~398 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Count | Percent |
---|---|---|---|---|
telnet | Cisco router telnetd | 101051 | 25.331 | |
telnet | Cisco IOS telnetd | 60090 | 15.063 | |
telnet | 51833 | 12.993 | ||
telnet | Cisco 1721 router telnetd | 45414 | 11.384 | |
no match | -/- | -/- | 41742 | 10.463 |
http | Microsoft HTTPAPI httpd | 2.0 | 13921 | 3.49 |
http | 9122 | 2.287 | ||
ssl | TLSv1 | 9071 | 2.274 | |
http | Microsoft IIS httpd | 6725 | 1.686 | |
irc | Dancer ircd | 4095 | 1.026 | |
ssl | SSLv3 | 3584 | 0.898 | |
http | SonicWALL | 3429 | 0.86 | |
http | Apache Tomcat/Coyote JSP engine | 1.1 | 3316 | 0.831 |
chat | AIM or ICQ server | 2558 | 0.641 | |
eggdrop | Eggdrop IRC bot console | 1.6.21 | 2251 | 0.564 |
http | MiniServ | 0.01 | 1257 | 0.315 |
http | libwww-perl-daemon httpd | 1.36 | 1184 | 0.297 |
http | MiniServ | 1.580 | 1017 | 0.255 |
eggdrop | Eggdrop IRC bot console | 1.6.20 | 1012 | 0.254 |
http | Boa HTTPd | 0.94.14rc21 | 1006 | 0.252 |
http | Medusa httpd | 1.12 | 999 | 0.25 |
http | lighttpd | 1.4.28 | 979 | 0.245 |
http | D-Link DIR-300 WAP http admin | 958 | 0.24 | |
http | Hikvision-Webs | 773 | 0.194 | |
http | Netwave IP camera http config | 755 | 0.189 | |
telnet | Cisco LocalDirector telnetd | 752 | 0.189 | |
http | Apache | 2.2.14 | 674 | 0.169 |
http | Allegro RomPager | 4.30b3 | 639 | 0.16 |
vnc | VNC | 575 | 0.144 | |
http | GoAhead-Webs httpd | 542 | 0.136 | |
http | AIM | 1.0 | 528 | 0.132 |
http | lighttpd | 1.4.29 | 485 | 0.122 |
http | uc-httpd | 1.0.0 | 464 | 0.116 |
http | lighttpd | 1.4.19 | 451 | 0.113 |
http | WebLogic httpd | 447 | 0.112 | |
shoutcast-publishing | SHOUTcast publishing port | 435 | 0.109 | |
http | Cross Web Server | 407 | 0.102 | |
http | Apache | 2.2.3 | 383 | 0.096 |
http | Avtech AVN801 network camera | 1.0 | 376 | 0.094 |
ssl | TLS | 1.0 | 363 | 0.091 |
http | thttpd | 363 | 0.091 | |
http | Businesspass-Passepartout | 362 | 0.091 | |
http | Apache | 335 | 0.084 | |
http | MiniServ | 1.570 | 316 | 0.079 |
http | Boa HTTPd | 0.94.13 | 306 | 0.077 |
remoting | MS .NET Remoting services | 299 | 0.075 | |
http | thttpd | 2.25b | 299 | 0.075 |
http | Microsoft IIS httpd | 6.0 | 288 | 0.072 |
http | Tinyweb httpd | 1.93 | 284 | 0.071 |
http | MiniServ | 1.590 | 269 | 0.067 |
http | GeoVision GeoHttpServer for webcams | 265 | 0.066 | |
http | Indy | 10.1.5 | 257 | 0.064 |
upnp | TwonkyMedia UPnP | 254 | 0.064 | |
http | Play | 233 | 0.058 | |
http | MiniServ | 1.550 | 231 | 0.058 |
http | mini_httpd | 1.19 19dec2003 | 212 | 0.053 |
vnc | RealVNC Enterprise | 207 | 0.052 | |
http | Apache | 2.2.22 | 207 | 0.052 |
http | eHTTP | 2.0 | 199 | 0.05 |
http | Mxhttp 1.0 | 198 | 0.05 | |
http | Apache | 1.3.31 | 179 | 0.045 |
http | Tiny WebServer | 173 | 0.043 | |
upnp | Microsoft Windows UPnP | 172 | 0.043 | |
ssh | OpenSSH | 4.3 | 167 | 0.042 |
ssh | 166 | 0.042 | ||
http | Squeezebox Server (7.5.1 - 30836) | 165 | 0.041 | |
ftp | Microsoft ftpd | 165 | 0.041 | |
http | Veritas backup exec continuous protection httpd | 160 | 0.04 | |
http | Medusa httpd | 2118 | 158 | 0.04 |
telnet | corporate network! | 153 | 0.038 | |
http | httpd 1.1 | 148 | 0.037 | |
http | MiniServ | 1.530 | 135 | 0.034 |
http | Oracle WebLogic Server | 134 | 0.034 | |
http | WindWeb | 2.0 | 130 | 0.033 |
http | lighttpd | 1.4.23 | 130 | 0.033 |
http | lighttpd | 129 | 0.032 | |
http | DrcomServer1.0 | 125 | 0.031 | |
http | Apache | 2.2.15 | 125 | 0.031 |
http | Boa httpd | 124 | 0.031 | |
telnet | PE-4 Router | 120 | 0.03 | |
http | Microsoft HTTPAPI httpd | 1.0 | 118 | 0.03 |
http | lighttpd | 1.4.26 | 117 | 0.029 |
http | MiniServ | 1.560 | 116 | 0.029 |
http | Squeezebox Server (7.6.1 - 33110) | 114 | 0.029 | |
msdtc | Microsoft Distributed Transaction Coordinator | 112 | 0.028 | |
http | Microsoft IIS httpd | 7.5 | 112 | 0.028 |
http | ImagiaTek | 112 | 0.028 | |
http | Apache | 2.2.16 | 112 | 0.028 |
http | Router | 111 | 0.028 | |
http | PunkBuster http config | 108 | 0.027 | |
http | Apache | 2.2.20 | 107 | 0.027 |
arcserve | ARCserve Discovery | 104 | 0.026 | |
http | nginx | 0.8.54 | 103 | 0.026 |
http | lighttpd | 1.4.31 | 101 | 0.025 |
http | Netgear DG834 router http config | 98 | 0.025 | |
http | MX4J | 1.0 | 97 | 0.024 |
psql | Pervasive.SQL Server - Relational Engine | 96 | 0.024 | |
http | Logitech Media Server (7.7.2 - 33893) | 95 | 0.024 | |
http | Apache | 2.2.17 | 95 | 0.024 |
ftp | 95 | 0.024 | ||
telnet | Linux telnetd | 92 | 0.023 | |
rtsp | 90 | 0.023 | ||
http | VideoLAN Server streaming media | 90 | 0.023 | |
http | Jetty | 8.y.z-SNAPSHOT | 90 | 0.023 |
http | AvantiHTTPd | 1.0.2_0.9.7_0.9 | 90 | 0.023 |
http | Jetty | 6.1.19 | 89 | 0.022 |
http | Apache | 2.2.8 | 88 | 0.022 |
http | nginx | 86 | 0.022 | |
http | Apache | 2.2.9 | 86 | 0.022 |
time | 83 | 0.021 | ||
http-proxy | Squid http proxy | 83 | 0.021 | |
http | DVR Systems webcam http interface | 83 | 0.021 | |
http | Jetty | 6.0.2 | 82 | 0.021 |
xml | 81 | 0.02 | ||
http | Secure Computing Sidewinder firewall http admin | 80 | 0.02 | |
http | PDR-M800 | 1.0 | 80 | 0.02 |
telnet | cisco router pgp-gw3.ccl.ru | 79 | 0.02 | |
irc-proxy | ShroudBNC irc-proxy | 1.2 revision 1080 | 76 | 0.019 |
http | Transmission BitTorrent management httpd | 75 | 0.019 | |
http | Panasonic webcam http config | 75 | 0.019 | |
http | Microsoft IIS httpd | 5.0 | 74 | 0.019 |
http | Apache | 2.2.21 | 74 | 0.019 |
http | thttpd | 2.19-MX Jul 1 2010 | 72 | 0.018 |
http | GoAhead-Webs embedded httpd | 72 | 0.018 | |
vnc | 71 | 0.018 | ||
telnet | This Router | 71 | 0.018 | |
http | http server 1.0 | 71 | 0.018 | |
vnc | RealVNC Personal | 69 | 0.017 | |
http | GM Streaming Server httpd | 69 | 0.017 | |
http | WYM httpd | 1.0 | 68 | 0.017 |
http | Mongrel httpd | 1.1.5 | 68 | 0.017 |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | 67 | 0.017 |
http-proxy | Ncat http proxy | 67 | 0.017 | |
http | Draytek Vigor ADSL router webadmin | 66 | 0.017 | |
http | HTTPsrv | 65 | 0.016 | |
http | Jetty | 6.1.25 | 64 | 0.016 |
http | Icecast streaming media server | 64 | 0.016 | |
http | lighttpd | 1.4.30 | 62 | 0.016 |
http | Jetty | 7.4.2.v20110526 | 61 | 0.015 |
http | Mbedthis-Appweb | 2.0.4 | 60 | 0.015 |
http | Apache | 2.2.11 | 60 | 0.015 |
http | thttpd | 2.20b 10oct00 | 59 | 0.015 |
http | lighttpd | 1.4.20 | 59 | 0.015 |
http | Allegro-Software-RomPager | 2.00 | 58 | 0.015 |
http | BaseHTTP | 0.3 Python | 57 | 0.014 |
http | OwnServer1.0 | 54 | 0.014 | |
http | Linux | 2.x.x | 54 | 0.014 |
http | Jetty | 8.0.y.z-SNAPSHOT | 53 | 0.013 |
http | libwww-perl-daemon | libwww-perl-daemon | 52 | 0.013 |
telnet | cisco router tusm-gw3.ccl.ru | 50 | 0.013 | |
http | Microsoft IIS httpd | 5.1 | 50 | 0.013 |
http | Gadspot/Avtech AV787 webcam http config | 50 | 0.013 | |
telnet | Enterasys XSR Security Router telnetd | 49 | 0.012 | |
http | TP-LINK Router | 49 | 0.012 | |
ssh | SCS sshd | 2.0.13 | 48 | 0.012 |
ssh | OpenSSH | 5.3 | 48 | 0.012 |
ftp | vsftpd | 2.0.8 or later | 47 | 0.012 |
socks5 | 46 | 0.012 | ||
http | ZNC IRC bouncer http config | 0.097 or later | 46 | 0.012 |
http | WIWA | 46 | 0.012 | |
http | thttpd | 2.25b 29dec2003 | 44 | 0.011 |
http | dcs-lig-httpd | 44 | 0.011 | |
http | uTorrent WebUI | 43 | 0.011 | |
http | MS-SDK-HttpServer | 1.0 | 43 | 0.011 |
http | Rex media encoder http config | 11.0.5721.5275 | 40 | 0.01 |
http | Jetty | 6.1.x | 40 | 0.01 |
ssl | Microsoft IIS SSL | 39 | 0.01 | |
http | Virata-EmWeb | 6.0.1 | 39 | 0.01 |
http | Rex media encoder http config | 12.0.7601.17514 | 39 | 0.01 |
http | Boa HTTPd | 0.92o | 39 | 0.01 |
http | TeleEye | 1.1 | 38 | 0.01 |
telnet | Quintum Tenor D3000 VoIP gateway call event telnetd | 37 | 0.009 | |
http | uTorrent utserver web interface | 37 | 0.009 | |
http | TwistedWeb httpd | 11.1.0 | 37 | 0.009 |
http | Mbedthis-Appweb | 2.4.2 | 37 | 0.009 |
http | Boa HTTPd | 0.93.15 | 37 | 0.009 |
http | B2BPROCESSOR | 37 | 0.009 | |
ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | 36 | 0.009 |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | 36 | 0.009 |
http | Microsoft ISA httpd | 36 | 0.009 | |
http | libwww-perl-daemon httpd | 5.827 | 36 | 0.009 |
ssh | OpenSSH | 5.1p1 Debian 5 | 35 | 0.009 |
ssh | Dropbear sshd | 0.52 | 35 | 0.009 |
http | Ubicom | 1.1 | 35 | 0.009 |
http | Boa HTTPd | 0.94.14rc18 | 35 | 0.009 |
http-proxy | Squid http proxy | 2.7.STABLE9 | 34 | 0.009 |
http | lighttpd | 1.4.13 | 34 | 0.009 |
http | DD-WRT milli_httpd | 34 | 0.009 | |
http | CherryPy httpd | 3.2.0rc1 | 34 | 0.009 |
ftp | Pure-FTPd | 34 | 0.009 | |
ssh | Cisco SSH | 1.25 | 33 | 0.008 |
http | Axigen-Webmail | 33 | 0.008 | |
telnet | VPN-5 Router | 32 | 0.008 | |
http | Microsoft IIS httpd | 7.0 | 32 | 0.008 |
http | CherryPy httpd | 3.2.0 | 32 | 0.008 |
http | Apache | 2.0.53 | 32 | 0.008 |
soap | gSOAP soap | 2.7 | 31 | 0.008 |
ssh | OpenSSH | 5.8p1-hpn13v10 | 30 | 0.008 |
ssh | Dropbear sshd | 0.53.1 | 30 | 0.008 |
http | thttpd | 2.19-MX Apr 26 2011 | 30 | 0.008 |
http | AOLserver httpd | 3.4.2 | 30 | 0.008 |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 29 | 0.007 | |
http | thttpd | 2.19-MX Dec 8 2009 | 29 | 0.007 |
http | Rex media encoder http config | 10.0.0.4007 | 29 | 0.007 |
http | MochiWeb Erlang HTTP library | 1.1 | 29 | 0.007 |
http | Mobotix Camera http config | 29 | 0.007 | |
http | D-Link router/Airlink NAS http config | 29 | 0.007 | |
http | Allegro RomPager | 4.51 UPnP/1.0 | 29 | 0.007 |
ftp | ProFTPD | 29 | 0.007 | |
telnet | Netgear broadband router or ZyXel VoIP adapter telnetd | 28 | 0.007 | |
http | D-Link/Airlink IP webcam http config | 1.0 | 28 | 0.007 |
http | Axigen-Webadmin | 28 | 0.007 | |
http | Logitech Media Server (7.7.1 - 33735) | 27 | 0.007 | |
http | Linksys router http config | 27 | 0.007 | |
http | Indy | 8.0.25 | 27 | 0.007 |
http | Apache | 2.2.6 | 27 | 0.007 |
tandem-print | Sharp printer tandem printing | 26 | 0.007 | |
redis | Redis key-value store | 26 | 0.007 | |
http | MS .NET Remoting | 26 | 0.007 | |
http | Intoto httpd | 1.0 | 26 | 0.007 |
shoutcast | SHOUTcast server | 1.9.8 | 25 | 0.006 |
http | WEB SERVER | 25 | 0.006 | |
http | thttpd | 2.19-MX Sep 9 2010 | 25 | 0.006 |
http | Router Webserver | 25 | 0.006 | |
http | MS .NET Remoting httpd | 25 | 0.006 | |
http | Goliath | 25 | 0.006 | |
http | BaseHTTPServer | 0.3 | 25 | 0.006 |
H.323-gatekeeper | CompTek AquaGateKeeper | 25 | 0.006 | |
vnc-http | Ultr@VNC | 24 | 0.006 | |
svnserve | Subversion | 24 | 0.006 | |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | 24 | 0.006 | |
http | thttpd | 2.19-MX Oct 19 2011 | 24 | 0.006 |
http | RapidLogic | 1.1 | 24 | 0.006 |
http-proxy | Squid http proxy | 2.6.STABLE12 | 24 | 0.006 |
http | MultView WEB Server V1.1 | 24 | 0.006 | |
http | Boa HTTPd | 0.94.14rc18-ipcam | 24 | 0.006 |
http | Apache | 2.2.19 | 24 | 0.006 |
http | Apache | 2.2.10 | 24 | 0.006 |
telnet | Quintum Tenor D2400 VoIP gateway call event telnetd | 23 | 0.006 | |
http | Jetty | 6.1.7 | 23 | 0.006 |
http | D-Link DCS-920 webcam http config | 23 | 0.006 | |
http | Apache | 1.3.34 | 23 | 0.006 |
http | Apache | 1.3.28 | 23 | 0.006 |
directconnect | Direct Connect P2P | 23 | 0.006 | |
rtsp | Avtech MPEG4 DVR control rtspd | 22 | 0.006 | |
http | Virata-EmWeb | 5.3.0 | 22 | 0.006 |
http | nginx | 1.2.1 | 22 | 0.006 |
http | nginx | 1.1.19 | 22 | 0.006 |
http | MiniServ | 1.540 | 22 | 0.006 |
http | Apache | 1.3.41 | 22 | 0.006 |
http | AIP250 | 22 | 0.006 | |
telnet | Mulberry Co-op Telco *** | 21 | 0.005 | |
http | Vivotek Network Camera | 21 | 0.005 | |
http | Squeezebox Server (7.5.4 - 32171) | 21 | 0.005 | |
http-proxy | MikroTik http proxy | 21 | 0.005 | |
http | D-Link DCS-900 webcam http config | 21 | 0.005 | |
http | Apache | 1.3.33 | 21 | 0.005 |
ftp | FileZilla ftpd | 0.9.41 beta | 21 | 0.005 |
ssh | OpenSSH | 5.4p1 | 20 | 0.005 |
http | Netgear DGN1000 router http config | 20 | 0.005 | |
http | monit httpd | 4.10.1 | 20 | 0.005 |
http | Microsoft Windows Media Server | 9.01.01.5001 | 20 | 0.005 |
http | HTTP Software 1.1 | 20 | 0.005 | |
http | HTTPServer 3.0 | 20 | 0.005 | |
http | GS-Webs | 20 | 0.005 | |
http | eHTTP v2.0 | 20 | 0.005 | |
http | CCcam card sharing system http config | 20 | 0.005 | |
http | bywifi | 20 | 0.005 | |
http | Webs | 19 | 0.005 | |
http | Network Camera | 19 | 0.005 | |
http | MikroTik router http config | 19 | 0.005 | |
ftp | Serv-U ftpd | 6.4 | 19 | 0.005 |
telnet | PE-5 Router | 18 | 0.005 | |
telnet | First Link Technology, Inc. | 18 | 0.005 | |
smtp | Postfix smtpd | 18 | 0.005 | |
http | Windows NT | 5.0 | 18 | 0.005 |
http | Web Server | 18 | 0.005 | |
http | Virata-EmWeb | 6.2.0 | 18 | 0.005 |
http | Virata-EmWeb | 6.0.3 | 18 | 0.005 |
http | TwistedWeb httpd | 12.1.0 | 18 | 0.005 |
http | Allegro RomPager | 4.07 UPnP/1.0 | 18 | 0.005 |
http | ADH-Web httpd | 18 | 0.005 | |
geovision-mobile | Geovision mobile device support | 18 | 0.005 | |
vnc | Apple remote desktop vnc | 17 | 0.004 | |
ssh | OpenSSH | 3.9p1 | 17 | 0.004 |
smtp | Microsoft ESMTP | 6.0.3790.4675 | 17 | 0.004 |
http | QNAP TS-219P NAS http config | 1.0 | 17 | 0.004 |
http | nginx | 1.0.10 | 17 | 0.004 |
http | Medusa httpd | 1.11 | 17 | 0.004 |
http | Jetty | 17 | 0.004 | |
http | Apache Tomcat/Coyote JSP engine | 1.0 | 17 | 0.004 |
http | Apache | 1.3.39 | 17 | 0.004 |
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 17 | 0.004 | |
dominoconsole | Lotus Domino Console | 17 | 0.004 | |
telnet | cisco router pgp-gw6.ccl.ru | 16 | 0.004 | |
ssh | OpenSSH | 5.8p1 Debian 7ubuntu1 | 16 | 0.004 |
http | WSGIServer | 0.1 | 16 | 0.004 |
http | Switch | 16 | 0.004 | |
http | Power-Sockets | 16 | 0.004 | |
http | Apache | 2.0.52 | 16 | 0.004 |
telnet | the Sirius Star System ! | 15 | 0.004 | |
telnet | the BCC terminal server | 15 | 0.004 | |
telnet | Quintum Tenor D3200 VoIP gateway call event telnetd | 15 | 0.004 | |
telnet | cisco router sovetskaia47b-gw1.ccl.ru | 15 | 0.004 | |
smtp | 15 | 0.004 | ||
netbios-ssn | 15 | 0.004 | ||
http | Wireless Network Camera | 15 | 0.004 | |
http | Ubicom httpd | 1.1 | 15 | 0.004 |
http | TwistedWeb httpd | 2.2.0 | 15 | 0.004 |
http | Synaccess NP-16 or NP-1601D power management system httpd | 15 | 0.004 | |
http | SonicWALL firewall http config | 15 | 0.004 | |
http-proxy | F5 BIG-IP load balancer http proxy | 15 | 0.004 | |
http | nginx | 1.2.0 | 15 | 0.004 |
http | nginx | 0.7.67 | 15 | 0.004 |
http | Netgear DG834G router http config | 15 | 0.004 | |
http | httpd | 15 | 0.004 | |
http | Apache | 2.0.63 | 15 | 0.004 |
http | Apache | 2.0.54 | 15 | 0.004 |
http | Apache | 1.3.23 | 15 | 0.004 |
ftp | FileZilla ftpd | 0.9.37 beta | 15 | 0.004 |