~125 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Version | Info | OS | Devicetype | Count |
Percent |
|---|---|---|---|---|---|---|---|
| X11 | access denied | Unix | 43594 | 34.807 | |||
| telnet | 21515 | 17.178 | |||||
| no match | 13211 | 10.548 | |||||
| telnet | NASLite-SMB/Sveasoft Alchemy firmware telnetd | 6613 | 5.28 | ||||
| http | 4382 | 3.499 | |||||
| irc | Dancer ircd | 3899 | 3.113 | ||||
| http | SonicWALL | firewall | 3544 | 2.83 | |||
| X11 | access denied | 2306 | 1.841 | ||||
| chat | AIM or ICQ server | 1979 | 1.58 | ||||
| vnc | VNC | protocol 3.8 | 1720 | 1.373 | |||
| telnet | BusyBox telnetd | 1148 | 0.917 | ||||
| http | Microsoft IIS httpd | 6.0 | Windows | 651 | 0.52 | ||
| telnet | Pocket CMD telnetd | 628 | 0.501 | ||||
| X11 | NetSarang XManager | Windows | 599 | 0.478 | |||
| telnet | LG-Ericsson LIP-8002 (SIP IP Phone) | 596 | 0.476 | ||||
| http | POSIX | 573 | 0.457 | ||||
| vnc | protocol 3 | 570 | 0.455 | ||||
| telnet | Enterasys XSR Security Router telnetd | router | 502 | 0.401 | |||
| vnc | VNC | protocol 3.6 | 421 | 0.336 | |||
| http | lighttpd | 1.4.19 | 396 | 0.316 | |||
| http | lighttpd | 1.4.29 | 393 | 0.314 | |||
| vnc | RealVNC Enterprise | protocol 4.1 | 355 | 0.283 | |||
| mysql | MySQL | 5.0.51a-24+lenny4 | 346 | 0.276 | |||
| telnet | Nortel-LG VoIP IAD telnetd | PBX | 336 | 0.268 | |||
| vnc | RealVNC Personal | protocol 4.0 | 335 | 0.267 | |||
| http | GoAhead-Webs httpd | 306 | 0.244 | ||||
| http-proxy | Squid http proxy | 3.0.STABLE24 | 288 | 0.23 | |||
| http | Boa HTTPd | 0.94.13 | 278 | 0.222 | |||
| X11 | X.Org | open | Unix | 262 | 0.209 | ||
| http | GeoVision GeoHttpServer for webcams | webcam | 259 | 0.207 | |||
| http | Microsoft IIS httpd | 257 | 0.205 | ||||
| http | Avtech AVN801 network camera | 1.0 | UPnP 1.0 | webcam | 248 | 0.198 | |
| http | Microsoft HTTPAPI httpd | 2.0 | SSDP/UPnP | Windows | 246 | 0.196 | |
| http | Apache Tomcat/Coyote JSP engine | 1.1 | 244 | 0.195 | |||
| http | Boa HTTPd | 0.94.14rc21 | 212 | 0.169 | |||
| soap | gSOAP soap | 2.7 | 202 | 0.161 | |||
| http | Boa httpd | 200 | 0.16 | ||||
| http | mini_httpd | 1.19 19dec2003 | 188 | 0.15 | |||
| telnet | Net2Phone MAX | 180 | 0.144 | ||||
| http | Hikvision-Webs | 170 | 0.136 | ||||
| ssh | OpenSSH | 3.8p1 | protocol 1.99 | 166 | 0.133 | ||
| X11 | XFree86 | open | Unix | 164 | 0.131 | ||
| telnet | LG-Nortel LIP-6812D (MGCP IP Phone) | 162 | 0.129 | ||||
| irc-proxy | ShroudBNC irc-proxy | 1.2 revision 1080 | 159 | 0.127 | |||
| http | http server 1.0 | 152 | 0.121 | ||||
| http | thttpd | 2.25b 29dec2003 | 148 | 0.118 | |||
| ftp | Microsoft ftpd | Windows | 141 | 0.113 | |||
| http | Microsoft IIS httpd | 7.5 | Windows | 139 | 0.111 | ||
| http | uc-httpd | 1.0.0 | 137 | 0.109 | |||
| http | iBoot | 137 | 0.109 | ||||
| ftp | Pure-FTPd | 135 | 0.108 | ||||
| ssh | OpenSSH | 4.3 | protocol 2.0 | 130 | 0.104 | ||
| http | RealVNC | 4.0 | 125 | 0.1 | |||
| http | Allegro RomPager | 4.51 UPnP/1.0 | ZyXEL ZyWALL 2 | 117 | 0.093 | ||
| http | Apache | 114 | 0.091 | ||||
| irc-proxy | psyBNC | 2.3.1 | 111 | 0.089 | |||
| http | General User | 104 | 0.083 | ||||
| arcserve | ARCserve Discovery | 104 | 0.083 | ||||
| ftp | 101 | 0.081 | |||||
| http-proxy | 3proxy http proxy | 99 | 0.079 | ||||
| telnet | LG-Nortel LIP-6830D (MGCP IP Phone) | 95 | 0.076 | ||||
| http | Apache | 2.2.22 | (Unix) PHP/5.3.10 | 93 | 0.074 | ||
| smtp | Microsoft ESMTP | 6.0.3790.4675 | Windows | 88 | 0.07 | ||
| http | Gateway Controller 3550 | 88 | 0.07 | ||||
| X11 | StarNet X-Win32 | Windows | 85 | 0.068 | |||
| ssh | protocol 1.5 | 84 | 0.067 | ||||
| http | Microsoft IIS httpd | 7.0 | Windows | 83 | 0.066 | ||
| X11 | Xming X server | Windows | 82 | 0.065 | |||
| http | thttpd | 2.24 26oct2003 | 76 | 0.061 | |||
| http | Mbedthis-Appweb | 2.0.4 | 72 | 0.057 | |||
| http | Gateway Controller 3560 | 72 | 0.057 | ||||
| http | DrayTek Vigor 2800-series ADSL router httpd | broadband router | 71 | 0.057 | |||
| telnet | LG-Ericsson IP8830 (SIP IP Phone) | 70 | 0.056 | ||||
| X11 | Hummingbird Exceed X server | Windows | 68 | 0.054 | |||
| http | Allegro RomPager | 4.07 UPnP/1.0 | ZyXEL ZyWALL 2 | 68 | 0.054 | ||
| http | DVR Systems webcam http interface | webcam | 66 | 0.053 | |||
| http | Apache | 2.2.22 | (Unix) | 66 | 0.053 | ||
| websocket | websockify | SimpleHTTP 0.6; Python 2.6.6 | 61 | 0.049 | |||
| http | BusyBox httpd | Linux | media device | 61 | 0.049 | ||
| vnc | VNC | protocol 3.7 | 60 | 0.048 | |||
| http | Microsoft IIS httpd | 5.0 | Windows | 60 | 0.048 | ||
| ovm-manager | Oracle VM Manager | 59 | 0.047 | ||||
| http | Microsoft IIS httpd | 5.1 | Windows | 59 | 0.047 | ||
| http | Gordano Web Server v5.06.0016 | 57 | 0.046 | ||||
| X11 | Hummingbird Exceed X server | 8.X, 9.X, or 10.X | Windows | 56 | 0.045 | ||
| http | OwnServer1.0 | 53 | 0.042 | ||||
| telnet | LG-Ericsson IP8802 (SIP IP Phone) | 51 | 0.041 | ||||
| ssh | OpenSSH | 5.3 | protocol 2.0 | 50 | 0.04 | ||
| smtp | Microsoft Exchange smtpd | Windows | 50 | 0.04 | |||
| vnc | Apple remote desktop vnc | Mac OS X | 48 | 0.038 | |||
| http | dcs-lig-httpd | 47 | 0.038 | ||||
| telnet | LGE XS-GATE/AX-2100 (Internet Phone Gateway) | 46 | 0.037 | ||||
| rtsp | 45 | 0.036 | |||||
| rifa-dvr | Rifatron DVR | webcam | 45 | 0.036 | |||
| http | Apache | 2.2.3 | (CentOS) | 45 | 0.036 | ||
| X11 | XSun Solaris X11 server | 44 | 0.035 | ||||
| telnet | LGIC ITGC(Internet Telephony Gateway Circuit) | 43 | 0.034 | ||||
| ssh | OpenSSH | 3.6.1p2 | protocol 2.0 | 43 | 0.034 | ||
| smtp | 42 | 0.034 | |||||
| directconnect | Direct Connect P2P | Windows | 42 | 0.034 | |||
| vtun | Vtun Virtual Tunnel | 3.X 11/05/2007 | 41 | 0.033 | |||
| telnet | LG-Nortel TS-350i (SIP IP Phone) | 41 | 0.033 | ||||
| oracle-tns | Oracle TNS Listener | 41 | 0.033 | ||||
| http | Network Camera | 41 | 0.033 | ||||
| http | Techno Vision Security System http config | 2.0 | webcam | 40 | 0.032 | ||
| vnc | VNC | protocol 3.3 | 39 | 0.031 | |||
| ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | Ubuntu Linux; protocol 2.0 | Linux | 38 | 0.03 | |
| ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | Ubuntu Linux; protocol 2.0 | Linux | 37 | 0.03 | |
| ssh | OpenSSH | 2.3.0 mikrotik 2.9 | protocol 1.99 | router | 37 | 0.03 | |
| http | Airlink 101 or TRENDnet TVIP-422w webcam http config | webcam | 37 | 0.03 | |||
| zebedee | Zebedee encrypted tunnel | 36 | 0.029 | ||||
| vnc | Ultr@VNC Repeater | 36 | 0.029 | ||||
| telnet | SMC SMC2870W Wireless Ethernet Bridge | bridge | 36 | 0.029 | |||
| http | Vivotek Network Camera | 36 | 0.029 | ||||
| telnet | LG-Ericsson LIP-8008E (IPKTS Phone) | 35 | 0.028 | ||||
| irc | Unreal ircd | 35 | 0.028 | ||||
| ssh | OpenSSH | 6.0 | protocol 2.0 | 34 | 0.027 | ||
| http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | webcam | 34 | 0.027 | |||
| http | Apache | 2.2.22 | (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0h | 34 | 0.027 | ||
| X11 | Cygwin X Server Project | Windows | 33 | 0.026 | |||
| http | Transmission BitTorrent management httpd | 33 | 0.026 | ||||
| ssl | TLS | 1.0 | 32 | 0.026 | |||
| telnet | LGE AX1100S (Internet Phone Gateway) | 31 | 0.025 | ||||
| http | Ubicom | 1.1 | 30 | 0.024 | |||
| X11 | Hummingbird Exceed X server | 6.X | Windows | 29 | 0.023 | ||
| irc | InspIRCd | 29 | 0.023 | ||||
| http | lighttpd | 29 | 0.023 | ||||
| ftp | FileZilla ftpd | 0.9.41 beta | Windows | 29 | 0.023 | ||
| X11 | SCO X server | SCO UNIX | 28 | 0.022 | |||
| telnet | LG-Ericsson IP8815 (SIP IP Phone) | 28 | 0.022 | ||||
| ssh | OpenSSH | 3.9p1 | protocol 1.99 | 28 | 0.022 | ||
| http | Virata-EmWeb | 6.0.1 | 28 | 0.022 | |||
| http | nginx | 28 | 0.022 | ||||
| telnet | LG-Nortel LIP-6830D (SIP IP Phone) | 27 | 0.022 | ||||
| telnet | LG-Nortel LIP-6812D (SIP IP Phone) | 27 | 0.022 | ||||
| http | SEEnergy SVR-116 | 27 | 0.022 | ||||
| remoting | MS .NET Remoting services | 26 | 0.021 | ||||
| http | wg_httpd | 1.0(based Boa | 26 | 0.021 | |||
| http | TwistedWeb httpd | 8.2.0 | 26 | 0.021 | |||
| http | netcam | 26 | 0.021 | ||||
| http | NetBox httpd | 2.7 Build 4126 | 26 | 0.021 | |||
| http | Apache | 1.3.33 | (Unix) mod_ssl/2.8.22 OpenSSL/0.9.7a | 26 | 0.021 | ||
| ftp | Synology DiskStation NAS ftpd | storage-misc | 26 | 0.021 | |||
| ftp | Serv-U ftpd | SSL Required | Windows | 26 | 0.021 | ||
| X11 | Hummingbird Exceed X server | 7.X | Windows | 25 | 0.02 | ||
| ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | protocol 2.0 | Linux | 25 | 0.02 | |
| http-proxy | Squid http proxy | 25 | 0.02 | ||||
| http | Apache | 2.2.14 | (Ubuntu) | 25 | 0.02 | ||
| ssl | OpenSSL | SSLv3 | 24 | 0.019 | |||
| ssh | OpenSSH | 5.1p1 Debian 5 | protocol 2.0 | Linux | 24 | 0.019 | |
| rtsp | Vivotek IP7131 or IP7138 webcam rtspd | webcam | 24 | 0.019 | |||
| openvpn | OpenVPN | 24 | 0.019 | ||||
| http | Rex | 10.0.0.4007 | 24 | 0.019 | |||
| http | RemotelyAnywhere remote PC management httpd | 8.0.668 | 24 | 0.019 | |||
| http | lighttpd | 1.4.26 | 24 | 0.019 | |||
| http | Apache | 2.2.22 | (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0h PHP/5.3.10 | 24 | 0.019 | ||
| ssh | MikroTik RouterOS sshd | protocol 2.0 | Linux | router | 23 | 0.018 | |
| http | RealVNC | E4 | 23 | 0.018 | |||
| http | httpd 1.1 | 23 | 0.018 | ||||
| http | D-Link Internet Camera | 23 | 0.018 | ||||
| ssh | protocol 2.0 | 22 | 0.018 | ||||
| http | httpd | 22 | 0.018 | ||||
| telnet | the MRV Communications' LX Series Server | 21 | 0.017 | ||||
| telnet | Linux telnetd | Linux | 21 | 0.017 | |||
| socks5 | 21 | 0.017 | |||||
| xml | 20 | 0.016 | |||||
| ssh | OpenSSH | 5.5 | protocol 2.0 | 20 | 0.016 | ||
| ssh | OpenSSH | 5.4p1_hpn13v11 | FreeBSD 20100308; protocol 2.0 | FreeBSD | 20 | 0.016 | |
| smtp | Postfix smtpd | 20 | 0.016 | ||||
| secure-socket | CA Secure Socket Adapter | 20 | 0.016 | ||||
| http | TP-LINK Router | TP-LINK Router R478 | 20 | 0.016 | |||
| http | Apache | 2.2.16 | (Unix) | 20 | 0.016 | ||
| ftp | FileZilla ftpd | 0.9.40 beta | Windows | 20 | 0.016 |