~61 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Count |
Percent |
|---|---|---|---|
| no match | -/- | 30599 | 49.804 |
| http | nginx | 10079 | 16.405 |
| http | 9472 | 15.417 | |
| http | SonicWALL | 3597 | 5.855 |
| chat | AIM or ICQ server | 2192 | 3.568 |
| http | Apache | 1019 | 1.659 |
| http | lighttpd | 877 | 1.427 |
| ssl | SSLv3 | 779 | 1.268 |
| http | AIM | 603 | 0.981 |
| http | Microsoft IIS httpd | 220 | 0.358 |
| http | Netwave IP camera http config | 165 | 0.269 |
| http | thttpd | 147 | 0.239 |
| http | GoAhead-Webs httpd | 114 | 0.186 |
| ssh | OpenSSH | 112 | 0.182 |
| ssh | 98 | 0.16 | |
| http | Microsoft HTTPAPI httpd | 86 | 0.14 |
| http | Apache Tomcat/Coyote JSP engine | 76 | 0.124 |
| http-proxy | Squid http proxy | 73 | 0.119 |
| http | Avtech AVN801 network camera | 63 | 0.103 |
| telnet | 48 | 0.078 | |
| http | Boa HTTPd | 47 | 0.076 |
| http | PDR-M800 | 44 | 0.072 |
| vnc | VNC | 40 | 0.065 |
| arcserve | ARCserve Discovery | 33 | 0.054 |
| mysql | MySQL | 29 | 0.047 |
| http | GoAhead-Webs | 27 | 0.044 |
| http | Hikvision-Webs | 26 | 0.042 |
| http | mini_httpd | 22 | 0.036 |
| http | uc-httpd | 19 | 0.031 |
| http | Mbedthis-Appweb | 19 | 0.031 |
| ftp | Microsoft ftpd | 19 | 0.031 |
| ftp | 18 | 0.029 | |
| http | GeoVision GeoHttpServer for webcams | 16 | 0.026 |
| smtp | 13 | 0.021 | |
| http | Cross Web Server | 13 | 0.021 |
| ftp | vsftpd | 13 | 0.021 |
| ftp | ProFTPD | 13 | 0.021 |
| http | uTorrent WebUI | 12 | 0.02 |
| http-proxy | F5 BIG-IP load balancer http proxy | 12 | 0.02 |
| http | Gadspot/Avtech AV787 webcam http config | 12 | 0.02 |
| ftp | Pure-FTPd | 12 | 0.02 |
| time | 11 | 0.018 | |
| http | DVR Systems webcam http interface | 11 | 0.018 |
| http | AIM HTTP | 10 | 0.016 |