~32 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Count |
Percent |
|---|---|---|---|
| http | 4750 | 14.839 | |
| telnet | Cisco router telnetd | 3872 | 12.096 |
| irc | Dancer ircd | 3729 | 11.649 |
| http | SonicWALL | 3558 | 11.115 |
| upnp | TwonkyMedia UPnP | 2379 | 7.432 |
| no match | -/- | 2325 | 7.263 |
| chat | AIM or ICQ server | 1610 | 5.03 |
| telnet | Cisco IOS telnetd | 1223 | 3.821 |
| http | Microsoft IIS httpd | 968 | 3.024 |
| http | lighttpd | 956 | 2.986 |
| telnet | 830 | 2.593 | |
| http | AIM | 676 | 2.112 |
| http | Apache | 591 | 1.846 |
| telnet | Cisco 1721 router telnetd | 481 | 1.503 |
| shoutcast | SHOUTcast server | 355 | 1.109 |
| http | Secure Computing Sidewinder firewall http admin | 220 | 0.687 |
| http | Jetty | 178 | 0.556 |
| http | Apache Tomcat/Coyote JSP engine | 172 | 0.537 |
| http | Netwave IP camera http config | 160 | 0.5 |
| http | PunkBuster http config | 122 | 0.381 |
| http | MMBD-PUB | 122 | 0.381 |
| http | DrcomServer1.0 | 116 | 0.362 |
| tor-socks | Tor SOCKS proxy | 108 | 0.337 |
| http | GoAhead-Webs | 83 | 0.259 |
| http | Boa HTTPd | 82 | 0.256 |
| ssh | 80 | 0.25 | |
| http | mini_httpd | 80 | 0.25 |
| ssh | OpenSSH | 77 | 0.241 |
| vnc | VNC | 74 | 0.231 |
| http | Windows NT | 73 | 0.228 |
| http | Microsoft HTTPAPI httpd | 72 | 0.225 |
| http | Avtech AVN801 network camera | 69 | 0.216 |
| http | thttpd | 65 | 0.203 |
| ssl | TLS | 53 | 0.166 |
| http-proxy | Squid http proxy | 50 | 0.156 |
| http | PDR-M800 | 44 | 0.137 |
| http | uc-httpd | 43 | 0.134 |
| http | Tiny WebServer | 43 | 0.134 |
| http | Allegro RomPager | 41 | 0.128 |
| http | CherryPy httpd | 40 | 0.125 |
| http | RedCoronaEmbedded | 38 | 0.119 |
| http | nginx | 38 | 0.119 |
| http | D-Link DIR-300 WAP http admin | 30 | 0.094 |
| http | GoAhead-Webs httpd | 28 | 0.087 |
| remoting | MS .NET Remoting services | 25 | 0.078 |
| http | Icecast streaming media server | 25 | 0.078 |
| ftp | Microsoft ftpd | 24 | 0.075 |
| http | uTorrent WebUI | 23 | 0.072 |
| http | Oracle Application Server 10g httpd | 23 | 0.072 |
| http | Mbedthis-Appweb | 23 | 0.072 |
| http | GoAhead-Webs embedded httpd | 22 | 0.069 |
| redis | Redis key-value store | 21 | 0.066 |
| http | Hikvision-Webs | 20 | 0.062 |
| http | IM | 19 | 0.059 |
| http | Gadspot/Avtech AV787 webcam http config | 19 | 0.059 |
| mysql | MySQL | 18 | 0.056 |
| http | Cross Web Server | 18 | 0.056 |
| secure-socket | CA Secure Socket Adapter | 17 | 0.053 |
| http | TwistedWeb httpd | 17 | 0.053 |
| http | Linux | 17 | 0.053 |
| ftp | 17 | 0.053 | |
| http | DVR Systems webcam http interface | 16 | 0.05 |
| ssh | Bitvise WinSSHD | 15 | 0.047 |
| smtp | Microsoft ESMTP | 15 | 0.047 |
| http | Samsung UE55D7000 TV http config | 15 | 0.047 |
| vnc | RealVNC Enterprise | 14 | 0.044 |
| http | WebLogic httpd | 14 | 0.044 |
| http | Mobotix Camera http config | 14 | 0.044 |
| http | Microsoft IIS | 14 | 0.044 |
| upnp | Portable SDK for UPnP devices | 13 | 0.041 |
| http-proxy | F5 BIG-IP load balancer http proxy | 12 | 0.037 |
| http-proxy | EZproxy web proxy | 12 | 0.037 |
| http | bywifi | 12 | 0.037 |
| ftp | ProFTPD | 12 | 0.037 |
| http | GeoVision GeoHttpServer for webcams | 11 | 0.034 |
| http | AIM HTTP | 11 | 0.034 |
| http | RemotelyAnywhere remote PC management httpd | 10 | 0.031 |
| http | QNAP TS-219P NAS http config | 10 | 0.031 |
| http | Oracle-Application-Server-11g | 10 | 0.031 |
| ftp | Serv-U ftpd | 10 | 0.031 |
| ftp | FileZilla ftpd | 10 | 0.031 |