | 0.027 | |
http | Webs | 76 | 0.027 |
http | Polycom SoundPoint VoIP phone http config | 76 | 0.027 |
socks5 | 75 | 0.027 | |
http | Virata-EmWeb | 73 | 0.026 |
http | Websense Content Gateway Manager http config | 72 | 0.026 |
http | PDR-M800 | 72 | 0.026 |
shoutcast-publishing | SHOUTcast publishing port | 71 | 0.025 |
http | RapidLogic httpd | 71 | 0.025 |
http | Draytek Vigor ADSL router webadmin | 71 | 0.025 |
http | Vivotek Network Camera | 69 | 0.025 |
http | D-Link DCS-2120 webcam http config | 69 | 0.025 |
http | BaseHTTPServer | 69 | 0.025 |
http | Vivotek IP7131 Network Camera http config | 68 | 0.024 |
http | Snom 300 VoIP phone http config | 67 | 0.024 |
http | Microsoft IIS | 67 | 0.024 |
http | Traffic Manager 3.0.3 | 66 | 0.024 |
http | Siemens Gigaset A580 or S450 VoIP phone http config | 66 | 0.024 |
http | Intoto httpd | 66 | 0.024 |
http | Gadspot/Avtech AV787 webcam http config | 66 | 0.024 |
http | D-Link DCS-910 webcam http config | 66 | 0.024 |
http | uTorrent WebUI | 65 | 0.023 |
http | Traffic Manager 3.2.0 | 65 | 0.023 |
http | XBMC Web Media Manager | 64 | 0.023 |
http | WebLogic httpd | 63 | 0.022 |
http | TP-LINK Web Smart Switch http config | 63 | 0.022 |
http | Linksys router http config | 63 | 0.022 |
http | Cougar | 63 | 0.022 |
ftp | Microsoft ftpd | 62 | 0.022 |
http | Yawcam webcam viewer httpd | 61 | 0.022 |
http | Tridium Niagara httpd | 61 | 0.022 |
http | TVie TSS | 60 | 0.021 |
http | ADAM-6000 | 60 | 0.021 |
http | WindWeb | 58 | 0.021 |
http | Ipswitch WhatsUp Professional httpd | 57 | 0.02 |
http | WSGIServer | 56 | 0.02 |
http | Microsoft Windows Media Server | 55 | 0.02 |
http | webcamXP httpd | 54 | 0.019 |
http | Java PseudoHttpd | 54 | 0.019 |
rtsp | 53 | 0.019 | |
http | RemotelyAnywhere remote PC management httpd | 53 | 0.019 |
http | Traffic Manager 3.0.2 | 52 | 0.019 |
http | SonicWALL firewall http config | 51 | 0.018 |
http | alphapd | 51 | 0.018 |
http | Hughes Technologies Embedded Server | 50 | 0.018 |
http | Transmission BitTorrent management httpd | 49 | 0.017 |
http | Traffic Manager 3.0.1 | 49 | 0.017 |
http | Router Webserver | 49 | 0.017 |
http | Aastra 6731i VoIP phone http config | 49 | 0.017 |
soap | gSOAP soap | 48 | 0.017 |
http | Blue-Coat-CacheFlow-Appliance | 48 | 0.017 |
http | D-Link DCS-900 webcam http config | 47 | 0.017 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 47 | 0.017 |
http | MiniServ | 46 | 0.016 |
http | Linksys SPA942 VoIP phone http config | 46 | 0.016 |
http | Chain Cast support service | 46 | 0.016 |
http | ver2.4 rev0 | 45 | 0.016 |
http | libwww-perl-daemon httpd | 45 | 0.016 |
http | AXIS 205 network camera web interface | 44 | 0.016 |
http | avtech httpd | 44 | 0.016 |
http | Grandstream HT502 VoIP router http config | 43 | 0.015 |
http | Tiny WebServer | 40 | 0.014 |
http | Mongoose httpd | 40 | 0.014 |
http | Indy httpd | 40 | 0.014 |
http | GoAhead httpd | 40 | 0.014 |
mysql | MySQL | 39 | 0.014 |
http | WebServer(IPCamera_Logo) | 39 | 0.014 |
http | httpd | 39 | 0.014 |
telnet | Linux telnetd | 37 | 0.013 |
http | yawcam | 37 | 0.013 |
http | Cisco SPA504G VoIP phone http config | 37 | 0.013 |
http | Dreambox httpd | 36 | 0.013 |
http | Traffic Manager 3.1.1-unstable | 35 | 0.012 |
http | Techno Vision Security System http config | 35 | 0.012 |
http | Oracle Application Server 10g httpd | 35 | 0.012 |
http | Vconference | 34 | 0.012 |
http | Traffic Manager 3.3.0 | 34 | 0.012 |
ftp | 34 | 0.012 | |
shoutcast | SHOUTcast server | 33 | 0.012 |
http | Ubicom httpd | 33 | 0.012 |
http | Sun GlassFish Open Source Edition | 33 | 0.012 |
http | HTTPsrv | 33 | 0.012 |
http | Fnord httpd | 33 | 0.012 |
http | MS .NET Remoting httpd | 32 | 0.011 |
http | avtech | 32 | 0.011 |
ftp | FileZilla ftpd | 32 | 0.011 |
http | Allegro-Software-RomPager | 30 | 0.011 |
http | UltiDev Cassini httpd | 29 | 0.01 |
http | Icecast streaming media server | 29 | 0.01 |
http | Cassini | 29 | 0.01 |
ssh | Dropbear sshd | 28 | 0.01 |
http | HttpFileServer httpd | 28 | 0.01 |
http | APC SmartUPS http config | 28 | 0.01 |
ftp | ProFTPD | 28 | 0.01 |
http | Traffic Manager 3.0.5 | 27 | 0.01 |
http-proxy | Symantec firewall http proxy | 27 | 0.01 |
http | Lotus Domino httpd | 27 | 0.01 |
http | D-Link DCS-2121 webcam http config | 27 | 0.01 |
http | TP-LINK WR740N WAP http config | 26 | 0.009 |
http | Sun GlassFish | 26 | 0.009 |
http | ImagiaTek | 26 | 0.009 |
http | Apache Tomcat | 26 | 0.009 |
http | WebtoB | 25 | 0.009 |
http | Network Camera with Pan | 25 | 0.009 |
http | Netgear DG834G router http config | 25 | 0.009 |
http | ODN Webserver | 24 | 0.009 |
http | Netgear DG834 router http config | 24 | 0.009 |
http | MX4J | 24 | 0.009 |
http | IQinVision Embedded 1.0 | 24 | 0.009 |
http | HTTP Software 1.1 | 24 | 0.009 |
http | gen5th | 24 | 0.009 |
http | FRITZ!Box http config | 24 | 0.009 |
http | ESET NOD32 anti-virus update httpd | 24 | 0.009 |
http | ChipPC Extreme httpd | 24 | 0.009 |
http | CCcam card sharing system http config | 24 | 0.009 |
http | Zimbra http config | 23 | 0.008 |
http | Mathopd httpd | 23 | 0.008 |
http | Grandstream GXP2010 http config | 23 | 0.008 |
http | Grandstream GXP1200 http config | 23 | 0.008 |
http | Crestron MPS-200 AV routing system http config | 23 | 0.008 |
vnc | RealVNC Personal | 22 | 0.008 |
http | Unreal Tournament http admin | 22 | 0.008 |
http | TeamViewer httpd | 22 | 0.008 |
http | Sun Niagara httpd | 22 | 0.008 |
http | MS-SDK-HttpServer | 22 | 0.008 |
http | D-Link DCS-5220 webcam http config | 22 | 0.008 |
ftp | Solaris ftpd | 22 | 0.008 |
http | W3MFC | 21 | 0.007 |
http-proxy | EZproxy web proxy | 21 | 0.007 |
http | ADH-Web httpd | 21 | 0.007 |
ftp | Serv-U ftpd | 21 | 0.007 |
http | Winstone Servlet Engine | 20 | 0.007 |
http | sbcache | 20 | 0.007 |
http | Panasonic BB-HCM331 Network Camera http config | 20 | 0.007 |
http | Oracle GlassFish | 20 | 0.007 |
http | InnoKB | 20 | 0.007 |
http | IBM HTTP Server | 20 | 0.007 |
http | Embedded HTTP Server | 20 | 0.007 |
http | Siemens Gigaset PBX/TARGA DIP VoIP phone http config | 19 | 0.007 |
http | PasteWSGIServer | 19 | 0.007 |
http | Netgear WGR614v9 WAP http config | 19 | 0.007 |
http | httpd 1.1 | 19 | 0.007 |
http | Httpd | 19 | 0.007 |
http | GS-Webs | 19 | 0.007 |
http | frss-X-Web | 19 | 0.007 |
http | dvr1614n web-cam httpd | 19 | 0.007 |
http | Debut embedded httpd | 19 | 0.007 |
http | Cherokee httpd | 19 | 0.007 |
smtp | Microsoft ESMTP | 18 | 0.006 |
http | TP-LINK WR841N WAP http config | 18 | 0.006 |
http | Network Dome Camera | 18 | 0.006 |
http | HTTP | 18 | 0.006 |
http | Grandstream GXP2000 http config | 18 | 0.006 |
http | Cowboy | 18 | 0.006 |
http | World Client WDaemon httpd | 17 | 0.006 |
http | WindRiver-WebServer | 17 | 0.006 |
http | Rhinosoft Serv-U httpd | 17 | 0.006 |
http | MX4J-HTTPD | 17 | 0.006 |
http | IPC | 17 | 0.006 |
http | go1984 httpd | 17 | 0.006 |
http | FusionReactor web server monitor | 17 | 0.006 |
http | fhttp | 17 | 0.006 |
http | D-Link DCS-6620 webcam http config | 17 | 0.006 |
http-proxy | F5 BIG-IP load balancer http proxy | 16 | 0.006 |
http | Milestone XProtect video surveillance http interface | 16 | 0.006 |
http | Linksys wireless-G WAP http config | 16 | 0.006 |
http | LevelOne WCS-2030 webcam http config | 16 | 0.006 |
http | ESET NOD32 windows anti-virus http config | 16 | 0.006 |
http | D-Link MiniAVServer | 16 | 0.006 |
http | D-Link DVS-4088S, DVS-5088S, or DVG-7062S VoIP gateway http config | 16 | 0.006 |
http | AudioCodes Mediant 200 VoIP gateway http config | 16 | 0.006 |
http | 2.2.44 | 16 | 0.006 |
vnc | RealVNC Enterprise | 15 | 0.005 |
http | Vivotek Video Server | 15 | 0.005 |
http | Tornado httpd | 15 | 0.005 |
http | NewCS satellite card sharing system http config | 15 | 0.005 |
http | Netgear WNR1000v3 WAP http config | 15 | 0.005 |
http | LuCI Lua http config | 15 | 0.005 |
http | IQ3 | 15 | 0.005 |
http | GM Streaming Server httpd | 15 | 0.005 |
http | Ecam | 15 | 0.005 |
http | D-Link DCS-3220 webcam http config | 15 | 0.005 |
http | Boa | 15 | 0.005 |
http | BaseHTTP | 15 | 0.005 |
directconnect | Direct Connect P2P | 15 | 0.005 |
xml | 14 | 0.005 | |
upnp | Portable SDK for UPnP devices | 14 | 0.005 |
rtsp | Avtech MPEG4 DVR control rtspd | 14 | 0.005 |
http | uClinux-httpd | 14 | 0.005 |
http | Stanley NT500 access control system httpd | 14 | 0.005 |
http | Samsung UE55D7000 TV http config | 14 | 0.005 |
http | Kerio MailServer http config | 14 | 0.005 |
http | IP_SHARER WEB | 14 | 0.005 |
http | IBM Desktop On-Call httpd | 14 | 0.005 |
http | D-Link DCS-6620G webcam http config | 14 | 0.005 |
http | Cisco SPA303 VoIP phone http config | 14 | 0.005 |
http | BolidXMLRPC | 14 | 0.005 |
http | Apache Embedded Server | 14 | 0.005 |
ftp | vsftpd | 14 | 0.005 |
http | Wireless Network Camera with Pan | 13 | 0.005 |
http | VB | 13 | 0.005 |
http | U S Software Web Server | 13 | 0.005 |
http | Traffic Manager 2.1.6-unstable | 13 | 0.005 |
http | SABnzbd newsreader http interface | 13 | 0.005 |
http | Oracle WebLogic Server | 13 | 0.005 |
http | MJPG-Streamer | 13 | 0.005 |
http | Ipswitch WS_FTP http config | 13 | 0.005 |
http | Gnway Web Server | 13 | 0.005 |
http | D-Link web camera http config | 13 | 0.005 |
geovision-audio | Geovision webcam audio | 13 | 0.005 |
ftp | Pure-FTPd | 13 | 0.005 |
ssh | Cisco SSH | 12 | 0.004 |
http | WebServer | 12 | 0.004 |
http | QNAP TS-109-II NAS http config | 12 | 0.004 |
http-proxy | CCProxy http proxy | 12 | 0.004 |
http | MS .NET Remoting | 12 | 0.004 |
http | Miktotik Dude network monitor | 12 | 0.004 |
http | IQhttpD | 12 | 0.004 |
http | IP_SHARER WEB 1.0 | 12 | 0.004 |
http | H3C-Miniware-Webs | 12 | 0.004 |
http | Engine 12.6.1.372 | 12 | 0.004 |
http | David WebBox httpd | 12 | 0.004 |
http | CCProxy | 12 | 0.004 |
http | Buffalo AirStation http config | 12 | 0.004 |
http | AIM HTTP | 12 | 0.004 |
http | Aastra 6757i VoIP phone http config | 12 | 0.004 |
http | Aastra 6755i VoIP phone http config | 12 | 0.004 |
http | 4D WebStar D | 12 | 0.004 |
http | 4D_v11_SQL | 12 | 0.004 |
upnp | Conexant-EmWeb | 11 | 0.004 |
smtp | Postfix smtpd | 11 | 0.004 |
smtp | Microsoft Exchange smtpd | 11 | 0.004 |
smtp | 11 | 0.004 | |
http | WEB SERVER | 11 | 0.004 |
http | WebBox-20 | 11 | 0.004 |
http | Traffic Manager 3.1.0-unstable | 11 | 0.004 |
http | Router Web Config System | 11 | 0.004 |
http-proxy | NetApp NetCache http proxy | 11 | 0.004 |
http | Perlbal | 11 | 0.004 |
http | OwnServer1.0 | 11 | 0.004 |
http | Octoshape P2P streaming web service | 11 | 0.004 |
http | Lantronix XPort embedded ethernet http config | 11 | 0.004 |
http | fec | 11 | 0.004 |
vnc | 10 | 0.004 | |
ssl | multi-vendor SSL | 10 | 0.004 |
http | XBMC http interface | 10 | 0.004 |
http | wg_httpd | 10 | 0.004 |
http | Traffic Manager 3.0.0 | 10 | 0.004 |
http | SEEnergy SVR-116 | 10 | 0.004 |
http | RapidLogic | 10 | 0.004 |
http-proxy | FreeProxy http proxy | 10 | 0.004 |
http | Oracle XML DB Enterprise Edition httpd | 10 | 0.004 |
http | (null) | 10 | 0.004 |
http | NETWORK | 10 | 0.004 |
http | Netgear WGR614v7 WAP http config | 10 | 0.004 |
http | Netgear DGN1000 router http config | 10 | 0.004 |
http | Henry | 10 | 0.004 |
http | gunicorn | 10 | 0.004 |
http | Embedthis-Appweb | 10 | 0.004 |
http | eHTTP v2.0 | 10 | 0.004 |
http | EA-HTTP | 10 | 0.004 |
damewaremr | DameWare Mini Remote Control | 10 | 0.004 |