~1.4 Million IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
http | MiniServ | 587694 | 42.067 |
no match | -/- | 367949 | 26.338 |
http | Apache Tomcat/Coyote JSP engine | 121675 | 8.71 |
ssl | OpenSSL | 69615 | 4.983 |
ndmp | Veritas Backup Exec ndmp | 56222 | 4.024 |
http | 53666 | 3.841 | |
http | Apache | 28865 | 2.066 |
http | Boa HTTPd | 8447 | 0.605 |
http | lighttpd | 6673 | 0.478 |
http | GoAhead-Webs httpd | 6366 | 0.456 |
soap | gSOAP soap | 5424 | 0.388 |
http | SonicWALL | 4370 | 0.313 |
irc | Dancer ircd | 4101 | 0.294 |
http | thttpd | 3253 | 0.233 |
ndmp | NetApp Data ONTAP ndmp | 2747 | 0.197 |
http | mini_httpd | 2673 | 0.191 |
chat | AIM or ICQ server | 2636 | 0.189 |
http | Microsoft IIS httpd | 2497 | 0.179 |
ice | Internet Communications Engine | 2028 | 0.145 |
ssl | TLS | 1984 | 0.142 |
http-proxy | Squid http proxy | 1976 | 0.141 |
http | TP-LINK WR340G WAP http config | 1863 | 0.133 |
ssl | Microsoft IIS SSL | 1791 | 0.128 |
ssh | OpenSSH | 1754 | 0.126 |
http | Boa httpd | 1700 | 0.122 |
http | grabtofile | 1523 | 0.109 |
ftp | vsftpd | 1500 | 0.107 |
rtsp | 1440 | 0.103 | |
http | Jetty | 1334 | 0.095 |
http | Secure Computing Sidewinder firewall http admin | 1304 | 0.093 |
ssh | Dropbear sshd | 1270 | 0.091 |
http | Atera Networks Citadel firewall http config | 1262 | 0.09 |
http | Router | 1221 | 0.087 |
http | PENNY web server. Signalsync Co. | 1133 | 0.081 |
http | 2.2.24B74 | 1125 | 0.081 |
http | Web-Based Enterprise Management CIM serverOpenPegasus WBEM httpd | 919 | 0.066 |
http | InterNiche Technologies WebServer | 758 | 0.054 |
http | Microsoft HTTPAPI httpd | 689 | 0.049 |
http | FlyNOS_webserver | 687 | 0.049 |
http | GeoVision GeoHttpServer for webcams | 649 | 0.046 |
http | AIM | 632 | 0.045 |
http | World Client WDaemon httpd | 590 | 0.042 |
vnc | VNC | 588 | 0.042 |
ssh | MikroTik RouterOS sshd | 577 | 0.041 |
fw1-topology | Checkpoint FireWall-1 Topology | 556 | 0.04 |
http | nginx | 528 | 0.038 |
irc-proxy | psyBNC | 517 | 0.037 |
vnc | 481 | 0.034 | |
http | Avtech AVN801 network camera | 475 | 0.034 |
hp-gsg | IEEE 1284.4 scan peripheral gateway | 475 | 0.034 |
http | 2.2.23A78 | 470 | 0.034 |
http | uTorrent WebUI | 469 | 0.034 |
http | GoAhead-Webs embedded httpd | 462 | 0.033 |
smtp | Microsoft ESMTP | 448 | 0.032 |
http | Hikvision-Webs | 424 | 0.03 |
http | Allegro RomPager | 401 | 0.029 |
http | HTTPD 1.0 | 396 | 0.028 |
http | ZyXEL P-320W broadband router http config | 393 | 0.028 |
http | DrayTek Vigor 2800-series ADSL router httpd | 393 | 0.028 |
pop3 | MailEnable POP3 Server | 379 | 0.027 |
http | Httpd | 376 | 0.027 |
pyro | Python Remote Object Nameserver | 350 | 0.025 |
ssl | SSLv3 | 347 | 0.025 |
telnet | 345 | 0.025 | |
http | 2.2.24B98 | 345 | 0.025 |
ftp | 296 | 0.021 | |
http | Cross Web Server | 292 | 0.021 |
http | Embedded HTTP Server | 286 | 0.02 |
secure-socket | CA Secure Socket Adapter | 270 | 0.019 |
http | Trend Micro OfficeScan Antivirus http config | 268 | 0.019 |
http | MikroTik router http config | 266 | 0.019 |
http | Virata-EmWeb | 262 | 0.019 |
http | http server | 252 | 0.018 |
postx-reporting | PostX IP Reporting alarm system | 235 | 0.017 |
http | TwistedWeb httpd | 224 | 0.016 |
http | Netwave IP camera http config | 224 | 0.016 |
ftp | FileZilla ftpd | 214 | 0.015 |
http | RemotelyAnywhere remote PC management httpd | 211 | 0.015 |
http | HTTP Server Version 1.0.0 | 211 | 0.015 |
http | WEB SERVER | 208 | 0.015 |
http | IBM WebSphere Application Server | 206 | 0.015 |
http | uc-httpd | 205 | 0.015 |
http | Mbedthis-Appweb | 204 | 0.015 |
telnet | Enterasys XSR Security Router telnetd | 202 | 0.014 |
http | VCS-VideoJet-Webserver | 199 | 0.014 |
http | MikroTik router config httpd | 196 | 0.014 |
shoutcast | SHOUTcast server | 195 | 0.014 |
arcserve | ARCserve Discovery | 190 | 0.014 |
zabbix | Zabbix Monitoring System | 182 | 0.013 |
http | BusyBox httpd | 177 | 0.013 |
ftp | Microsoft ftpd | 177 | 0.013 |
http | TP-LINK Router | 174 | 0.012 |
http | Netgear DG834G router http config | 173 | 0.012 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 173 | 0.012 |
http | SonicWALL firewall http config | 168 | 0.012 |
http | TP-LINK WR740N WAP http config | 156 | 0.011 |
http | D-Link DIR-300 WAP http admin | 154 | 0.011 |
http | DrcomServer1.0 | 149 | 0.011 |
http | 2.2.16.D16 | 149 | 0.011 |
socks5 | 148 | 0.011 | |
telnet | Cadant C3 Cable Modem Termination Server telnetd | 146 | 0.01 |
http | 2.2.15.C35 | 143 | 0.01 |
http | Draytek Vigor ADSL router webadmin | 139 | 0.01 |
http | http server 1.0 | 134 | 0.01 |
ssh | 132 | 0.009 | |
giop | CORBA naming service | 128 | 0.009 |
http | DD-WRT milli_httpd | 127 | 0.009 |
vnc | RealVNC Personal | 125 | 0.009 |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 120 | 0.009 |
http | Netgear DG834 router http config | 120 | 0.009 |
http | Abyss httpd | 117 | 0.008 |
smtp | 115 | 0.008 | |
ftp | Serv-U ftpd | 114 | 0.008 |
http | Intoto httpd | 111 | 0.008 |
smtp | Exim smtpd | 110 | 0.008 |
http | a_63 | 106 | 0.008 |
openvpn | OpenVPN | 103 | 0.007 |
http | TP-LINK WR541G/542G WAP http config | 103 | 0.007 |
memcache | memcached | 97 | 0.007 |
vnc | RealVNC Enterprise | 96 | 0.007 |
http | CherryPy httpd | 94 | 0.007 |
mysql | MySQL | 93 | 0.007 |
http | TP-LINK WR941N WAP http config | 90 | 0.006 |
netbios-ssn | 83 | 0.006 | |
http | VCS-VideoJet-Webserver httpd | 82 | 0.006 |
http | HTTP Software 1.1 | 82 | 0.006 |
http | H3C-Miniware-Webs | 82 | 0.006 |
remoting | MS .NET Remoting services | 81 | 0.006 |
http | httpd | 81 | 0.006 |
http | Icecast streaming media server | 80 | 0.006 |
http | dcs-lig-httpd | 78 | 0.006 |
http | Router Web Config System | 77 | 0.006 |
socks-proxy | Socks4A | 76 | 0.005 |
http | AVT1100 | 76 | 0.005 |
time | 74 | 0.005 | |
http | uhttpd | 72 | 0.005 |
http | WindWeb | 71 | 0.005 |
http | CCcam card sharing system http config | 71 | 0.005 |
http | Linksys router http config | 67 | 0.005 |
shoutcast-publishing | SHOUTcast publishing port | 66 | 0.005 |
smtp | Postfix smtpd | 65 | 0.005 |
mas-financial | MAS200 Financial System | 65 | 0.005 |
http-proxy | 3proxy http proxy | 64 | 0.005 |
http | 2.2.25A97 | 64 | 0.005 |
http | wg_httpd | 63 | 0.005 |
http | Caucho Resin JSP engine | 63 | 0.005 |
http-proxy | 3Proxy http proxy | 62 | 0.004 |
xml | 61 | 0.004 | |
http | Ubicom | 61 | 0.004 |
smtp | Sendmail | 59 | 0.004 |
printer-admin | Lexmark printer admin | 59 | 0.004 |
http | 2.2.23A75 | 59 | 0.004 |
http | Java PseudoHttpd | 58 | 0.004 |
http | Indy | 58 | 0.004 |
http | uTorrent utserver web interface | 56 | 0.004 |
http | PDR-M800 | 56 | 0.004 |
upnp | Microsoft Windows UPnP | 55 | 0.004 |
http | ZNC IRC bouncer http config | 55 | 0.004 |
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 55 | 0.004 |
ftp | ProFTPD | 55 | 0.004 |
econtagt | Compuware ServerVantage EcoNTAgt | 55 | 0.004 |
http | Cisco IOS http config | 53 | 0.004 |
http | Netgear DGN1000 router http config | 52 | 0.004 |
http | D-Link DI-524 http config | 52 | 0.004 |
ssl | TLSv1 | 49 | 0.004 |
http | Buffalo AirStation http config | 49 | 0.004 |
http | TP-LINK WR841N WAP http config | 48 | 0.003 |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | 47 | 0.003 |
http | Generic router http config | 47 | 0.003 |
telnet | Linux telnetd | 46 | 0.003 |
http | Play | 46 | 0.003 |
http | MS-SDK-HttpServer | 46 | 0.003 |
http | 2.2.23A70 | 46 | 0.003 |
zebedee | Zebedee encrypted tunnel | 45 | 0.003 |
telnet | VERIXI RTR61.BE.VERIXI.NET | 45 | 0.003 |
http | uClinux-httpd | 45 | 0.003 |
http | Transmission BitTorrent management httpd | 45 | 0.003 |
http | Embedded HTTP Server. | 45 | 0.003 |
http | TP-LINK WR641G/642G WAP http config | 44 | 0.003 |
mongodb | MongoDB | 43 | 0.003 |
http | MultView WEB Server V1.1 | 43 | 0.003 |
http | webserver | 42 | 0.003 |
http | TP-LINK WR741N WAP http config | 42 | 0.003 |
http | Network Camera | 42 | 0.003 |
http | Beck IPC@CHIP embedded httpd | 42 | 0.003 |
directconnect | Direct Connect P2P | 41 | 0.003 |
http | Waveplus HTTPD | 40 | 0.003 |
http | FLPS | 40 | 0.003 |
http | 10000 | 40 | 0.003 |
netbios-ssn | Konica Minolta bizhub C452 printer smbd | 39 | 0.003 |
java-rmi | Java RMI | 39 | 0.003 |
http | AirLive WT-2000R WAP http config | 39 | 0.003 |
http | 2.2.23A76 | 39 | 0.003 |
geovision-mobile | Geovision mobile device support | 39 | 0.003 |
srun | Caucho Resin JSP Engine srun | 38 | 0.003 |
http | Netgear WGR614v9 WAP http config | 38 | 0.003 |
http | Juniper router http config | 38 | 0.003 |
http | IP_SHARER WEB | 38 | 0.003 |
http | iFile | 38 | 0.003 |
http | CHCDN | 38 | 0.003 |
http | BaseHTTPServer | 38 | 0.003 |
telnet | Net+Works Configuration Utility 1.0 | 37 | 0.003 |
ssh | Cisco SSH | 37 | 0.003 |
http | WYM httpd | 37 | 0.003 |
http | QNAP TS-219P NAS http config | 36 | 0.003 |
http | HTTP Server 1.0 | 36 | 0.003 |
ftp | Pure-FTPd | 36 | 0.003 |
http | UserServ | 35 | 0.003 |
http | Sagem F@st router httpd | 35 | 0.003 |
http | 2.2.19.A6 | 35 | 0.003 |
http | Switch | 34 | 0.002 |
http | Microsoft-HTTPAPI | 34 | 0.002 |
http | 2.2.23A61 | 34 | 0.002 |
http | 2.2.16.D6 | 34 | 0.002 |
http | Linux | 33 | 0.002 |
http | Aterm(HT) | 33 | 0.002 |
http | soc-httpd 0.2 | 32 | 0.002 |
http | i3 micro or Linksys SPA400 VoIP gateway http config | 32 | 0.002 |
upnp | Portable SDK for UPnP devices | 31 | 0.002 |
http | Mongrel httpd | 31 | 0.002 |
http | Indy httpd | 31 | 0.002 |
http | 2.2.24B96 | 31 | 0.002 |
http | Rex | 30 | 0.002 |
http | Netgear DG834PN router http config | 30 | 0.002 |
napster | WinMX or Lopster Napster P2P client | 29 | 0.002 |
http | WSGIServer | 29 | 0.002 |
http | Dreambox httpd | 29 | 0.002 |
http | 2.2.23A67 | 28 | 0.002 |
http | 2.2.23A65 | 28 | 0.002 |
http | 2.2.23A60 | 28 | 0.002 |
ssl | Novell NetWare SSL | 27 | 0.002 |
irc-proxy | ShroudBNC irc-proxy | 27 | 0.002 |
http | Microsoft Windows Media Server | 27 | 0.002 |
http | Kerio MailServer http config | 27 | 0.002 |
http | Eudemon Server 1.0 | 27 | 0.002 |
http | DVR Systems webcam http interface | 27 | 0.002 |
svnserve | Subversion | 26 | 0.002 |
http-proxy | MikroTik http proxy | 26 | 0.002 |
http-proxy | Haproxy http proxy | 26 | 0.002 |
http | HttpFileServer httpd | 26 | 0.002 |
http | D-Link DI-804HV http config | 26 | 0.002 |
http | 2.2.16.D14 | 26 | 0.002 |
http | TeamViewer httpd | 25 | 0.002 |
http | RapidLogic httpd | 25 | 0.002 |
http | build-in http server | 25 | 0.002 |
http | 2.2.16.D36 | 25 | 0.002 |
vnc | Ultr@VNC Repeater | 24 | 0.002 |
telnet | Cisco 1721 router telnetd | 24 | 0.002 |
http | Wireless Network Camera | 24 | 0.002 |
http | WebLogic httpd | 24 | 0.002 |
http | Techno Vision Security System http config | 24 | 0.002 |
http | PNS Box HTTP Proxy Service | 24 | 0.002 |
http | Mono-HTTPAPI | 24 | 0.002 |
http | Mobotix Camera http config | 24 | 0.002 |
http | m0n0wall FreeBSD firewall web interface | 24 | 0.002 |
http | Lotus Expeditor Web Container | 24 | 0.002 |
http | JDav server 1.0 | 24 | 0.002 |
http | GoAhead-Webs | 24 | 0.002 |
http | Fnord httpd | 24 | 0.002 |
http | 2.2.25A96 | 24 | 0.002 |
http | 2.2.16.C15 | 24 | 0.002 |
upnp | Conexant-EmWeb | 23 | 0.002 |
http | Thin | 23 | 0.002 |
http | Netgear DGN2000 router http config | 23 | 0.002 |
http | httpd 1.1 | 23 | 0.002 |
http | APC SmartUPS http config | 23 | 0.002 |
telnet | AMX NetLinx telnetd | 22 | 0.002 |
http | W3MFC | 22 | 0.002 |
http | Netgear WGR614v7 WAP http config | 22 | 0.002 |
http | Netgear DG834GT router http config | 22 | 0.002 |
http | Microsoft ISA httpd | 22 | 0.002 |
http | jDownloader httpd | 22 | 0.002 |
cccam | CCcam DVR card sharing system information | 22 | 0.002 |
http | TP-LINK WR543G WAP http config | 21 | 0.002 |
http | OwnServer1.0 | 21 | 0.002 |
http | Oracle WebLogic Server | 21 | 0.002 |
http | Cdn Cache Server V2.0 | 21 | 0.002 |
http | 2.2.17.A4 | 21 | 0.002 |
http | 2.2.16.D29 | 21 | 0.002 |
vnc | Apple remote desktop vnc | 20 | 0.001 |
telnet | CanHigher Server configuration! | 20 | 0.001 |
tandem-print | Sharp printer tandem printing | 20 | 0.001 |
rtsp | VLC rtspd | 20 | 0.001 |
http | Ubicom httpd | 20 | 0.001 |
http | TP-LINK WR1043ND WAP http config | 20 | 0.001 |
http | Router Webserver | 20 | 0.001 |
http | FC | 20 | 0.001 |
http | DrayTek Vigor 3300 router http config | 20 | 0.001 |
http | D-Link router/Airlink NAS http config | 20 | 0.001 |
http | Cougar | 20 | 0.001 |
http | Blue Dragon Built-in httpd | 20 | 0.001 |
ftp | Gene6 ftpd | 20 | 0.001 |
smtp | MailEnable smptd | 19 | 0.001 |
oracle | Oracle Database | 19 | 0.001 |
http | Zope httpd | 19 | 0.001 |
http | go1984 httpd | 19 | 0.001 |
http | Gadspot/Avtech AV787 webcam http config | 19 | 0.001 |
http | Chain Cast support service | 19 | 0.001 |
http | 2.2.23A28 | 19 | 0.001 |
eggdrop | Eggdrop IRC bot console | 19 | 0.001 |
smtp | Microsoft Exchange smtpd | 18 | 0.001 |
http | Netgear FVS318 router http config | 18 | 0.001 |
http | Mongoose httpd | 18 | 0.001 |
http | HP StorageWorks AG118A tape autoloader http config | 18 | 0.001 |
http | Grandstream HT502 VoIP router http config | 18 | 0.001 |
http | FlashCom | 18 | 0.001 |
xml-rpc | Apache XML-RPC | 17 | 0.001 |
redis | Redis key-value store | 17 | 0.001 |
ovm-manager | Oracle VM Manager | 17 | 0.001 |
http | Western Digital My Book http config | 17 | 0.001 |
http | webcamXP httpd | 17 | 0.001 |
http-proxy | F5 BIG-IP load balancer http proxy | 17 | 0.001 |
http | Oracle HTTP Server Powered by Apache | 17 | 0.001 |
http | Netgear WNR1000v3 WAP http config | 17 | 0.001 |
http | ImagiaTek | 17 | 0.001 |
http | iccvserver | 17 | 0.001 |
http | D-Link/Airlink IP webcam http config | 17 | 0.001 |
vnc-http | Ultr@VNC | 16 | 0.001 |
teamspeak | TeamSpeak voice communication | 16 | 0.001 |
oracle-tns | Oracle TNS Listener | 16 | 0.001 |
http | Vivotek 3102 Camera http config | 16 | 0.001 |
http | Embedded Web Server | 16 | 0.001 |
http | D-Link DCS-910 webcam http config | 16 | 0.001 |
rifa-dvr | Rifatron DVR | 15 | 0.001 |
http | TibetSystem Server 2.0 | 15 | 0.001 |
http | Sun GlassFish | 15 | 0.001 |
http | SNF | 15 | 0.001 |
http | RusRouteWebServer | 15 | 0.001 |
http | Mbedthis-AppWeb | 15 | 0.001 |
http | Kannel SMS proxy httpd | 15 | 0.001 |
http | D-Link DIR-600 WAP http config | 15 | 0.001 |
exalead | Exalead search appliance | 15 | 0.001 |
ssh | WeOnlyDo sshd | 14 | 0.001 |
ssh | SunSSH | 14 | 0.001 |
sip | 14 | 0.001 | |
http | ZNC IRC bouncer httpd | 14 | 0.001 |
http | Zimbra http config | 14 | 0.001 |
http | Web Server | 14 | 0.001 |
http | WebServer | 14 | 0.001 |
http | WEBrick httpd | 14 | 0.001 |
http | Rex media encoder http config | 14 | 0.001 |
http | IQinVision Embedded 1.0 | 14 | 0.001 |
http | GoAhead httpd | 14 | 0.001 |
http | GM Streaming Server httpd | 14 | 0.001 |
http | FCS-1060 P | 14 | 0.001 |
http | D-Link DI-604 http config | 14 | 0.001 |
http | AirLive WMM-3000R WAP http config | 14 | 0.001 |
http | 2.2.24B82 | 14 | 0.001 |
ssh | Bitvise WinSSHD | 13 | 0.001 |
http | TP-LINK TL-R402 router http config | 13 | 0.001 |
http | TornadoServer | 13 | 0.001 |
http | Tornado httpd | 13 | 0.001 |
http | the9 | 13 | 0.001 |
http | Serv-U | 13 | 0.001 |
http | Phoenix-Contact | 13 | 0.001 |
http | Node.js | 13 | 0.001 |
http | Gnway Web Server | 13 | 0.001 |
http | FVG318 | 13 | 0.001 |
http | D-Link DVS-4088S, DVS-5088S, or DVG-7062S VoIP gateway http config | 13 | 0.001 |
http | antid | 13 | 0.001 |
http | ADH-Web httpd | 13 | 0.001 |
eggdrop | Eggdrop irc bot console | 13 | 0.001 |
vtun | Vtun Virtual Tunnel | 12 | 0.001 |
postgresql | PostgreSQL DB | 12 | 0.001 |
http | Wireless Network Camera with Pan | 12 | 0.001 |
http | TP-LINK R406 WAP http config | 12 | 0.001 |
http | Panasonic webcam http config | 12 | 0.001 |
http | Netgear WGR614v6 WAP http config | 12 | 0.001 |
http | monit httpd | 12 | 0.001 |
http | LuCI Lua http config | 12 | 0.001 |
http | Lantronix XPort embedded ethernet http config | 12 | 0.001 |
http | GNU Httptunnel | 12 | 0.001 |
http | Axis2-1.4.1 (on behalf of PVNSsm | 12 | 0.001 |
http | Apache-Coyote | 12 | 0.001 |
http | AIM HTTP | 12 | 0.001 |
telnet | Pocket CMD telnetd | 11 | 0.001 |
rtsp | Vivotek IP7131 or IP7138 webcam rtspd | 11 | 0.001 |
rtsp | Helix DNA Server | 11 | 0.001 |
irc | Unreal ircd | 11 | 0.001 |
http | WindRiver-WebServer | 11 | 0.001 |
http | TP-LINK WR1043N WAP http config | 11 | 0.001 |
http | Start HTTP-Server | 11 | 0.001 |
http | SolarLog 400e power monitor httpd | 11 | 0.001 |
http | SecuritySpy webcam viewer httpd | 11 | 0.001 |
http | PY Software Active webcam httpd | 11 | 0.001 |
http-proxy | ziproxy http proxy | 11 | 0.001 |
http-proxy | CCProxy http proxy | 11 | 0.001 |
http | Netgear WNR3500L WAP http config | 11 | 0.001 |
http | Netgear or Linksys WAP http config | 11 | 0.001 |
http | Linksys PAP2 VoIP http config | 11 | 0.001 |
http | go1984 | 11 | 0.001 |
http | Everfocus webcam http config | 11 | 0.001 |
http | D-Link DCS-3220 webcam http config | 11 | 0.001 |
ssl | multi-vendor SSL | 10 | 0.001 |
http | WCS-2060 Wireless P | 10 | 0.001 |
http | Vivotek Network Camera | 10 | 0.001 |
http | QNAP TS-109-II NAS http config | 10 | 0.001 |
http | Lotus Domino httpd | 10 | 0.001 |
http | IceWarp webmail httpd | 10 | 0.001 |
http | gen5th | 10 | 0.001 |
http | Fortinet VPN/firewall http config | 10 | 0.001 |
http | Fortinet FortiGate 50B firewall http config | 10 | 0.001 |
http | Ferhat Ayaz's Nano httpd | 10 | 0.001 |
http | Allegro-Software-RomPager | 10 | 0.001 |
bandwidth-test | MikroTik bandwidth-test server | 10 | 0.001 |