~1.43 Million IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
ssl | SSLv3 | 1006096 | 70.265 |
http | Apache | 144830 | 10.115 |
http | Secure Computing Sidewinder firewall http admin | 75828 | 5.296 |
no match | -/- | 63677 | 4.447 |
ssl | TLS | 56086 | 3.917 |
http | sw-cp-server | 28034 | 1.958 |
http | 11249 | 0.786 | |
ssl | Microsoft IIS SSL | 7889 | 0.551 |
http | uhttpd | 6763 | 0.472 |
irc | Dancer ircd | 4048 | 0.283 |
http | SonicWALL | 3259 | 0.228 |
ssl | TLSv1 | 2495 | 0.174 |
http | nginx | 2327 | 0.163 |
chat | AIM or ICQ server | 2084 | 0.146 |
http | lighttpd | 1542 | 0.108 |
http | cloudflare-nginx | 1506 | 0.105 |
http | Apache Tomcat/Coyote JSP engine | 1386 | 0.097 |
http | Microsoft HTTPAPI httpd | 923 | 0.064 |
http | Microsoft IIS httpd | 916 | 0.064 |
ssh | OpenSSH | 847 | 0.059 |
http | AIM | 579 | 0.04 |
http | thttpd | 552 | 0.039 |
http | MiniServ | 512 | 0.036 |
soap | gSOAP soap | 456 | 0.032 |
http | ACUploader | 410 | 0.029 |
xml | 382 | 0.027 | |
ssl | multi-vendor SSL | 320 | 0.022 |
http-proxy | Squid http proxy | 265 | 0.019 |
http | Switch | 213 | 0.015 |
http | MikroTik router config httpd | 211 | 0.015 |
http | Jetty | 192 | 0.013 |
http | GoAhead-Webs httpd | 176 | 0.012 |
http | Boa HTTPd | 170 | 0.012 |
http | WEBrick httpd | 155 | 0.011 |
http | Draytek Vigor ADSL router webadmin | 146 | 0.01 |
http | APN HTTPD V1.4 | 145 | 0.01 |
http | Allegro RomPager | 144 | 0.01 |
http | StorageServer | 141 | 0.01 |
openvpn | OpenVPN | 123 | 0.009 |
http | libwww-perl-daemon httpd | 116 | 0.008 |
http | DrcomServer1.0 | 115 | 0.008 |
http | Netwave IP camera http config | 112 | 0.008 |
ssh | 109 | 0.008 | |
http | OpenDNS Guide | 104 | 0.007 |
ssh | Dropbear sshd | 102 | 0.007 |
vnc | VNC | 93 | 0.006 |
http | LiveConfig | 87 | 0.006 |
mysql | MySQL | 85 | 0.006 |
ssh | SCS sshd | 78 | 0.005 |
http | software-capture | 76 | 0.005 |
telnet | 68 | 0.005 | |
http | Serv-U | 66 | 0.005 |
http | Embedded HTTP Server | 65 | 0.005 |
http | Simple-Server | 63 | 0.004 |
http | Avtech AVN801 network camera | 61 | 0.004 |
http | sw-cp-server httpd | 55 | 0.004 |
http | hardware-capture | 54 | 0.004 |
http | SAP Web Application Server | 53 | 0.004 |
http | Intoto httpd | 53 | 0.004 |
http | PDR-M800 | 51 | 0.004 |
http-proxy | Haproxy http proxy | 49 | 0.003 |
http | DD-WRT milli_httpd | 47 | 0.003 |
http | WEB SERVER | 44 | 0.003 |
http | Microsoft ISA httpd | 44 | 0.003 |
http | Mbedthis-Appweb | 44 | 0.003 |
http | Httpd | 44 | 0.003 |
http | Embedded HTTP Server. | 43 | 0.003 |
http | pro-hardware-capture | 41 | 0.003 |
http | Ubicom | 39 | 0.003 |
svnserve | Subversion | 38 | 0.003 |
http-proxy | EZproxy web proxy | 37 | 0.003 |
http | Netgear or Linksys WAP http config | 37 | 0.003 |
http | micro_httpd | 36 | 0.003 |
socks5 | 35 | 0.002 | |
http | Hikvision-Webs | 35 | 0.002 |
http | mini_httpd | 34 | 0.002 |
http | Linksys router http config | 34 | 0.002 |
http | RemotelyAnywhere remote PC management httpd | 32 | 0.002 |
http | Sun ONE Web Server | 30 | 0.002 |
http | GoAhead-Webs | 29 | 0.002 |
ftp | Microsoft ftpd | 29 | 0.002 |
http | SAP NetWeaver Application Server (ICM) | 28 | 0.002 |
http | SAP NetWeaver Application Server | 27 | 0.002 |
http | GeoVision GeoHttpServer for webcams | 27 | 0.002 |
http | Virata-EmWeb | 26 | 0.002 |
ftp | FileZilla ftpd | 25 | 0.002 |
http | uTorrent WebUI | 24 | 0.002 |
ssh | APC AOS cryptlib sshd | 23 | 0.002 |
http | Oracle-iPlanet-Web-Server | 23 | 0.002 |
http | HP Web Jetadmin print server http config | 23 | 0.002 |
vnc | RealVNC Enterprise | 22 | 0.002 |
http | http server 1.0 | 22 | 0.002 |
http | JRun Web Server | 21 | 0.001 |
http | Cisco IOS http config | 21 | 0.001 |
smtp | Microsoft ESMTP | 19 | 0.001 |
http-proxy | F5 BIG-IP load balancer http proxy | 19 | 0.001 |
http | Indy httpd | 19 | 0.001 |
http | Gadspot/Avtech AV787 webcam http config | 19 | 0.001 |
http | FlashCom | 19 | 0.001 |
shoutcast-publishing | SHOUTcast publishing port | 18 | 0.001 |
http | uc-httpd | 18 | 0.001 |
http | HTTPD 1.0 | 18 | 0.001 |
http | Boa httpd | 18 | 0.001 |
ftp | Serv-U ftpd | 17 | 0.001 |
ssh | Bitvise WinSSHD | 16 | 0.001 |
smtp | 16 | 0.001 | |
ovm-manager | Oracle VM Manager | 16 | 0.001 |
jabber | ejabberd | 16 | 0.001 |
http | Ubicom httpd | 16 | 0.001 |
http | GoAhead-Webs embedded httpd | 16 | 0.001 |
http | Apache Advanced Extranet Server httpd | 16 | 0.001 |
http | A p a c h e | 16 | 0.001 |
ssh | SunSSH | 15 | 0.001 |
shoutcast | SHOUTcast server | 15 | 0.001 |
http-proxy | MikroTik http proxy | 15 | 0.001 |
http | Netgear DG834G router http config | 15 | 0.001 |
http | D-Link DIR-300 WAP http admin | 15 | 0.001 |
http | Cross Web Server | 15 | 0.001 |
http | Caucho Resin JSP engine | 15 | 0.001 |
ftp | vsftpd | 15 | 0.001 |
ftp | ProFTPD | 15 | 0.001 |
ftp | 15 | 0.001 | |
vnc | RealVNC Personal | 14 | 0.001 |
smtp | Exim smtpd | 14 | 0.001 |
http | Router Webserver | 14 | 0.001 |
http | QNAP TS-219P NAS http config | 14 | 0.001 |
http | DVR Systems webcam http interface | 14 | 0.001 |
ftp | Pure-FTPd | 14 | 0.001 |
ftp | IndiFTPD | 14 | 0.001 |
directconnect | Direct Connect P2P | 14 | 0.001 |
http | Sun Java System httpd | 13 | 0.001 |
http | Netgear WNR3500L WAP http config | 13 | 0.001 |
http | MochiWeb | 13 | 0.001 |
smtp | Postfix smtpd | 12 | 0.001 |
http | Router | 12 | 0.001 |
http | NT | 12 | 0.001 |
http | Multi-WAN VPN Link Balancer HTTP Server | 12 | 0.001 |
http | APN HTTPD V1.3 | 12 | 0.001 |
ssh | Cisco SSH | 11 | 0.001 |
smtp | Sendmail | 11 | 0.001 |
http | SonicWALL firewall http config | 11 | 0.001 |
http | SABnzbd newsreader http interface | 11 | 0.001 |
http | monit httpd | 11 | 0.001 |
http | D-Link router/Airlink NAS http config | 11 | 0.001 |
http | AIM HTTP | 11 | 0.001 |
vnc | 10 | 0.001 | |
ssh | WeOnlyDo sshd | 10 | 0.001 |
smtp | Microsoft Exchange smtpd | 10 | 0.001 |
java-rmi | Java RMI | 10 | 0.001 |
http | TwistedWeb httpd | 10 | 0.001 |
http | Netgear DGN1000 router http config | 10 | 0.001 |
http | Eudemon Server 1.0 | 10 | 0.001 |
http | CherryPy httpd | 10 | 0.001 |