~440 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename  |
Product |
Version | Count |
Percent |
|---|---|---|---|---|
| pop3pw | poppassd | 375794 | 85.257 | |
| no match | -/- | -/- | 10998 | 2.495 |
| http | 9580 | 2.173 | ||
| pop3pw | ApplePasswordServer pop3 password change daemon | 10.6.0.0 | 8106 | 1.839 |
| pop3pw | ApplePasswordServer pop3 password change daemon | 10.7.0.0 | 3991 | 0.905 |
| http | SonicWALL | 3654 | 0.829 | |
| pop3pw | ApplePasswordServer pop3 password change daemon | 10.5.0.1 | 2476 | 0.562 |
| chat | AIM or ICQ server | 2192 | 0.497 | |
| pop3pw | poppassd | 1.2 | 1918 | 0.435 |
| pop3pw | poppassd | 1.0.4 | 1342 | 0.304 |
| pop3pw | poppassd | 1.8.5 | 1132 | 0.257 |
| pop3pw | ApplePasswordServer pop3 password change daemon | 10.1.0.0 | 1091 | 0.248 |
| pop3pw | SINA pop3pw | 7.00-1.3 | 803 | 0.182 |
| pop3pw | Mercury/32 poppass service | 757 | 0.172 | |
| ssl | SSLv3 | 755 | 0.171 | |
| pop3pw | ApplePasswordServer pop3 password change daemon | 10.4.5.0 | 740 | 0.168 |
| pop3pw | Ipswitch IMail pop3 password change daemon | 8.22 | 733 | 0.166 |
| http | Apache | 2.2.8 | 718 | 0.163 |
| http | AIM | 1.0 | 598 | 0.136 |
| pop3pw | ModusMail poppassd | 560 | 0.127 | |
| pop3pw | Ipswitch IMail pop3 password change daemon | 8.15 | 518 | 0.118 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 4.2.4 | 504 | 0.114 |
| pop3pw | Ipswitch IMail pop3 password change daemon | 7.07 | 442 | 0.1 |
| http | lighttpd | 1.4.29 | 427 | 0.097 |
| http | lighttpd | 1.4.19 | 402 | 0.091 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 4.1.8 | 389 | 0.088 |
| pop3pw | Courierpassd pop3 password change daemon | 1.0.1 | 342 | 0.078 |
| pop3pw | poppassd | 1.6a | 329 | 0.075 |
| pop3pw | Courierpassd pop3 password change daemon | 1.1.0-RC1 | 298 | 0.068 |
| pop3pw | Ipswitch IMail pop3 password change daemon | 8.05 | 294 | 0.067 |
| pop3pw | Courierpassd pop3 password change daemon | 1.1.2 | 251 | 0.057 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.4.5 | 240 | 0.054 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.4.4 | 240 | 0.054 |
| http | Netwave IP camera http config | 199 | 0.045 | |
| http | Microsoft IIS httpd | 6.0 | 199 | 0.045 |
| tcpwrapped | BSD TCP Wrappers | 186 | 0.042 | |
| pop3pw | Ipswitch IMail pop3 password change daemon | 8.21 | 173 | 0.039 |
| pop3pw | Atrium Software's Mercur pop3pw | 168 | 0.038 | |
| pop3pw | poppassd | 1.8-ceti | 166 | 0.038 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.4.0 | 163 | 0.037 |
| http | Microsoft IIS httpd | 154 | 0.035 | |
| pop3pw | CommuniGate Pro pop3 password change daemon | 4.2.10 | 153 | 0.035 |
| http | Microsoft HTTPAPI httpd | 2.0 | 137 | 0.031 |
| http | GoAhead-Webs httpd | 131 | 0.03 | |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.2.16 | 127 | 0.029 |
| pop3pw | Post.Office pop3pw | 3.5.3 | 126 | 0.029 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.4.1 | 122 | 0.028 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.1.16 | 122 | 0.028 |
| http | a_63 | 121 | 0.027 | |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.3.12 | 104 | 0.024 |
| pop3pw | SLMail pop3pw | 103 | 0.023 | |
| ssh | 98 | 0.022 | ||
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.4.3 | 87 | 0.02 |
| pop3pw | ApplePasswordServer pop3 password change daemon | 10.5.0.0 | 86 | 0.02 |
| http | Apache Tomcat/Coyote JSP engine | 1.1 | 86 | 0.02 |
| pop3pw | Post.Office pop3pw | 3.8.4 | 79 | 0.018 |
| pop3pw | Ipswitch IMail pop3 password change daemon | 8.20 | 79 | 0.018 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.4.6 | 79 | 0.018 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.2.20 | 78 | 0.018 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.3.5 | 77 | 0.017 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.2.14 | 77 | 0.017 |
| http | Avtech AVN801 network camera | 1.0 | 77 | 0.017 |
| http | Apache | 66 | 0.015 | |
| http | thttpd | 2.24 | 64 | 0.015 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.1.13 | 63 | 0.014 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.2.12 | 61 | 0.014 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.4.2 | 59 | 0.013 |
| pop3pw | ApplePasswordServer pop3 password change daemon | 10.8.0.0 | 59 | 0.013 |
| pop3pw | Ipswitch IMail pop3 password change daemon | 8.00 | 58 | 0.013 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.3.13 | 58 | 0.013 |
| telnet | 57 | 0.013 | ||
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.1.9 | 57 | 0.013 |
| vnc | VNC | 56 | 0.013 | |
| http | PDR-M800 | 1.0 | 51 | 0.012 |
| http | thttpd | 50 | 0.011 | |
| pop3pw | poppassd | 1.8.1 | 49 | 0.011 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.1.12 | 48 | 0.011 |
| http | mini_httpd | 1.19 19dec2003 | 48 | 0.011 |
| pop3pw | Ipswitch IMail pop3 password change daemon | 8.01 | 47 | 0.011 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.3.8 | 47 | 0.011 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.2.3 | 44 | 0.01 |
| http | Boa HTTPd | 0.94.14rc21 | 42 | 0.01 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.2.18 | 38 | 0.009 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 4.3.12 | 38 | 0.009 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 4.3.9 | 37 | 0.008 |
| pop3pw | Courierpassd pop3 password change daemon | 0.30 | 36 | 0.008 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.2.8 | 36 | 0.008 |
| arcserve | ARCserve Discovery | 36 | 0.008 | |
| http | Apache | 2.2.14 | 35 | 0.008 |
| pop3pw | Ipswitch IMail pop3 password change daemon | 4.10 | 34 | 0.008 |
| http | Mbedthis-Appweb | 2.0.4 | 34 | 0.008 |
| http | Hikvision-Webs | 33 | 0.007 | |
| http | Apache | 2.2.3 | 33 | 0.007 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.2.13 | 32 | 0.007 |
| pop3pw | Ipswitch IMail pop3 password change daemon | 6.06 | 30 | 0.007 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.2.11 | 30 | 0.007 |
| ftp | Microsoft ftpd | 30 | 0.007 | |
| pop3pw | Post.Office pop3pw | 4.1.2.4 | 29 | 0.007 |
| pop3pw | Ipswitch IMail pop3 password change daemon | 8.10 | 29 | 0.007 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.3.9 | 28 | 0.006 |
| pop3pw | Ipswitch IMail pop3 password change daemon | 7.15 | 27 | 0.006 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.3.14 | 27 | 0.006 |
| http-proxy | Squid http proxy | 2.6.STABLE12 | 27 | 0.006 |
| pop3pw | Post.Office pop3pw | 3.1.2 | 26 | 0.006 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.2.9 | 26 | 0.006 |
| http | thttpd | 2.25b | 26 | 0.006 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.3.10 | 25 | 0.006 |
| pop3pw | Ipswitch IMail pop3 password change daemon | 4.06 | 24 | 0.005 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.2.10 | 24 | 0.005 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 4.2.8 | 24 | 0.005 |
| pop3pw | Ipswitch IMail pop3 password change daemon | 4.07 | 23 | 0.005 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.0.13 | 23 | 0.005 |
| http-proxy | Squid http proxy | 2.7.STABLE9 | 23 | 0.005 |
| http | Boa HTTPd | 0.94.13 | 23 | 0.005 |
| pop3pw | Ipswitch IMail pop3 password change daemon | 5.04 | 22 | 0.005 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.3.2 | 22 | 0.005 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.2.2 | 22 | 0.005 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.2.19 | 22 | 0.005 |
| http | Microsoft IIS httpd | 7.5 | 22 | 0.005 |
| http | Apache | 2.2.22 | 22 | 0.005 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.3.11 | 21 | 0.005 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.1.14 | 21 | 0.005 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.0.9 | 21 | 0.005 |
| http | lighttpd | 21 | 0.005 | |
| http | Apache | 2.2.16 | 21 | 0.005 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.0.14 | 20 | 0.005 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 4.2.6 | 20 | 0.005 |
| http | uc-httpd | 1.0.0 | 20 | 0.005 |
| http | GoAhead-Webs | 20 | 0.005 | |
| http | Apache | 2.2.9 | 20 | 0.005 |
| pop3pw | poppassd | 4.0.4 | 19 | 0.004 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.4c2 | 19 | 0.004 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.1.11 | 19 | 0.004 |
| pop3pw | poppassd | 1.8.4 | 18 | 0.004 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.3.7 | 18 | 0.004 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.1.7 | 18 | 0.004 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 3.5.2 | 18 | 0.004 |
| pop3pw | Ipswitch IMail pop3 password change daemon | 7.13 | 17 | 0.004 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.4c1 | 17 | 0.004 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.1.10 | 17 | 0.004 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 3.4.7 | 17 | 0.004 |
| http | GeoVision GeoHttpServer for webcams | 17 | 0.004 | |
| http | dcs-lig-httpd | 17 | 0.004 | |
| http | Cross Web Server | 17 | 0.004 | |
| pop3pw | Stalker Mail Server password change daemon | 1.8b9d14 | 16 | 0.004 |
| pop3pw | Ipswitch IMail pop3 password change daemon | 8.02 | 16 | 0.004 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.1.8 | 16 | 0.004 |
| http | thttpd | 2.24 26oct2003 | 16 | 0.004 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 5.3.15 | 15 | 0.003 |
| pop3pw | CommuniGate Pro pop3 password change daemon | 4.3.7 | 15 | 0.003 |
| http | Microsoft IIS httpd | 7.0 | 15 | 0.003 |
| http | lighttpd | 1.4.20 | 15 | 0.003 |
| http | DVR Systems webcam http interface | 15 | 0.003 | |
| ftp | 15 | 0.003 |