~520 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Info | OS | Devicetype | Count | Percent |
---|---|---|---|---|---|---|---|
rpcapd | WinPcap remote packet capture daemon | Windows | 147842 | 28.386 | |||
ssl | SSLv3 | 112926 | 21.682 | ||||
no match | 102495 | 19.679 | |||||
telnet | Cisco IOS telnetd | IOS | switch | 32212 | 6.185 | ||
telnet | 28935 | 5.556 | |||||
telnet | Cisco router telnetd | IOS | router | 21543 | 4.136 | ||
telnet | Cisco 1721 router telnetd | IOS | router | 17698 | 3.398 | ||
http | 13888 | 2.667 | |||||
irc | Dancer ircd | 4088 | 0.785 | ||||
http | SonicWALL | firewall | 4041 | 0.776 | |||
chat | AIM or ICQ server | 2717 | 0.522 | ||||
ssh | OpenSSH | 4.3 | protocol 2.0 | 2383 | 0.458 | ||
telnet | Usually a Cisco/3com switch | IOS | switch | 2065 | 0.396 | ||
ssl | TLSv1 | 1986 | 0.381 | ||||
ssh | protocol 2.0 | 1390 | 0.267 | ||||
http | LogMeIn httpd | 4.0.784 | Windows | 1100 | 0.211 | ||
http | Microsoft IIS httpd | 856 | 0.164 | ||||
http | AIM | 1.0 | 696 | 0.134 | |||
http | Boa HTTPd | 0.94.14rc21 | 632 | 0.121 | |||
http | WangWnagSimpleServer | 1.0 | 505 | 0.097 | |||
irc-proxy | ShroudBNC irc-proxy | 1.1 revision 371 | 485 | 0.093 | |||
http | Cisco Secure ACS login | IOS | 465 | 0.089 | |||
http | lighttpd | 1.4.29 | 457 | 0.088 | |||
http | lighttpd | 1.4.19 | 428 | 0.082 | |||
http | Lotus Expeditor Web Container | 6.1 | 410 | 0.079 | |||
http | Netwave IP camera http config | webcam | 384 | 0.074 | |||
ssh | OpenSSH | 5.1p1 Debian 5 | protocol 2.0 | Linux | 383 | 0.074 | |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | protocol 2.0 | Linux | 374 | 0.072 | |
http | RemotelyAnywhere remote PC management httpd | 8.0.668 | 372 | 0.071 | |||
http | LogMeIn httpd | 2.30.559 | Windows | 372 | 0.071 | ||
http | Microsoft IIS httpd | 6.0 | Windows | 365 | 0.07 | ||
http | Gateway-Webs | 353 | 0.068 | ||||
irc-proxy | psyBNC | 2.3.2-7 | 352 | 0.068 | |||
http | lighttpd | 1.4.28 | 329 | 0.063 | |||
telnet | Linux telnetd | Linux | 320 | 0.061 | |||
http | Apache | 1.3.41 | (Unix) FrontPage/5.0.2.2635 mod_ssl/2.8.31 OpenSSL/0.9.8i mod_watch/3.12 | 292 | 0.056 | ||
http | GoAhead-Webs httpd | 290 | 0.056 | ||||
ssh | OpenSSH | 5.3 | protocol 2.0 | 273 | 0.052 | ||
http | LogMeIn httpd | 4.0.680 | Windows | 266 | 0.051 | ||
http | Microsoft IIS httpd | 5.0 | Windows | 264 | 0.051 | ||
http | Microsoft HTTPAPI httpd | 2.0 | SSDP/UPnP | Windows | 261 | 0.05 | |
http | IBM WebSphere Application Server | 6.0 | 240 | 0.046 | |||
http | Avtech AVN801 network camera | 1.0 | UPnP 1.0 | webcam | 231 | 0.044 | |
http | t-gate web server | 221 | 0.042 | ||||
http | GoAhead-Webs embedded httpd | 210 | 0.04 | ||||
http | LogMeIn httpd | 4.0.734 | Windows | 208 | 0.04 | ||
http | Lotus Notes Expeditor httpd | 6.1 | 188 | 0.036 | |||
http | RemotelyAnywhere remote PC management httpd | 10.0.1086 | 172 | 0.033 | |||
ftp | Microsoft ftpd | Windows | 166 | 0.032 | |||
http | Apache | 2.2.3 | (CentOS) | 157 | 0.03 | ||
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | Ubuntu Linux; protocol 2.0 | Linux | 156 | 0.03 | |
http | Web Server Authentication | 149 | 0.029 | ||||
http | Apache Tomcat/Coyote JSP engine | 1.1 | 136 | 0.026 | |||
http | thttpd | 2.25b 29dec2003 | 133 | 0.026 | |||
http | Apache | 127 | 0.024 | ||||
http | RemotelyAnywhere remote PC management httpd | 8.0.747 | 124 | 0.024 | |||
rtsp | 116 | 0.022 | |||||
http | thttpd | Panasonic BB-HCM511 IP camera http config | 114 | 0.022 | |||
ssh | OpenSSH | 5.5p1 Debian 6+squeeze1 | protocol 2.0 | Linux | 112 | 0.022 | |
http | DrcomServer1.0 | 112 | 0.022 | ||||
ftp | 111 | 0.021 | |||||
http | Indy | 9.00.10 | 108 | 0.021 | |||
http | LogMeIn httpd | 3.0.606 | Windows | 107 | 0.021 | ||
ssh | protocol 1.5 | 104 | 0.02 | ||||
ssh | OpenSSH | 5.1 | protocol 2.0 | 102 | 0.02 | ||
http | mini_httpd | 1.19 19dec2003 | 101 | 0.019 | |||
ssh | MikroTik RouterOS sshd | protocol 2.0 | Linux | router | 97 | 0.019 | |
http | lighttpd | 1.4.20 | 96 | 0.018 | |||
vnc | VNC | protocol 3.8 | 95 | 0.018 | |||
smtp | Postfix smtpd | 88 | 0.017 | ||||
http | Apache | 1.3.41 | 87 | 0.017 | |||
ssh | OpenSSH | 5.5p1 Debian 6 | protocol 2.0 | Linux | 85 | 0.016 | |
http | thttpd | 2.24 26oct2003 | 85 | 0.016 | |||
http | Boa HTTPd | 0.94.13 | 84 | 0.016 | |||
ssh | OpenSSH | 3.9p1 | protocol 1.99 | 83 | 0.016 | ||
http | Indy | 9.0.11 | 82 | 0.016 | |||
http | Hikvision-Webs | 82 | 0.016 | ||||
http | PDR-M800 | 1.0 | 81 | 0.016 | |||
http | Microsoft IIS httpd | 7.5 | Windows | 81 | 0.016 | ||
telnet | WanMa Network, **** | 80 | 0.015 | ||||
http | Apache | 2.2.15 | (CentOS) | 80 | 0.015 | ||
http | Lotus Expeditor Web Container | 79 | 0.015 | ||||
http | General User | 77 | 0.015 | ||||
ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | Ubuntu Linux; protocol 2.0 | Linux | 75 | 0.014 | |
http | Innovative Interfaces Innopac httpd | 110 | 71 | 0.014 | |||
xfce-session | XFCE Session Manager | 70 | 0.013 | ||||
http | Cross Web Server | 70 | 0.013 | ||||
ssh | OpenSSH | 5.4p1 | FreeBSD 20100308; protocol 2.0 | FreeBSD | 69 | 0.013 | |
http | uc-httpd | 1.0.0 | 65 | 0.012 | |||
xml | 64 | 0.012 | |||||
remoting | MS .NET Remoting services | 59 | 0.011 | ||||
http | Httpd | 1.0 | 59 | 0.011 | |||
http | Apache | 0.6.5 | 58 | 0.011 | |||
ssh | OpenSSH | 5.9 | protocol 2.0 | 57 | 0.011 | ||
http | RemotelyAnywhere remote PC management httpd | 8.0.597 | 57 | 0.011 | |||
http | Virata-EmWeb | 6.0.1 | Netscreen administrative web server | firewall | 55 | 0.011 | |
ssh | OpenSSH | 5.8 | protocol 2.0 | 53 | 0.01 | ||
http | RemotelyAnywhere remote PC management httpd | 8.0.605 | 53 | 0.01 | |||
directconnect | Direct Connect P2P | Windows | 53 | 0.01 | |||
http | lighttpd | 1.4.26 | 52 | 0.01 | |||
ssh | OpenSSH | 4.3 | protocol 1.99 | 49 | 0.009 | ||
http | thttpd | 2.25b | 49 | 0.009 | |||
http | Mobotix Camera http config | webcam | 49 | 0.009 | |||
http | httpd | 49 | 0.009 | ||||
ssl | TLS | 1.0 | 48 | 0.009 | |||
ssh | OpenSSH | 4.7p1 Debian 8ubuntu1.2 | protocol 2.0 | Linux | 47 | 0.009 | |
ssh | Cisco SSH | 1.25 | protocol 2.0 | IOS | 47 | 0.009 | |
http | thttpd | 2.24 | 47 | 0.009 | |||
http | Microsoft IIS httpd | 7.0 | Windows | 47 | 0.009 | ||
arcserve | ARCserve Discovery | 47 | 0.009 | ||||
ssh | OpenSSH | 4.3p2 Debian 9etch3 | protocol 2.0 | Linux | 46 | 0.009 | |
ssh | Dropbear sshd | 0.52 | protocol 2.0 | Linux | 46 | 0.009 | |
http | Gadspot/Avtech AV787 webcam http config | webcam | 46 | 0.009 | |||
ssh | OpenSSH | 2.3.0 mikrotik 2.9 | protocol 1.99 | router | 45 | 0.009 | |
http | GoAhead-Webs | 44 | 0.008 | ||||
socks5 | 43 | 0.008 | |||||
http | GeoVision GeoHttpServer for webcams | webcam | 43 | 0.008 | |||
http | uTorrent WebUI | Windows | 42 | 0.008 | |||
ssh | OpenSSH | 5.2 | protocol 2.0 | 41 | 0.008 | ||
http | GoAhead-Webs httpd | Ovislink WAP http config | WAP | 41 | 0.008 | ||
http | dcs-lig-httpd | 39 | 0.007 | ||||
http | Microsoft IIS httpd | 5.1 | Windows | 37 | 0.007 | ||
http | Mbedthis-Appweb | 2.0.4 | 37 | 0.007 | |||
telnet | Cisco 2514 router telnetd | IOS | router | 36 | 0.007 | ||
http | DVR Systems webcam http interface | webcam | 36 | 0.007 | |||
ssh | OpenSSH | 5.8p1 Debian 1ubuntu3 | Ubuntu Linux; protocol 2.0 | Linux | 35 | 0.007 | |
http | Draytek Vigor ADSL router webadmin | broadband router | 35 | 0.007 | |||
http | Apache | SSL-only mode | 34 | 0.007 | |||
ftp | Pure-FTPd | 34 | 0.007 | ||||
ssh | OpenSSH | 3.9p1 | protocol 2.0 | 33 | 0.006 | ||
http | GM Streaming Server httpd | webcam | 33 | 0.006 | |||
http | D-Link DIR-300 WAP http admin | WAP | 32 | 0.006 | |||
ssh | OpenSSH | 5.8p1 Debian 7ubuntu1 | Ubuntu Linux; protocol 2.0 | Linux | 31 | 0.006 | |
socks-proxy | Socks4A | 31 | 0.006 | ||||
ssh | Cisco SSH | 1.25 | protocol 1.5 | IOS | 30 | 0.006 | |
ssh | OpenSSH | 5.0 | protocol 2.0 | 29 | 0.006 | ||
ssh | OpenSSH | 4.5p1 | FreeBSD 20061110; protocol 2.0 | FreeBSD | 29 | 0.006 | |
http-proxy | Squid http proxy | 29 | 0.006 | ||||
http | Cisco Secure ACS web interface | Windows | 29 | 0.006 | |||
http | Bchat | 29 | 0.006 | ||||
ssh | OpenSSH | 5.5 | protocol 2.0 | 28 | 0.005 | ||
http | RemotelyAnywhere remote PC management httpd | 6.20.467 | 28 | 0.005 | |||
http | LogMeIn httpd | 4.0.994 | Windows | 28 | 0.005 | ||
ssh | OpenSSH | 5.4 | protocol 2.0 | 27 | 0.005 | ||
ssh | OpenSSH | 4.3p2 Debian 9etch2 | protocol 2.0 | Linux | 27 | 0.005 | |
imond | imond fli4l router config | router | 27 | 0.005 | |||
http | D-Link/Airlink IP webcam http config | 1.0 | webcam | 27 | 0.005 | ||
ssh | Cisco SSH | 1.25 | protocol 1.99 | IOS | 26 | 0.005 | |
nntp | INN nntpd | posting ok | 26 | 0.005 | |||
http | Vivotek IP7131 Network Camera http config | webcam | 26 | 0.005 | |||
vnc | protocol 3 | 25 | 0.005 | ||||
shoutcast-publishing | SHOUTcast publishing port | 25 | 0.005 | ||||
http | RemotelyAnywhere remote PC management httpd | 7.10.552 | 25 | 0.005 | |||
http | CordaServer | 7.2.5.3711 (PopChart | 25 | 0.005 | |||
http | CordaServer | 7.0.1.1366 (PopChart | 25 | 0.005 | |||
ftp | Serv-U ftpd | 6.4 | Windows | 25 | 0.005 | ||
dominoconsole | Lotus Domino Console | 25 | 0.005 | ||||
ssh | Kojoney SSH honeypot | protocol 2.0 | 24 | 0.005 | |||
http | RemotelyAnywhere remote PC management httpd | 9.0.856 | 24 | 0.005 | |||
ssh | OpenSSH | 5.5p1 Debian 4ubuntu6 | Ubuntu Linux; protocol 2.0 | Linux | 23 | 0.004 | |
ssh | OpenSSH | 3.6.1p2 | protocol 2.0 | 23 | 0.004 | ||
http | CCcam card sharing system http config | 23 | 0.004 | ||||
http | Apache | 2.2.14 | (Ubuntu) | 23 | 0.004 | ||
rifa-dvr | Rifatron DVR | webcam | 22 | 0.004 | |||
http-proxy | Squid http proxy | 2.7.STABLE9 | 22 | 0.004 | |||
ftp | vsftpd | 2.0.8 or later | 22 | 0.004 | |||
upnp | Portable SDK for UPnP devices | 1.3.1 | Linux 2.6.21; UPnP 1.0 | Linux | 21 | 0.004 | |
telnet | Frontier Internet * | 21 | 0.004 | ||||
ssh | OpenSSH | 5.4p1_hpn13v11 | FreeBSD 20100308; protocol 2.0 | FreeBSD | 21 | 0.004 | |
ssh | OpenSSH | 5.3p1 Debian 3ubuntu6 | Ubuntu Linux; protocol 2.0 | Linux | 21 | 0.004 | |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | webcam | 21 | 0.004 | |||
http | thttpd | Panasonic BB-HCM511A Network camera http config | webcam | 21 | 0.004 | ||
http | LogMeIn httpd | 4.0.732 | Windows | 21 | 0.004 | ||
http | lighttpd | 21 | 0.004 | ||||
http | CordaServer | 6.0.483 | 21 | 0.004 | |||
vnc | VNC | protocol 3.7 | 20 | 0.004 | |||
vnc | RealVNC Personal | protocol 4.0 | 20 | 0.004 | |||
ssh | OpenSSH | 4.6 | protocol 2.0 | 20 | 0.004 | ||
ssh | Dropbear sshd | 0.51 | protocol 2.0 | Linux | 20 | 0.004 | |
smtp | 20 | 0.004 | |||||
openvpn | OpenVPN | 20 | 0.004 | ||||
http | lighttpd | 1.4.30 | 20 | 0.004 | |||
http | Intoto httpd | 1.0 | 20 | 0.004 | |||
http | CordaServer | 6.0.706 | 20 | 0.004 | |||
http | Apache | 2.2.3 | (Red Hat) | 20 | 0.004 | ||
http | Apache | 2 | 20 | 0.004 |