~14.16 Million IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
ssh | OpenSSH | 6406548 | 45.231 |
ssh | Dropbear sshd | 4529275 | 31.977 |
ssh | 824522 | 5.821 | |
ssh | Cisco SSH | 708433 | 5.002 |
ssh | MikroTik RouterOS sshd | 321086 | 2.267 |
ssh | SCS sshd | 180314 | 1.273 |
no match | -/- | 170009 | 1.2 |
ssh | AllegroSoft RomSShell sshd | 134854 | 0.952 |
ssh | Huawei VRP sshd | 108333 | 0.765 |
ssh | Linksys WRT45G modified dropbear sshd | 107877 | 0.762 |
ssh | Seagate GoFlex NAS device sshd | 97593 | 0.689 |
ssh | lancom sshd | 83852 | 0.592 |
ssh | NetScreen sshd | 67267 | 0.475 |
ssh | Cisco/3com IPSSHd | 57992 | 0.409 |
ssh | SunSSH | 48056 | 0.339 |
ssh | Mocana embedded SSH | 30562 | 0.216 |
ssh | Cyberoam firewall sshd | 23317 | 0.165 |
ssh | WeOnlyDo sshd | 20417 | 0.144 |
ssh | DrayTek Vigor 2820n ADSL router sshd | 20126 | 0.142 |
ssh | Serv-U SSH Server | 19841 | 0.14 |
ssh | Fortinet VPN/firewall sshd | 18269 | 0.129 |
ssh | Bitvise WinSSHD | 17002 | 0.12 |
http | 14422 | 0.102 | |
sftp | ProFTPD mod_sftp | 13802 | 0.097 |
ssh | ZyXEL ZyWALL sshd | 12823 | 0.091 |
ssh | APC AOS cryptlib sshd | 8936 | 0.063 |
tcpwrapped | BSD TCP Wrappers | 8615 | 0.061 |
ssh | Adtran Netvanta RomCliSecure sshd | 8540 | 0.06 |
ssh | HP Integrated Lights-Out mpSSH | 7794 | 0.055 |
ftp | Microsoft ftpd | 7590 | 0.054 |
ssh | GlobalScape CuteFTP sshd | 5731 | 0.04 |
ssh | libssh | 5060 | 0.036 |
ssh | WS_FTP sshd | 3973 | 0.028 |
ssh | CoreFTP sshd | 3838 | 0.027 |
ssh | Cisco IP Phone CP-7900G-series sshd | 3709 | 0.026 |
ssh | Radware sshd | 3704 | 0.026 |
ssl | SSLv3 | 3482 | 0.025 |
ssh | Force10 switch sshd | 2720 | 0.019 |
ssh | USHA SSH | 2678 | 0.019 |
ssh | VanDyke VShell sshd | 2651 | 0.019 |
ftp | Serv-U ftpd | 2614 | 0.018 |
ssh | Cisco VPN Concentrator SSHd | 2589 | 0.018 |
ftp | FileZilla ftpd | 2468 | 0.017 |
ssh | Cerberus FTP Server sshd | 2422 | 0.017 |
chat | AIM or ICQ server | 2373 | 0.017 |
ssh | Pragma FortessSSH | 1981 | 0.014 |
http | SonicWALL | 1844 | 0.013 |
ftp | MikroTik router ftpd | 1689 | 0.012 |
ftp | 1571 | 0.011 | |
ssh | FortiSSH | 1498 | 0.011 |
http | lighttpd | 1330 | 0.009 |
ssh | SrSshServer | 1287 | 0.009 |
ssh | SCS NetScreen sshd | 1146 | 0.008 |
ftp | ProFTPD | 1005 | 0.007 |
ftp | Actiontec router ftpd | 976 | 0.007 |
ssh | 3Com switch sshd | 964 | 0.007 |
ssh | FreSSH | 900 | 0.006 |
ssh | APSSHd | 831 | 0.006 |
ssh | Sysax Multi Server sshd | 816 | 0.006 |
ssh | F-Secure sshd | 813 | 0.006 |
ssh | D-Link sshd | 806 | 0.006 |
http | Microsoft IIS httpd | 787 | 0.006 |
ftp | vsftpd | 713 | 0.005 |
ssh | lshd secure shell | 638 | 0.005 |
ssh | Cisco CSS SSH | 605 | 0.004 |
http | Apache | 512 | 0.004 |
telnet | 466 | 0.003 | |
ssh | Sun StorEdge 3511 sshd | 438 | 0.003 |
ssh | Cyberoam UTM firewall sshd | 421 | 0.003 |
netbios-ssn | 420 | 0.003 | |
ssh | Akamai SSH | 411 | 0.003 |
http | AIM | 408 | 0.003 |
ssh | 3Com WX2200 or WX4400 NOS sshd | 402 | 0.003 |
ssh | Allot Netenforcer OpenSSH | 389 | 0.003 |
ftp | Gene6 ftpd | 378 | 0.003 |
http | Microsoft HTTPAPI httpd | 319 | 0.002 |
vnc | VNC | 316 | 0.002 |
ssh | AOS sshd | 303 | 0.002 |
http | WYM httpd | 285 | 0.002 |
telnet | Linux telnetd | 279 | 0.002 |
ssh | Kojoney SSH honeypot | 247 | 0.002 |
ftp | Pure-FTPd | 243 | 0.002 |
telnet | slush telnetd | 242 | 0.002 |
ftp | Dreambox ftpd | 233 | 0.002 |
ssh | DesktopAuthority OpenSSH | 219 | 0.002 |
ssh | Foundry Networks switch sshd | 216 | 0.002 |
smtp | Exim smtpd | 201 | 0.001 |
ssh | Nortel SSH | 191 | 0.001 |
http-proxy | Squid http proxy | 173 | 0.001 |
ssh | SSHTools J2SSH | 168 | 0.001 |
ssh | Cisco switch sshd | 153 | 0.001 |
ssh | NetApp Data ONTAP sshd | 148 | 0.001 |
http | GoAhead-Webs httpd | 147 | 0.001 |
ssh | Xlight FTP Server sshd | 143 | 0.001 |
ssh | WRQ Reflection for Secure IT sshd | 143 | 0.001 |
mongodb | MongoDB | 141 | 0.001 |
ssh | Dell PowerConnect sshd | 130 | 0.001 |
http | thttpd | 115 | 0.001 |
http | Apache Tomcat/Coyote JSP engine | 110 | 0.001 |
http | Boa HTTPd | 107 | 0.001 |
http | Netwave IP camera http config | 100 | 0.001 |
ssh | DrayTek Vigor 2820 ADSL router sshd | 97 | 0.001 |
ftp | Xlight ftpd | 94 | 0.001 |
ftp | DrayTek Vigor 2820 ADSL router ftpd | 94 | 0.001 |
telnet | DD-WRT telnetd | 87 | 0.001 |
openvpn | OpenVPN | 82 | 0.001 |
telnet | Netgear broadband router or ZyXel VoIP adapter telnetd | 81 | 0.001 |
telnet | Blue Coat telnetd | 79 | 0.001 |
telnet | Draytek Vigor ADSL router telnetd | 73 | 0.001 |
ssh | Foxit WAC Server sshd | 73 | 0.001 |
ftp | TYPSoft ftpd | 72 | 0.001 |
ftp | Synology DiskStation NAS ftpd | 71 | 0.001 |
ftp | Balance Servers TCAdmin game hosting ftpd | 70 | 0.0 |
ssh | PHP Universal sshd | 66 | 0.0 |
ftp | Netgear broadband router or ZyXel VoIP adapter ftpd | 66 | 0.0 |
http | Avtech AVN801 network camera | 64 | 0.0 |
http | nginx | 63 | 0.0 |
ftp | zFTPServer | 62 | 0.0 |
ftp | DrayTek Vigor router ftpd | 61 | 0.0 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 60 | 0.0 |
telnet | Cisco IOS telnetd | 59 | 0.0 |
telnet | Cisco 1721 router telnetd | 56 | 0.0 |
ftp | oftpd | 52 | 0.0 |
ssh | PSFTPd sshd | 50 | 0.0 |
http | Hikvision-Webs | 49 | 0.0 |
vnc | RealVNC Enterprise | 48 | 0.0 |
ftp | WS FTPd | 48 | 0.0 |
ftp | ACLogic CesarFTPd | 45 | 0.0 |
ssh | VanDyke VShell | 44 | 0.0 |
ssh | Digi CM sshd | 43 | 0.0 |
http | uTorrent WebUI | 40 | 0.0 |
http | PDR-M800 | 40 | 0.0 |
ftp | Quick 'n Easy ftpd | 39 | 0.0 |
mysql | MySQL | 38 | 0.0 |
http | Boa httpd | 37 | 0.0 |
ssl | TLSv1 | 36 | 0.0 |
http | Sagem F@st router httpd | 36 | 0.0 |
telnet | Netopia ADSL router telnetd | 33 | 0.0 |
ftp | Sonic FTP Server | 32 | 0.0 |
directconnect | Direct Connect P2P | 32 | 0.0 |
smtp | Microsoft ESMTP | 31 | 0.0 |
http | GeoVision GeoHttpServer for webcams | 30 | 0.0 |
http | CCProxy | 30 | 0.0 |
smtp | 28 | 0.0 | |
telnet | Microsoft Windows 2000 telnetd | 27 | 0.0 |
http | mini_httpd | 27 | 0.0 |
ftp | Microsoft IIS ftpd | 26 | 0.0 |
ssh | RedLineNetworks sshd | 25 | 0.0 |
http | uc-httpd | 25 | 0.0 |
http | Allegro RomPager | 25 | 0.0 |
vnc | RealVNC Personal | 24 | 0.0 |
vnc | 24 | 0.0 | |
http | Intoto httpd | 24 | 0.0 |
http | http server 1.0 | 24 | 0.0 |
ftp | GNU Inetutils FTPd | 24 | 0.0 |
vnc | Apple remote desktop vnc | 23 | 0.0 |
telnet | Dreambox media device telnetd | 23 | 0.0 |
http | Mbedthis-Appweb | 23 | 0.0 |
ssh | F-Secure WinNT sshd | 22 | 0.0 |
smtp | Postfix smtpd | 22 | 0.0 |
http | Gadspot/Avtech AV787 webcam http config | 21 | 0.0 |
ftp | Tenor Multipath Switch ftpd | 19 | 0.0 |
ftp | NET Disk/NetStore ftpd | 19 | 0.0 |
ftp | Cerberus FTP Server | 19 | 0.0 |
telnet | Cisco router telnetd | 18 | 0.0 |
ftp | tnftpd | 18 | 0.0 |
zebedee | Zebedee encrypted tunnel | 17 | 0.0 |
ssh | Tasman router sshd | 17 | 0.0 |
smtp | Microsoft Exchange smtpd | 17 | 0.0 |
rsync | 17 | 0.0 | |
http | VNC Server Enterprise Edition | 17 | 0.0 |
smtp | MDaemon smtpd | 16 | 0.0 |
http | Rhinosoft Serv-U httpd | 16 | 0.0 |
http | GoAhead-Webs embedded httpd | 16 | 0.0 |
ftp | Nucleus ftpd | 16 | 0.0 |
vnc-http | RealVNC | 15 | 0.0 |
ssh | Paramiko Python sshd | 15 | 0.0 |
http-proxy | CCProxy http proxy | 15 | 0.0 |
http | Draytek Vigor ADSL router webadmin | 15 | 0.0 |
ftp | WinFtpd | 15 | 0.0 |
ftp | Titan ftpd | 15 | 0.0 |
http-proxy | F5 BIG-IP load balancer http proxy | 14 | 0.0 |
http | Microsoft ISA httpd | 14 | 0.0 |
http | Httpd | 14 | 0.0 |
http | Jetty | 13 | 0.0 |
http | Cross Web Server | 13 | 0.0 |
ftp | Treck Embedded ftpd | 13 | 0.0 |
ftp | ALFTP | 13 | 0.0 |
telnet | Microsoft Windows XP telnetd | 12 | 0.0 |
svnserve | Subversion | 12 | 0.0 |
ssl | Microsoft IIS SSL | 12 | 0.0 |
http | AIM HTTP | 12 | 0.0 |
vnc-http | VNC Server Enterprise Edition httpd | 11 | 0.0 |
telnet | HP Integrated Lights-Out 2 remote configuration telnetd | 11 | 0.0 |
http | DVR Systems webcam http interface | 11 | 0.0 |
http | Buffalo AirStation http config | 11 | 0.0 |
ftp | Guild ftpd | 11 | 0.0 |
arcserve | ARCserve Discovery | 11 | 0.0 |
telnet | BusyBox telnetd | 10 | 0.0 |
telnet | BSD-derived telnetd | 10 | 0.0 |
ssh | Netpilot config access | 10 | 0.0 |
http | Transmission BitTorrent management httpd | 10 | 0.0 |
http | GoAhead-Webs | 10 | 0.0 |
ftp-proxy | UserGate ftpd | 10 | 0.0 |
ftp | IBM OS/400 FTPd | 10 | 0.0 |