~294 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Info | OS | Devicetype | Count | Percent |
---|---|---|---|---|---|---|---|
telnet | Cisco router telnetd | router | 134780 | 45.763 | |||
no match | 107633 | 36.545 | |||||
http | 12362 | 4.197 | |||||
ftp | vsftpd | 2.0.8 or later | 7392 | 2.51 | |||
telnet | Cisco telnetd | IOS | router | 4965 | 1.686 | ||
irc | Dancer ircd | 4045 | 1.373 | ||||
http | SonicWALL | firewall | 3361 | 1.141 | |||
chat | AIM or ICQ server | 2301 | 0.781 | ||||
eggdrop | Eggdrop IRC bot console | 1.6.21 | 2197 | 0.746 | |||
ssl | SSLv3 | 1742 | 0.591 | ||||
donkey | MLDonkey multi-network P2P server | 786 | 0.267 | ||||
upnp | Portable SDK for UPnP devices | 1.3.1 | Linux 2.6.21; UPnP 1.0 | Linux | 716 | 0.243 | |
http | lighttpd | 688 | 0.234 | ||||
http | AIM | 1.0 | 562 | 0.191 | |||
http | SNF | 0.1 | 423 | 0.144 | |||
http | lighttpd | 1.4.29 | 419 | 0.142 | |||
http | lighttpd | 1.4.19 | 408 | 0.139 | |||
mysql | MySQL | 5.0.51a-24+lenny5-log | 385 | 0.131 | |||
http | Microsoft HTTPAPI httpd | 2.0 | SSDP/UPnP | Windows | 383 | 0.13 | |
http | Microsoft IIS httpd | 6.0 | Windows | 309 | 0.105 | ||
http | Netwave IP camera http config | webcam | 242 | 0.082 | |||
irc-proxy | psyBNC | 2.3.2-7 | 217 | 0.074 | |||
telnet | 206 | 0.07 | |||||
http | Microsoft IIS httpd | 204 | 0.069 | ||||
mysql | MySQL | 4.1.18 | 191 | 0.065 | |||
http | Apache Tomcat/Coyote JSP engine | 1.1 | 166 | 0.056 | |||
http | Boa HTTPd | 0.94.14rc21 | 159 | 0.054 | |||
http | GoAhead-Webs httpd | 141 | 0.048 | ||||
http | wg_httpd | 1.0(based Boa | 135 | 0.046 | |||
ssh | OpenSSH | 4.3 | protocol 2.0 | 126 | 0.043 | ||
http | WangWnagSimpleServer | 1.0 | 113 | 0.038 | |||
vnc | VNC | protocol 3.8 | 104 | 0.035 | |||
ftp | Microsoft ftpd | Windows | 101 | 0.034 | |||
http | lighttpd | 1.4.26 | 100 | 0.034 | |||
http | Mongrel httpd | 1.1.5 | 98 | 0.033 | |||
remoting | MS .NET Remoting services | 97 | 0.033 | ||||
irc-proxy | psyBNC | 2.3.2-4.6-EuShells.com | 97 | 0.033 | |||
http | TBS | R2 UPnP | 96 | 0.033 | |||
ssh | protocol 1.5 | 93 | 0.032 | ||||
http | Avtech AVN801 network camera | 1.0 | UPnP 1.0 | webcam | 93 | 0.032 | |
rtsp | 81 | 0.028 | |||||
http | OracleAS Web Cache 10g | 9.0.4.0.0 | 81 | 0.028 | |||
oracle-tns | Oracle TNS Listener | 80 | 0.027 | ||||
http | Apache | SSL-only mode | 75 | 0.025 | |||
http | Apache | 73 | 0.025 | ||||
ice | Internet Communications Engine | 67 | 0.023 | ||||
http | thttpd | 2.24 | 65 | 0.022 | |||
http | Microsoft IIS httpd | 7.5 | Windows | 65 | 0.022 | ||
http-proxy | EZproxy web proxy | 64 | 0.022 | ||||
http | Ubuntu | lucid UPnP | 59 | 0.02 | |||
http | Secure Computing Sidewinder firewall http admin | firewall | 59 | 0.02 | |||
http | PDR-M800 | 1.0 | 59 | 0.02 | |||
http | mini_httpd | 1.19 19dec2003 | 56 | 0.019 | |||
http | Indy | 10.0.52 | 54 | 0.018 | |||
secure-socket | CA Secure Socket Adapter | 52 | 0.018 | ||||
arcserve | ARCserve Discovery | 52 | 0.018 | ||||
ssl | TLSv1 | 51 | 0.017 | ||||
http | Hikvision-Webs | 50 | 0.017 | ||||
http | thttpd | 2.19-MX Sep 9 2010 | WAP | 49 | 0.017 | ||
http | Apache | 2.2.13 | (Unix) DAV/2 PHP/5.2.11 | 49 | 0.017 | ||
http | Thin | 1.3.1 | codename Triple Espresso | 46 | 0.016 | ||
http | thttpd | 2.25b | 43 | 0.015 | |||
http | thttpd | Panasonic BB-HCM511 IP camera http config | 39 | 0.013 | |||
vnc | protocol 3 | 36 | 0.012 | ||||
http-proxy | Squid http proxy | 2.7.STABLE9 | 36 | 0.012 | |||
http | Cisco IOS http config | IOS | 36 | 0.012 | |||
http | Boa HTTPd | 0.94.13 | 36 | 0.012 | |||
http | nginx | 1.0.10 | Phusion Passenger 3.0.11 (mod_rails/mod_rack) | 35 | 0.012 | ||
http | uc-httpd | 1.0.0 | 34 | 0.012 | |||
http | Microsoft IIS httpd | 7.0 | Windows | 33 | 0.011 | ||
ftp | 33 | 0.011 | |||||
http | uTorrent WebUI | Windows | 31 | 0.011 | |||
http | GeoVision GeoHttpServer for webcams | webcam | 31 | 0.011 | |||
http | Boa HTTPd | 0.93.15 | 30 | 0.01 | |||
http | Apache | 2.2.3 | (CentOS) | 30 | 0.01 | ||
mysql | MySQL | 5.0.96-log | 29 | 0.01 | |||
http | Net-OS 5.xx UPnP | 1.0 | 29 | 0.01 | |||
ssh | protocol 2.0 | 28 | 0.01 | ||||
http | Jetty | 8.0.y.z-SNAPSHOT | 28 | 0.01 | |||
citrix-ica | Citrix Metaframe XP ICA | Windows | 28 | 0.01 | |||
http | Cross Web Server | 27 | 0.009 | ||||
http | General User | 26 | 0.009 | ||||
http | Gadspot/Avtech AV787 webcam http config | webcam | 26 | 0.009 | |||
vnc | VNC | protocol 3.6 | 25 | 0.008 | |||
http | WebFS httpd | 1.21 | 25 | 0.008 | |||
http | thttpd | 25 | 0.008 | ||||
http-proxy | Squid http proxy | 3.1.19 | 25 | 0.008 | |||
http | Microsoft IIS httpd | 5.1 | Windows | 25 | 0.008 | ||
http | Mbedthis-Appweb | 2.0.4 | 25 | 0.008 | |||
http | lighttpd | 1.4.28 | 25 | 0.008 | |||
ssl | TLS | 1.0 | 24 | 0.008 | |||
http | ImagiaTek | Network Card Manager | 24 | 0.008 | |||
http | GoAhead-Webs | 24 | 0.008 | ||||
http | Apache | 2.2.22 | (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0h; SSL-only mode | 24 | 0.008 | ||
ericom | Ericom PowerTermWebConnect | 1.0 | Windows | 24 | 0.008 | ||
bnetd | bnetd open source Blizzard Battlenet server | 23 | 0.008 | ||||
ssh | OpenSSH | 5.1p1 Debian 5 | protocol 2.0 | Linux | 22 | 0.007 | |
http | Httpd | 1.0 | 22 | 0.007 | |||
http | DVR Systems webcam http interface | webcam | 22 | 0.007 | |||
upnp | Microsoft Windows UPnP | Windows | 21 | 0.007 | |||
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | Ubuntu Linux; protocol 2.0 | Linux | 21 | 0.007 | |
vnc | RealVNC Personal | protocol 4.0 | 20 | 0.007 | |||
ssl | Microsoft IIS SSL | Windows | 20 | 0.007 | |||
http | Microsoft IIS httpd | 5.0 | Windows | 20 | 0.007 | ||
http | Apache | 2.2.3 | 20 | 0.007 |