~28 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Count |
Percent |
|---|---|---|---|
| http | 10084 | 35.143 | |
| irc | Dancer ircd | 4029 | 14.041 |
| http | SonicWALL | 3681 | 12.828 |
| chat | AIM or ICQ server | 2200 | 7.667 |
| no match | -/- | 1783 | 6.214 |
| ssl | SSLv3 | 1405 | 4.896 |
| http | lighttpd | 886 | 3.088 |
| http | AIM | 612 | 2.133 |
| flexlm | FlexLM license manager | 374 | 1.303 |
| http | WangWnagSimpleServer | 354 | 1.234 |
| http | Apache | 332 | 1.157 |
| http | Microsoft IIS httpd | 246 | 0.857 |
| http | thttpd | 149 | 0.519 |
| giop | CORBA naming service | 106 | 0.369 |
| ssh | 102 | 0.355 | |
| http | GoAhead-Webs httpd | 99 | 0.345 |
| http | Microsoft HTTPAPI httpd | 93 | 0.324 |
| http | Netwave IP camera http config | 89 | 0.31 |
| ssh | OpenSSH | 84 | 0.293 |
| ncacn_http | Microsoft Windows RPC over HTTP | 78 | 0.272 |
| http | Apache Tomcat/Coyote JSP engine | 77 | 0.268 |
| http | Boa HTTPd | 76 | 0.265 |
| remoting | MS .NET Remoting services | 75 | 0.261 |
| http | Avtech AVN801 network camera | 65 | 0.227 |
| vnc | VNC | 62 | 0.216 |
| http-proxy | Squid http proxy | 57 | 0.199 |
| telnet | 52 | 0.181 | |
| http | PDR-M800 | 48 | 0.167 |
| arcserve | ARCserve Discovery | 36 | 0.125 |
| http | MS .NET Remoting httpd | 32 | 0.112 |
| ftp | Microsoft ftpd | 32 | 0.112 |
| http | uTorrent WebUI | 30 | 0.105 |
| http | mini_httpd | 30 | 0.105 |
| http | GoAhead-Webs | 30 | 0.105 |
| nntp | INN nntpd | 28 | 0.098 |
| mysql | MySQL | 27 | 0.094 |
| landesk | LANDesk Management Suite | 27 | 0.094 |
| giop | omniORB omniNames | 27 | 0.094 |
| http | IBM AS400 Workstation Gateway | 26 | 0.091 |
| rtsp | 24 | 0.084 | |
| ftp | 24 | 0.084 | |
| smtp | Postfix smtpd | 22 | 0.077 |
| http | Nginx | 21 | 0.073 |
| http | Mbedthis-Appweb | 20 | 0.07 |
| http | uc-httpd | 19 | 0.066 |
| http | Hikvision-Webs | 19 | 0.066 |
| http | GeoVision GeoHttpServer for webcams | 19 | 0.066 |
| ssl | TLSv1 | 16 | 0.056 |
| ftp | FTP masquerading as OpenSSH | 16 | 0.056 |
| achat | AChat chat system | 16 | 0.056 |
| socks-proxy | Socks4A | 15 | 0.052 |
| http | nginx | 15 | 0.052 |
| upnp | Portable SDK for UPnP devices | 14 | 0.049 |
| http | KDH httpd | 14 | 0.049 |
| ftp | vsftpd | 14 | 0.049 |
| ftp | Pure-FTPd | 14 | 0.049 |
| ftp | FileZilla ftpd | 14 | 0.049 |
| ovm-manager | Oracle VM Manager | 13 | 0.045 |
| http-proxy | F5 BIG-IP load balancer http proxy | 13 | 0.045 |
| http | Gadspot/Avtech AV787 webcam http config | 12 | 0.042 |
| ftp | ProFTPD | 12 | 0.042 |
| ssl | Microsoft IIS SSL | 11 | 0.038 |
| smtp | Microsoft ESMTP | 11 | 0.038 |
| smtp | 11 | 0.038 | |
| http | Cross Web Server | 11 | 0.038 |
| arkeia | Arkeia Network Backup | 11 | 0.038 |
| java-rmi | Java RMI | 10 | 0.035 |
| http | World Client WDaemon httpd | 10 | 0.035 |
| http | QNAP TS-219P NAS http config | 10 | 0.035 |
| http | DVR Systems webcam http interface | 10 | 0.035 |