~74 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
http | SafeNet Sentinel Keys License Monitor httpd | 23107 | 30.82 |
no match | -/- | 12423 | 16.57 |
socks5 | 10154 | 13.544 | |
http | PDR-M800 | 4554 | 6.074 |
http | SentinelKeysServer | 3665 | 4.888 |
irc | Dancer ircd | 3503 | 4.672 |
http | SonicWALL | 3320 | 4.428 |
http | 3264 | 4.354 | |
chat | AIM or ICQ server | 1430 | 1.907 |
http | Apache | 947 | 1.263 |
http | lighttpd | 922 | 1.23 |
http | Microsoft IIS httpd | 810 | 1.08 |
http | AIM | 647 | 0.863 |
telnet | 361 | 0.482 | |
http | WebLogic httpd | 326 | 0.435 |
http | Apache Tomcat/Coyote JSP engine | 298 | 0.397 |
telnet | Dreambox DVB telnetd | 262 | 0.349 |
ssh | Cisco SSH | 240 | 0.32 |
ssh | OpenSSH | 207 | 0.276 |
http | Boa HTTPd | 190 | 0.253 |
http | thttpd | 187 | 0.249 |
vnc | VNC | 186 | 0.248 |
telnet | Enterasys XSR Security Router telnetd | 180 | 0.24 |
soap | gSOAP soap | 166 | 0.221 |
http | Netwave IP camera http config | 166 | 0.221 |
http | Oracle WebLogic Server | 145 | 0.193 |
http | DrcomServer1.0 | 109 | 0.145 |
shoutcast | SHOUTcast server | 106 | 0.141 |
ssl | TLS | 104 | 0.139 |
irc | Unreal ircd | 101 | 0.135 |
ssh | 91 | 0.121 | |
telnet | BSD-derived telnetd | 88 | 0.117 |
rtsp | 86 | 0.115 | |
http | nginx | 83 | 0.111 |
http | GoAhead-Webs | 81 | 0.108 |
http | Avtech AVN801 network camera | 80 | 0.107 |
http | Mobotix Camera http config | 75 | 0.1 |
ftp | vsftpd | 73 | 0.097 |
http | wg_httpd | 70 | 0.093 |
http | GoAhead-Webs embedded httpd | 66 | 0.088 |
vnc | RealVNC Enterprise | 55 | 0.073 |
http | mini_httpd | 53 | 0.071 |
http-proxy | Squid http proxy | 50 | 0.067 |
ftp | Microsoft ftpd | 46 | 0.061 |
telnet | Cisco telnetd | 43 | 0.057 |
http | uc-httpd | 33 | 0.044 |
http | Hikvision-Webs | 33 | 0.044 |
http | Microsoft HTTPAPI httpd | 31 | 0.041 |
vnc | RealVNC Personal | 28 | 0.037 |
http | ccu_httpd | 28 | 0.037 |
http | Secure Computing Sidewinder firewall http admin | 27 | 0.036 |
http | GoAhead-Webs httpd | 26 | 0.035 |
http | Vivotek Network Camera | 25 | 0.033 |
http | Mbedthis-Appweb | 24 | 0.032 |
ftp | 24 | 0.032 | |
http | Caucho Resin JSP engine | 23 | 0.031 |
mysql | MySQL | 22 | 0.029 |
http | Jetty | 22 | 0.029 |
http | Cross Web Server | 22 | 0.029 |
http | Allegro RomPager | 22 | 0.029 |
vnc | 20 | 0.027 | |
http | MiniServ | 20 | 0.027 |
http | Webs | 18 | 0.024 |
http | uTorrent WebUI | 18 | 0.024 |
http | NUVICO | 17 | 0.023 |
http | Gadspot/Avtech AV787 webcam http config | 17 | 0.023 |
http | D-Link DIR-300 WAP http admin | 17 | 0.023 |
http | CherryPy httpd | 17 | 0.023 |
http | WYM httpd | 16 | 0.021 |
ftp | vsftpd (before 2.0.8) or WU-FTPD | 16 | 0.021 |
telnet | Linux telnetd | 15 | 0.02 |
smtp | Microsoft ESMTP | 15 | 0.02 |
http | Wise-httpd | 15 | 0.02 |
ftp | FileZilla ftpd | 15 | 0.02 |
http-proxy | CCProxy http proxy | 14 | 0.019 |
http | Mongrel httpd | 14 | 0.019 |
damewaremr | DameWare Mini Remote Control | 14 | 0.019 |
vnc-http | Ultr@VNC | 13 | 0.017 |
http | DVR Systems webcam http interface | 13 | 0.017 |
http | AvantiHTTPd | 13 | 0.017 |
http | Thin | 12 | 0.016 |
http | Rex media encoder http config | 12 | 0.016 |
http | RemotelyAnywhere remote PC management httpd | 12 | 0.016 |
http | Indy | 12 | 0.016 |
http | Icecast streaming media server | 12 | 0.016 |
xml | 11 | 0.015 | |
http | TornadoServer | 11 | 0.015 |
http-proxy | Haproxy http proxy | 11 | 0.015 |
http | AIM HTTP | 11 | 0.015 |
ftp | Pure-FTPd | 11 | 0.015 |
ftp | ProFTPD | 11 | 0.015 |
http | TwistedWeb httpd | 10 | 0.013 |
http-proxy | F5 BIG-IP load balancer http proxy | 10 | 0.013 |
http-proxy | EZproxy web proxy | 10 | 0.013 |
http | GeoVision GeoHttpServer for webcams | 10 | 0.013 |
http | ESET NOD32 anti-virus update httpd | 10 | 0.013 |