~41 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Count |
Percent |
|---|---|---|---|
| http | 10165 | 24.272 | |
| no match | -/- | 8470 | 20.224 |
| irc | Dancer ircd | 4052 | 9.675 |
| http | SonicWALL | 3644 | 8.701 |
| chat | AIM or ICQ server | 2142 | 5.115 |
| http | Apache | 1728 | 4.126 |
| smtp | Exim smtpd | 1509 | 3.603 |
| http | MiniServ | 1137 | 2.715 |
| http | lighttpd | 761 | 1.817 |
| http | AIM | 638 | 1.523 |
| irc-proxy | psyBNC | 509 | 1.215 |
| http | Microsoft IIS httpd | 483 | 1.153 |
| ssh | OpenSSH | 297 | 0.709 |
| vnc | VNC | 266 | 0.635 |
| http | Microsoft HTTPAPI httpd | 213 | 0.509 |
| http | Trend Micro OfficeScan Antivirus http config | 192 | 0.458 |
| http | thttpd | 172 | 0.411 |
| http | Apache Tomcat/Coyote JSP engine | 156 | 0.372 |
| http | ZNC IRC bouncer http config | 149 | 0.356 |
| http | Boa HTTPd | 144 | 0.344 |
| cccam | CCcam DVR card sharing system information | 134 | 0.32 |
| http | Jetty | 130 | 0.31 |
| vtun | Vtun Virtual Tunnel | 123 | 0.294 |
| backdoor | OptixPro backdoor | 121 | 0.289 |
| http | Netwave IP camera http config | 116 | 0.277 |
| socks5 | 115 | 0.275 | |
| http-proxy | Squid http proxy | 109 | 0.26 |
| openvpn | OpenVPN | 104 | 0.248 |
| ssh | 102 | 0.244 | |
| eggdrop | Eggdrop irc bot console | 99 | 0.236 |
| http | GoAhead-Webs | 93 | 0.222 |
| http | uTorrent WebUI | 91 | 0.217 |
| http | Kannel SMS proxy httpd | 90 | 0.215 |
| http | a_63 | 88 | 0.21 |
| http | GoAhead-Webs httpd | 83 | 0.198 |
| remoting | MS .NET Remoting services | 81 | 0.193 |
| http | CCcam card sharing system http config | 81 | 0.193 |
| shoutcast | SHOUTcast server | 79 | 0.189 |
| http | nginx | 78 | 0.186 |
| http | Avtech AVN801 network camera | 73 | 0.174 |
| http | TimesTen httpd | 72 | 0.172 |
| ssl | TLS | 66 | 0.158 |
| http | Httpd | 63 | 0.15 |
| telnet | 61 | 0.146 | |
| ftp | FileZilla ftpd | 61 | 0.146 |
| wesnoth | Battle For Wesnoth game server | 60 | 0.143 |
| ftp | 56 | 0.134 | |
| ftp | Microsoft ftpd | 55 | 0.131 |
| ovm-manager | Oracle VM Manager | 52 | 0.124 |
| http | uc-httpd | 51 | 0.122 |
| http | FLPS | 50 | 0.119 |
| http | mini_httpd | 45 | 0.107 |
| netbios-ssn | 44 | 0.105 | |
| mysql | MySQL | 44 | 0.105 |
| upnp | Microsoft Windows UPnP | 42 | 0.1 |
| http | PDR-M800 | 40 | 0.096 |
| vnc | 38 | 0.091 | |
| http | Sun-Java-System | 38 | 0.091 |
| zabbix | Zabbix Monitoring System | 35 | 0.084 |
| http | GeoVision GeoHttpServer for webcams | 35 | 0.084 |
| http-proxy | MikroTik http proxy | 31 | 0.074 |
| ice | Internet Communications Engine | 30 | 0.072 |
| http | MDEX | 30 | 0.072 |
| vnc | RealVNC Enterprise | 29 | 0.069 |
| http | webcamXP httpd | 29 | 0.069 |
| http | TwistedWeb httpd | 29 | 0.069 |
| memcache | memcached | 28 | 0.067 |
| http | Boa httpd | 28 | 0.067 |
| ftp | Serv-U ftpd | 28 | 0.067 |
| ftp | vsftpd (before 2.0.8) or WU-FTPD | 27 | 0.064 |
| eggdrop | Eggdrop IRC bot console | 27 | 0.064 |
| http | webserver | 26 | 0.062 |
| http | Mbedthis-Appweb | 26 | 0.062 |
| vnc | RealVNC Personal | 25 | 0.06 |
| http | Kannel | 23 | 0.055 |
| http | GoAhead-Webs embedded httpd | 22 | 0.053 |
| http | Cross Web Server | 21 | 0.05 |
| directconnect | Direct Connect P2P | 21 | 0.05 |
| ssh | Dropbear sshd | 20 | 0.048 |
| http | Zope httpd | 20 | 0.048 |
| smtp | Microsoft ESMTP | 19 | 0.045 |
| http | Hikvision-Webs | 19 | 0.045 |
| http | GateKeeper | 19 | 0.045 |
| http-proxy | Tinyproxy | 18 | 0.043 |
| http | NG | 18 | 0.043 |
| http | Icecast streaming media server | 18 | 0.043 |
| ftp | Pure-FTPd | 17 | 0.041 |
| http | NewCS satellite card sharing system http config | 16 | 0.038 |
| http | Indy httpd | 16 | 0.038 |
| http | Indy | 16 | 0.038 |
| ftp | ProFTPD | 16 | 0.038 |
| smtp | 15 | 0.036 | |
| napster | WinMX or Lopster Napster P2P client | 15 | 0.036 |
| http | http server 1.0 | 15 | 0.036 |
| http | World Client WDaemon httpd | 14 | 0.033 |
| http | Panasonic webcam http config | 14 | 0.033 |
| http | Mongrel httpd | 14 | 0.033 |
| http | D-Link DIR-300 WAP http admin | 14 | 0.033 |
| xml | 13 | 0.031 | |
| rtsp | 13 | 0.031 | |
| http | Z-World Rabbit | 13 | 0.031 |
| http | Webs | 13 | 0.031 |
| vnc | Apple remote desktop vnc | 12 | 0.029 |
| http | QNAP TS-219P NAS http config | 12 | 0.029 |
| http-proxy | F5 BIG-IP load balancer http proxy | 12 | 0.029 |
| http | DD-WRT milli_httpd | 12 | 0.029 |
| http | CherryPy httpd | 12 | 0.029 |
| http | Aterm(HT) | 12 | 0.029 |
| ftp | vsftpd | 12 | 0.029 |
| ftp | Globus GridFTPd | 12 | 0.029 |
| smtp | Microsoft Exchange smtpd | 11 | 0.026 |
| http | Oracle WebLogic Server | 11 | 0.026 |
| http | DVR Systems webcam http interface | 11 | 0.026 |
| arcserve | ARCserve Discovery | 11 | 0.026 |
| upnp | Portable SDK for UPnP devices | 10 | 0.024 |
| upnp | Conexant-EmWeb | 10 | 0.024 |
| telnet | Allied Telesis x900-series switch telnetd | 10 | 0.024 |
| ssh | MikroTik RouterOS sshd | 10 | 0.024 |
| http | WebLogic httpd | 10 | 0.024 |
| http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 10 | 0.024 |
| http | RemotelyAnywhere remote PC management httpd | 10 | 0.024 |
| http | Intoto httpd | 10 | 0.024 |
| http | Gadspot/Avtech AV787 webcam http config | 10 | 0.024 |
| http | Allegro RomPager | 10 | 0.024 |
| http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 10 | 0.024 |
| http | AIM HTTP | 10 | 0.024 |
| giop | CORBA naming service | 10 | 0.024 |