~90 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Count |
Percent |
|---|---|---|---|
| ssl/pop3 | Cyrus pop3sd | 26890 | 29.655 |
| ssl | TLS | 21264 | 23.451 |
| no match | -/- | 12346 | 13.616 |
| pop3 | Cyrus pop3d | 6891 | 7.6 |
| psql | Pervasive.SQL Server - Relational Engine | 4965 | 5.476 |
| http | 3894 | 4.294 | |
| http | SonicWALL | 3404 | 3.754 |
| chat | AIM or ICQ server | 1613 | 1.779 |
| http | lighttpd | 1168 | 1.288 |
| pop3 | MailEnable POP3 Server | 907 | 1.0 |
| http-proxy | Squid http proxy | 864 | 0.953 |
| http | AIM | 644 | 0.71 |
| pop3 | hMailServer pop3d | 541 | 0.597 |
| pop3 | Qpopper pop3d | 399 | 0.44 |
| http | Apache | 366 | 0.404 |
| msdtc | Microsoft Distributed Transaction Coordinator | 339 | 0.374 |
| ssh | OpenSSH | 311 | 0.343 |
| http | Microsoft IIS httpd | 284 | 0.313 |
| pop3 | Citadel pop3d | 218 | 0.24 |
| smtp | 144 | 0.159 | |
| pop3 | SmarterMail pop3d | 138 | 0.152 |
| http | thttpd | 120 | 0.132 |
| pop3 | CommuniGate Pro | 114 | 0.126 |
| http | DrcomServer1.0 | 110 | 0.121 |
| smtp | Microsoft Exchange smtpd | 104 | 0.115 |
| http | Apache Tomcat/Coyote JSP engine | 87 | 0.096 |
| ssh | 86 | 0.095 | |
| http | Secure Computing Sidewinder firewall http admin | 86 | 0.095 |
| http | Netwave IP camera http config | 83 | 0.092 |
| http | GoAhead-Webs | 80 | 0.088 |
| http | Avtech AVN801 network camera | 68 | 0.075 |
| tcpwrapped | BSD TCP Wrappers | 63 | 0.069 |
| http | CCProxy | 61 | 0.067 |
| pop3 | 58 | 0.064 | |
| pop3 | qmail pop3d | 55 | 0.061 |
| imap | Courier Imapd | 51 | 0.056 |
| telnet | 50 | 0.055 | |
| pop3 | Dovecot pop3d | 50 | 0.055 |
| pop3 | Google Gmail pop3d | 48 | 0.053 |
| http | PDR-M800 | 48 | 0.053 |
| http | Boa HTTPd | 46 | 0.051 |
| vnc | VNC | 45 | 0.05 |
| http | mini_httpd | 42 | 0.046 |
| pop3 | Zimbra Collabration Suite pop3d | 41 | 0.045 |
| smtp | Postfix smtpd | 39 | 0.043 |
| openvpn | OpenVPN | 37 | 0.041 |
| ssh | Dropbear sshd | 36 | 0.04 |
| pop3 | Microsoft Exchange 2007-2010 pop3d | 34 | 0.037 |
| pop3 | Microsoft Exchange 2003 pop3d | 33 | 0.036 |
| smtp | Microsoft ESMTP | 32 | 0.035 |
| http | HTTPD 1.0 | 31 | 0.034 |
| socks-proxy | CCProxy socks proxy | 29 | 0.032 |
| pop3 | MDaemon pop3d | 29 | 0.032 |
| http | uc-httpd | 24 | 0.026 |
| ftp | Microsoft ftpd | 24 | 0.026 |
| smtp | Sendmail | 23 | 0.025 |
| ftp | Serv-U ftpd | 21 | 0.023 |
| http | Hikvision-Webs | 20 | 0.022 |
| smtp | MailEnable smptd | 19 | 0.021 |
| http | nginx | 18 | 0.02 |
| http | Mbedthis-Appweb | 18 | 0.02 |
| pop3 | DBMail pop3d | 17 | 0.019 |
| mysql | MySQL | 17 | 0.019 |
| http | Gadspot/Avtech AV787 webcam http config | 17 | 0.019 |
| ftp | FileZilla ftpd | 17 | 0.019 |
| ftp | ProFTPD | 16 | 0.018 |
| pop3 | ipop3d | 15 | 0.017 |
| imap | MailEnable imapd | 14 | 0.015 |
| http | Cross Web Server | 14 | 0.015 |
| ftp | 14 | 0.015 | |
| http | uTorrent WebUI | 13 | 0.014 |
| http | GoAhead-Webs embedded httpd | 13 | 0.014 |
| http | DVR Systems webcam http interface | 13 | 0.014 |
| ssl | multi-vendor SSL | 12 | 0.013 |
| ftp | vsftpd (before 2.0.8) or WU-FTPD | 12 | 0.013 |
| http | Microsoft HTTPAPI httpd | 11 | 0.012 |
| ftp | Pure-FTPd | 11 | 0.012 |
| smtp | Symantec Enterprise Security manager smtpd | 10 | 0.011 |
| pop3 | qpopper | 10 | 0.011 |
| pop3-proxy | Zarafa pop3 proxy | 10 | 0.011 |
| pop3 | Arvixe pop3d | 10 | 0.011 |
| http | RemotelyAnywhere remote PC management httpd | 10 | 0.011 |
| http-proxy | F5 BIG-IP load balancer http proxy | 10 | 0.011 |
| http | GeoVision GeoHttpServer for webcams | 10 | 0.011 |
| http | AIM HTTP | 10 | 0.011 |
| directconnect | Direct Connect P2P | 10 | 0.011 |