~219 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
ssl | SSLv3 | 63375 | 28.822 |
http | Microsoft IIS httpd | 45011 | 20.47 |
http | 13742 | 6.25 | |
http | Sun GlassFish | 11384 | 5.177 |
http | Apache | 10301 | 4.685 |
http | Ipswitch IMail Monitor web service | 6146 | 2.795 |
no match | -/- | 5539 | 2.519 |
irc | Dancer ircd | 4038 | 1.836 |
http | Apache Tomcat/Coyote JSP engine | 3800 | 1.728 |
http | SonicWALL | 3324 | 1.512 |
http | lighttpd | 3087 | 1.404 |
chat | AIM or ICQ server | 2278 | 1.036 |
http | CTCFC | 1979 | 0.9 |
http | Boa HTTPd | 1933 | 0.879 |
http | Ipswitch IMail web service | 1751 | 0.796 |
http | DD-WRT milli_httpd | 1733 | 0.788 |
http | Microsoft HTTPAPI httpd | 1636 | 0.744 |
http | Allegro RomPager | 1472 | 0.669 |
http | MikroTik router config httpd | 1279 | 0.582 |
http | CherryPy httpd | 1269 | 0.577 |
http | nginx | 1235 | 0.562 |
http | Netwave IP camera http config | 1084 | 0.493 |
http | GoAhead-Webs httpd | 1062 | 0.483 |
http | Secure Computing Sidewinder firewall http admin | 1015 | 0.462 |
http | thttpd | 982 | 0.447 |
http | Transmission BitTorrent management httpd | 972 | 0.442 |
http | Jetty | 931 | 0.423 |
http | GeoVision GeoHttpServer for webcams | 917 | 0.417 |
http | Avtech AVN801 network camera | 839 | 0.382 |
http | Virata-EmWeb | 791 | 0.36 |
upnp | Conexant-EmWeb | 723 | 0.329 |
http | AIM | 630 | 0.287 |
http-proxy | Squid http proxy | 627 | 0.285 |
http | uc-httpd | 612 | 0.278 |
http | Cross Web Server | 573 | 0.261 |
remoting | MS .NET Remoting services | 550 | 0.25 |
http | MikroTik router http config | 546 | 0.248 |
http | ise GmbH HTTP-Server v2.0 | 508 | 0.231 |
http | HTTPD 1.0 | 497 | 0.226 |
http | Draytek Vigor ADSL router webadmin | 489 | 0.222 |
http | Sagem F@st router httpd | 480 | 0.218 |
http | mini_httpd | 449 | 0.204 |
http | Intoto httpd | 429 | 0.195 |
http | Hikvision-Webs | 429 | 0.195 |
http | Linksys router http config | 370 | 0.168 |
http | Unknown | 347 | 0.158 |
http | D-Link DIR-300 WAP http admin | 323 | 0.147 |
ssl | TLS | 306 | 0.139 |
http | uhttpd | 274 | 0.125 |
http | webcamXP.Lite | 253 | 0.115 |
http | WindWeb | 249 | 0.113 |
http | Indy httpd | 240 | 0.109 |
xml-rpc | ABYSS httpd | 207 | 0.094 |
http-proxy | Symantec firewall http proxy | 202 | 0.092 |
http | Mbedthis-Appweb | 199 | 0.091 |
http | GoAhead-Webs embedded httpd | 199 | 0.091 |
http | Netgear DG834G router http config | 195 | 0.089 |
http-proxy | Oops! http proxy | 184 | 0.084 |
ssh | OpenSSH | 179 | 0.081 |
http | uTorrent utserver web interface | 179 | 0.081 |
http | eWON | 179 | 0.081 |
http | SonicWALL firewall http config | 176 | 0.08 |
http | Router | 176 | 0.08 |
http | QNAP TS-219P NAS http config | 174 | 0.079 |
http | http server 1.0 | 171 | 0.078 |
http | Netgear DG834 router http config | 156 | 0.071 |
http | Gadspot/Avtech AV787 webcam http config | 146 | 0.066 |
telnet | 142 | 0.065 | |
http | DVR Systems webcam http interface | 141 | 0.064 |
http | TP-LINK Router | 136 | 0.062 |
http | Indy | 129 | 0.059 |
http | HTTP Software 1.1 | 127 | 0.058 |
http | SBox server | 126 | 0.057 |
http-proxy | Haproxy http proxy | 124 | 0.056 |
arcserve | ARCserve Discovery | 114 | 0.052 |
http | DrcomServer1.0 | 112 | 0.051 |
http | IP_SHARER WEB | 111 | 0.05 |
http | Httpd | 107 | 0.049 |
http | EfangVHost Server | 106 | 0.048 |
http | PDR-M800 | 105 | 0.048 |
http | Zope httpd | 103 | 0.047 |
http-proxy | MikroTik http proxy | 103 | 0.047 |
http | OpenDNS Guide | 101 | 0.046 |
http | MiniServ | 99 | 0.045 |
http | H3C-Miniware-Webs | 98 | 0.045 |
vnc | VNC | 96 | 0.044 |
ssh | 96 | 0.044 | |
http | TwistedWeb httpd | 93 | 0.042 |
http | Caucho Resin JSP engine | 91 | 0.041 |
xml | 88 | 0.04 | |
http | MiniWeb | 87 | 0.04 |
http | Microsoft ISA httpd | 87 | 0.04 |
upnp | Microsoft Windows UPnP | 86 | 0.039 |
http | NcWebServer/1.3.37 (Unix) mod_ssl/2.8.28 OpenSSL | 85 | 0.039 |
http | Netgear WGR614v9 WAP http config | 83 | 0.038 |
intermapper | InterMapper network monitor | 81 | 0.037 |
http | Netgear DGN1000 router http config | 81 | 0.037 |
http | Embedded HTTP Server | 81 | 0.037 |
http | D-Link/Airlink IP webcam http config | 75 | 0.034 |
http | Oracle XML DB Enterprise Edition httpd | 74 | 0.034 |
ssl | Microsoft IIS SSL | 72 | 0.033 |
http | Sun GlassFish Open Source Edition | 72 | 0.033 |
http | World Client WDaemon httpd | 71 | 0.032 |
http | uTorrent WebUI | 71 | 0.032 |
http | Tridium Niagara httpd | 69 | 0.031 |
http | TP-LINK WR340G WAP http config | 69 | 0.031 |
http | dcs-lig-httpd | 69 | 0.031 |
ssl | TLSv1 | 68 | 0.031 |
http | MS-SDK-HttpServer | 67 | 0.03 |
http | NAI EPO Agent framework | 66 | 0.03 |
http | httpd 1.1 | 65 | 0.03 |
http | Netgear or Linksys WAP http config | 64 | 0.029 |
http | Router Webserver | 62 | 0.028 |
http | Digital Loggers Web Power Switch II http config | 62 | 0.028 |
http | Waveplus HTTPD | 59 | 0.027 |
http | siyou server | 59 | 0.027 |
http | Microsoft-HTTPAPI | 59 | 0.027 |
http | Gnway Web Server | 58 | 0.026 |
http | BaseHTTPServer | 58 | 0.026 |
http | RapidLogic httpd | 57 | 0.026 |
http | Netgear FVS318 router http config | 55 | 0.025 |
http | httpd | 54 | 0.025 |
http | Boa httpd | 54 | 0.025 |
http | Microsoft Windows Media Server | 53 | 0.024 |
shoutcast | SHOUTcast server | 52 | 0.024 |
http | Rhinosoft Serv-U httpd | 52 | 0.024 |
http | D-Link DCS-900 webcam http config | 52 | 0.024 |
ftp | Microsoft ftpd | 52 | 0.024 |
http | Ubicom httpd | 50 | 0.023 |
http | David WebBox httpd | 50 | 0.023 |
http | Cisco IOS http config | 50 | 0.023 |
http | webserver | 49 | 0.022 |
http | Netgear WGR614v7 WAP http config | 49 | 0.022 |
http | TP-LINK WR740N WAP http config | 48 | 0.022 |
http | JuanNiu | 48 | 0.022 |
http | Milestone XProtect video surveillance http interface | 47 | 0.021 |
http | HTTPServer | 47 | 0.021 |
http | Dreambox httpd | 46 | 0.021 |
http | WYM httpd | 45 | 0.02 |
http | Netgear DG834GT router http config | 45 | 0.02 |
http | Netgear WNR3500L WAP http config | 43 | 0.02 |
http | IceWarp webmail httpd | 43 | 0.02 |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | 42 | 0.019 |
http | SAP Message Server httpd | 42 | 0.019 |
http | Ubicom | 41 | 0.019 |
http | Linksys PAP2 VoIP http config | 40 | 0.018 |
http | Imagine Reloaded beta | 40 | 0.018 |
http | FVG318 | 40 | 0.018 |
socks-proxy | Socks4A | 39 | 0.018 |
http | webcamXP httpd | 39 | 0.018 |
http | GM Streaming Server httpd | 39 | 0.018 |
http | Buffalo AirStation http config | 39 | 0.018 |
ftp | vsftpd | 39 | 0.018 |
http | Rex media encoder http config | 38 | 0.017 |
http | Netgear WNR2000v2 WAP http config | 38 | 0.017 |
http | Lotus Domino httpd | 38 | 0.017 |
http | HttpFileServer httpd | 38 | 0.017 |
http | Avamar | 38 | 0.017 |
http | WebServer(IPCamera_Logo) | 37 | 0.017 |
http | Techno Vision Security System http config | 37 | 0.017 |
http | David-WebBox | 37 | 0.017 |
http | BenQ projector | 37 | 0.017 |
rtsp | Avtech MPEG4 DVR control rtspd | 36 | 0.016 |
http | Webs | 36 | 0.016 |
http-proxy | NetApp NetCache http proxy | 36 | 0.016 |
http | Fnord httpd | 36 | 0.016 |
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 36 | 0.016 |
http | Netgear WNR1000v3 WAP http config | 35 | 0.016 |
shoutcast-publishing | SHOUTcast publishing port | 34 | 0.015 |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 34 | 0.015 |
http | QNAP TS-109-II NAS http config | 34 | 0.015 |
http | GoAhead-Webs | 34 | 0.015 |
http | ChipPC Extreme httpd | 34 | 0.015 |
ssh | Dropbear sshd | 33 | 0.015 |
http | TP-LINK WR841N WAP http config | 32 | 0.015 |
http | RWAPM X-Server 32bit Apache | 32 | 0.015 |
http | TP-LINK WR941N WAP http config | 31 | 0.014 |
http | ADTRAN | 31 | 0.014 |
http | ADH-Web httpd | 31 | 0.014 |
http | D-Link DI-524 http config | 30 | 0.014 |
rtsp | 29 | 0.013 | |
ftp | ProFTPD | 29 | 0.013 |
mysql | MySQL | 28 | 0.013 |
http | PasteWSGIServer | 28 | 0.013 |
http | OwnServer1.0 | 28 | 0.013 |
http | HP Integrated Lights-Out http config | 28 | 0.013 |
http | D-Link DI-804HV http config | 28 | 0.013 |
http | Citrix Metaframe ICA Browser | 28 | 0.013 |
http | WEB SERVER | 27 | 0.012 |
http | TP-LINK WR541G/542G WAP http config | 27 | 0.012 |
http-proxy | 3Proxy http proxy | 27 | 0.012 |
http | NEC Electra Elite IPK II WebPro | 27 | 0.012 |
ssl | multi-vendor SSL | 26 | 0.012 |
irc | Unreal ircd | 26 | 0.012 |
http | Oracle GlassFish | 26 | 0.012 |
http | Kerio MailServer http config | 26 | 0.012 |
http | Grandstream HT502 VoIP router http config | 26 | 0.012 |
http | D-Link router/Airlink NAS http config | 26 | 0.012 |
http | D-Link DCS-920 webcam http config | 26 | 0.012 |
http | XBMC Web Media Manager | 25 | 0.011 |
http | Winstone Servlet Engine | 25 | 0.011 |
http | WebFS httpd | 25 | 0.011 |
http | uClinux-httpd | 25 | 0.011 |
http | Mobotix Camera http config | 25 | 0.011 |
http | linux | 25 | 0.011 |
ftp | 25 | 0.011 | |
http | SmarterTools httpd | 24 | 0.011 |
http | Netgear DGN2000 router http config | 24 | 0.011 |
http | IP_SHARER WEB 1.0 | 24 | 0.011 |
http | D-Link DIR-600 WAP http config | 24 | 0.011 |
smtp | Microsoft ESMTP | 23 | 0.01 |
http | Tornado | 23 | 0.01 |
http | Speedr | 23 | 0.01 |
http | Switch | 22 | 0.01 |
http | Network Camera | 22 | 0.01 |
http | Netgear DG834PN router http config | 22 | 0.01 |
http | Netgear DG834 FR WAP http config | 22 | 0.01 |
http | MultView WEB Server V1.1 | 22 | 0.01 |
http | ESET NOD32 anti-virus update httpd | 22 | 0.01 |
http | DrayTek Vigor 3300 router http config | 22 | 0.01 |
http | Delta Networks Embedded HTTPD | 22 | 0.01 |
http | antid | 22 | 0.01 |
http | Virgin Super Hub media player http config | 21 | 0.01 |
http-proxy | FreeProxy http proxy | 21 | 0.01 |
http | Netgear CVG834G cable modem http config | 21 | 0.01 |
http | Mono-HTTPAPI | 21 | 0.01 |
http | LuCI Lua http config | 21 | 0.01 |
http | D-Link DCS-910 webcam http config | 21 | 0.01 |
http | calibre | 21 | 0.01 |
vnc | RealVNC Personal | 20 | 0.009 |
http | Zimbra http config | 20 | 0.009 |
http | VMware ESXi Server httpd | 20 | 0.009 |
http | Seagate Black Armor 440 NAS http config | 20 | 0.009 |
http | Netgear DG834 http config | 20 | 0.009 |
http | GoldStar iPECS 50B PBX http config | 20 | 0.009 |
http | CCcam card sharing system http config | 20 | 0.009 |
http | Vivotek 3102 Camera http config | 19 | 0.009 |
http | RemotelyAnywhere remote PC management httpd | 19 | 0.009 |
http | NT | 19 | 0.009 |
http | NewCS satellite card sharing system http config | 19 | 0.009 |
http | MediaHouse ipMonitor httpd | 19 | 0.009 |
http | Linksys RVS4000 security router http config | 19 | 0.009 |
http | D-Link DIR-815 WAP http config | 19 | 0.009 |
vnc | RealVNC Enterprise | 18 | 0.008 |
smtp | Postfix smtpd | 18 | 0.008 |
http | UltiDev Cassini httpd | 18 | 0.008 |
http-proxy | Microsoft Foundation Class httpd | 18 | 0.008 |
http | Netgear WNR3500 WAP http config | 18 | 0.008 |
http | Netgear WGR614v6 WAP http config | 18 | 0.008 |
http | Microsoft IIS | 18 | 0.008 |
http | Icecast streaming media server | 18 | 0.008 |
http | Henry httpd | 18 | 0.008 |
http | Engine 12.6.1.370 | 18 | 0.008 |
http | Embedded HTTP Server. | 18 | 0.008 |
http | CrushFTP httpd | 18 | 0.008 |
ftp | Serv-U ftpd | 18 | 0.008 |
ftp | FileZilla ftpd | 18 | 0.008 |
http | W3MFC | 17 | 0.008 |
http | VCS-VideoJet-Webserver | 17 | 0.008 |
http | Siemens Gigaset A580 or S450 VoIP phone http config | 17 | 0.008 |
http | Sagem Livebox WAP http config | 17 | 0.008 |
http | Netgear DG632 router http config | 17 | 0.008 |
http | GoAhead httpd | 17 | 0.008 |
http | Apache Tomcat | 17 | 0.008 |
http | VBrick DME v1.0 | 16 | 0.007 |
http | Unreal Tournament http admin | 16 | 0.007 |
http | Sun Java System Application Server httpd | 16 | 0.007 |
http-proxy | F5 BIG-IP load balancer http proxy | 16 | 0.007 |
http | Power MOD by emits.eu | 16 | 0.007 |
http | Maipu-Webs | 16 | 0.007 |
http | IMail_Monitor | 16 | 0.007 |
http | HomeSeer Home Control Web Interface | 16 | 0.007 |
http | BlueIris-HTTP | 16 | 0.007 |
http | APC SmartUPS http config | 16 | 0.007 |
secure-socket | CA Secure Socket Adapter | 15 | 0.007 |
http | WebLogic httpd | 15 | 0.007 |
http | TeamViewer httpd | 15 | 0.007 |
http-proxy | ziproxy http proxy | 15 | 0.007 |
http | Miktotik Dude network monitor | 15 | 0.007 |
http | D-Link DIR-645 WAP http config | 15 | 0.007 |
ftp | Pure-FTPd | 15 | 0.007 |
rtsp | Apple AirTunes rtspd | 14 | 0.006 |
http | QNAP TS-219, TS-239, or TS-509 NAS http config | 14 | 0.006 |
http | Motion Camera httpd | 14 | 0.006 |
http | i3micro VRG VoIP adapter http config | 14 | 0.006 |
http | go1984 httpd | 14 | 0.006 |
http | GlassFish Server Open Source Edition 3.1.1 | 14 | 0.006 |
http | Fortinet VPN/firewall http config | 14 | 0.006 |
http | D-Link web camera http config | 14 | 0.006 |
http | D-Link G604T DSL router http config | 14 | 0.006 |
http | DI-LB604 HTTP Server | 14 | 0.006 |
http | BOSSERV | 14 | 0.006 |
http | Aterm(HT) | 14 | 0.006 |
http | AquaController 4.0 | 14 | 0.006 |
http | alphapd | 14 | 0.006 |
smtp | Microsoft Exchange smtpd | 13 | 0.006 |
http | Wireless Network Camera | 13 | 0.006 |
http | TP-LINK WR741N WAP http config | 13 | 0.006 |
http | TP-LINK WR1043ND WAP http config | 13 | 0.006 |
http | Tomato WAP firmware httpd | 13 | 0.006 |
http | Network Associates ePolicy Orchestrator | 13 | 0.006 |
http | Netgear WGR614v8 WAP http config | 13 | 0.006 |
http | NetEVI | 13 | 0.006 |
http | Linux | 13 | 0.006 |
http | Linksys WAG200G WAP http config | 13 | 0.006 |
http | HTTPsrv | 13 | 0.006 |
http | fec | 13 | 0.006 |
http | D-Link DI-604 http config | 13 | 0.006 |
http | ConquerCam | 13 | 0.006 |
http | AudioCodes Mediant 200 VoIP gateway http config | 13 | 0.006 |
http | Apache Embedded Server | 13 | 0.006 |
socks5 | 12 | 0.005 | |
smtp | 12 | 0.005 | |
http | WindRiver-WebServer | 12 | 0.005 |
http | WebServer | 12 | 0.005 |
http | WEBrick httpd | 12 | 0.005 |
http | webcam 7 httpd | 12 | 0.005 |
http | Vivotek Network Camera | 12 | 0.005 |
http | TRMB | 12 | 0.005 |
http-proxy | EZproxy web proxy | 12 | 0.005 |
http | NetPort httpd | 12 | 0.005 |
http | gen5th | 12 | 0.005 |
http | D-Link DFL-800 or DFL-860 firewall http config | 12 | 0.005 |
http | AIM HTTP | 12 | 0.005 |
vnc | 11 | 0.005 | |
ssh | MikroTik RouterOS sshd | 11 | 0.005 |
soap | gSOAP soap | 11 | 0.005 |
http | ZyXEL Prestige webadmin | 11 | 0.005 |
http | WSGIServer | 11 | 0.005 |
http | TAC Xenta 511 programmable logic controller httpd | 11 | 0.005 |
http | Sun ONE Web Server | 11 | 0.005 |
http | Pramati Server | 11 | 0.005 |
http | Oracle WebLogic Server | 11 | 0.005 |
http | Netgear WNR3500v2 WAP http config | 11 | 0.005 |
http | Netgear DG834N router http config | 11 | 0.005 |
http | iCanWebServer | 11 | 0.005 |
http | FRITZ!Box http config | 11 | 0.005 |
http | FitNesse httpd | 11 | 0.005 |
http | Dahua-HTTP Server | 11 | 0.005 |
http | Boa | 11 | 0.005 |
upnp | Portable SDK for UPnP devices | 10 | 0.005 |
java-rmi | Java RMI | 10 | 0.005 |
http | XWeb 1.0 | 10 | 0.005 |
http | wg_httpd | 10 | 0.005 |
http | Western Digital My Book http config | 10 | 0.005 |
http | Web-Based Enterprise Management CIM serverOpenPegasus WBEM httpd | 10 | 0.005 |
http | Satel ETHM-1 alarm control unit | 10 | 0.005 |
http-proxy | MultiCertify http proxy | 10 | 0.005 |
http | Oracle Application Server 10g httpd | 10 | 0.005 |
http | Netgear FS728TP switch http config | 10 | 0.005 |
http | monit httpd | 10 | 0.005 |
http | ImagiaTek | 10 | 0.005 |
http | Chain Cast support service | 10 | 0.005 |
http | BlueIris | 10 | 0.005 |
http | Axigen webmail httpd | 10 | 0.005 |
http | Abyss httpd | 10 | 0.005 |