~398 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Version | Info | OS | Devicetype | Count | Percent |
---|---|---|---|---|---|---|---|
telnet | Cisco router telnetd | IOS | router | 101051 | 25.332 | ||
telnet | Cisco IOS telnetd | IOS | switch | 60090 | 15.064 | ||
telnet | 51600 | 12.935 | |||||
telnet | Cisco 1721 router telnetd | IOS | router | 45414 | 11.385 | ||
no match | 41742 | 10.464 | |||||
http | Microsoft HTTPAPI httpd | 2.0 | SSDP/UPnP | Windows | 13921 | 3.49 | |
ssl | TLSv1 | 9071 | 2.274 | ||||
http | 8935 | 2.24 | |||||
http | Microsoft IIS httpd | 6720 | 1.685 | ||||
irc | Dancer ircd | 4095 | 1.027 | ||||
ssl | SSLv3 | 3584 | 0.898 | ||||
http | SonicWALL | firewall | 3429 | 0.86 | |||
http | Apache Tomcat/Coyote JSP engine | 1.1 | 3279 | 0.822 | |||
chat | AIM or ICQ server | 2558 | 0.641 | ||||
eggdrop | Eggdrop IRC bot console | 1.6.21 | 2251 | 0.564 | |||
http | MiniServ | 0.01 | Webmin httpd | 1257 | 0.315 | ||
http | libwww-perl-daemon httpd | 1.36 | 1184 | 0.297 | |||
http | MiniServ | 1.580 | Webmin httpd | 1016 | 0.255 | ||
eggdrop | Eggdrop IRC bot console | 1.6.20 | 1012 | 0.254 | |||
http | Boa HTTPd | 0.94.14rc21 | 1006 | 0.252 | |||
http | Medusa httpd | 1.12 | Supervisor process manager | 999 | 0.25 | ||
http | lighttpd | 1.4.28 | 979 | 0.245 | |||
http | D-Link DIR-300 WAP http admin | WAP | 958 | 0.24 | |||
http | Hikvision-Webs | 773 | 0.194 | ||||
http | Netwave IP camera http config | webcam | 755 | 0.189 | |||
telnet | Cisco LocalDirector telnetd | load balancer | 752 | 0.189 | |||
http | Allegro RomPager | 4.30b3 | ZyXEL ES-2024PWR switch http config | switch | 634 | 0.159 | |
http | GoAhead-Webs httpd | 530 | 0.133 | ||||
http | AIM | 1.0 | 528 | 0.132 | |||
http | lighttpd | 1.4.29 | 485 | 0.122 | |||
vnc | VNC | protocol 3.8 | 476 | 0.119 | |||
http | Apache | 2.2.14 | (Unix) mod_ssl/2.2.14 OpenSSL/0.9.8l mod_perl/2.0.4 Perl/v5.10.0 | 468 | 0.117 | ||
http | uc-httpd | 1.0.0 | 464 | 0.116 | |||
http | lighttpd | 1.4.19 | 450 | 0.113 | |||
http | WebLogic httpd | 447 | 0.112 | ||||
shoutcast-publishing | SHOUTcast publishing port | 435 | 0.109 | ||||
http | Cross Web Server | 407 | 0.102 | ||||
http | Avtech AVN801 network camera | 1.0 | UPnP 1.0 | webcam | 376 | 0.094 | |
ssl | TLS | 1.0 | 363 | 0.091 | |||
http | Businesspass-Passepartout | 362 | 0.091 | ||||
http | MiniServ | 1.570 | Webmin httpd | 316 | 0.079 | ||
http | Boa HTTPd | 0.94.13 | 306 | 0.077 | |||
http | thttpd | 2.25b | 299 | 0.075 | |||
remoting | MS .NET Remoting services | 297 | 0.074 | ||||
http | Microsoft IIS httpd | 6.0 | Windows | 288 | 0.072 | ||
http | Tinyweb httpd | 1.93 | Windows | 284 | 0.071 | ||
http | MiniServ | 1.590 | Webmin httpd | 269 | 0.067 | ||
http | GeoVision GeoHttpServer for webcams | webcam | 265 | 0.066 | |||
http | Indy | 10.1.5 | 257 | 0.064 | |||
http | Apache | 2.2.3 | 255 | 0.064 | |||
http | Apache | 240 | 0.06 | ||||
telnet | Usually a Cisco/3com switch | IOS | switch | 233 | 0.058 | ||
http | Play | 231 | 0.058 | ||||
http | MiniServ | 1.550 | Webmin httpd | 231 | 0.058 | ||
http | thttpd | 226 | 0.057 | ||||
http | mini_httpd | 1.19 19dec2003 | 212 | 0.053 | |||
vnc | RealVNC Enterprise | protocol 4.1 | 207 | 0.052 | |||
http | Mxhttp 1.0 | 198 | 0.05 | ||||
http | eHTTP | 2.0 | HP ProCurve Switch 2524 http config | 176 | 0.044 | ||
upnp | Microsoft Windows UPnP | Windows | 172 | 0.043 | |||
http | Tiny WebServer | OpenSimulator http config | 171 | 0.043 | |||
ssh | OpenSSH | 4.3 | protocol 2.0 | 167 | 0.042 | ||
http | Squeezebox Server (7.5.1 - 30836) | 165 | 0.041 | ||||
ftp | Microsoft ftpd | Windows | 165 | 0.041 | |||
ssh | protocol 1.5 | 161 | 0.04 | ||||
http | Veritas backup exec continuous protection httpd | 160 | 0.04 | ||||
http | Medusa httpd | 2118 | Supervisor process manager | 158 | 0.04 | ||
telnet | corporate network! | 153 | 0.038 | ||||
http | httpd 1.1 | 148 | 0.037 | ||||
upnp | TwonkyMedia UPnP | Linux 2.X.X; UPnP 1.0; pvConnect SDK 1.0; SDK 1.1 | Linux | 143 | 0.036 | ||
http | MiniServ | 1.530 | Webmin httpd | 135 | 0.034 | ||
http | WindWeb | 2.0 | 130 | 0.033 | |||
http | lighttpd | 1.4.23 | 130 | 0.033 | |||
http | lighttpd | 129 | 0.032 | ||||
http | DrcomServer1.0 | 125 | 0.031 | ||||
http | Boa httpd | 124 | 0.031 | ||||
telnet | PE-4 Router | 120 | 0.03 | ||||
http | Microsoft HTTPAPI httpd | 1.0 | SSDP/UPnP | Windows | 118 | 0.03 | |
http | lighttpd | 1.4.26 | 117 | 0.029 | |||
http | MiniServ | 1.560 | Webmin httpd | 116 | 0.029 | ||
http | Squeezebox Server (7.6.1 - 33110) | 114 | 0.029 | ||||
msdtc | Microsoft Distributed Transaction Coordinator | error | Windows | 112 | 0.028 | ||
http | Microsoft IIS httpd | 7.5 | Windows | 112 | 0.028 | ||
http | ImagiaTek | 111 | 0.028 | ||||
http | Apache | 1.3.31 | (Unix) | 104 | 0.026 | ||
arcserve | ARCserve Discovery | 104 | 0.026 | ||||
http | nginx | 0.8.54 | 103 | 0.026 | |||
http | lighttpd | 1.4.31 | 101 | 0.025 | |||
http | thttpd | Panasonic BB-HCM511 IP camera http config | 100 | 0.025 | |||
http | Netgear DG834 router http config | broadband router | 98 | 0.025 | |||
http | MX4J | 1.0 | OpenNMS http admin | 97 | 0.024 | ||
psql | Pervasive.SQL Server - Relational Engine | 96 | 0.024 | ||||
http | Apache | 2.2.3 | (CentOS) | 96 | 0.024 | ||
http | Logitech Media Server (7.7.2 - 33893) | 95 | 0.024 | ||||
ftp | 95 | 0.024 | |||||
http | Router | 94 | 0.024 | ||||
http | Apache | 2.2.14 | 94 | 0.024 | |||
telnet | Linux telnetd | Linux | 92 | 0.023 | |||
rtsp | 90 | 0.023 | |||||
http | VideoLAN Server streaming media | Cougar 4.1.0.3921 | 90 | 0.023 | |||
http | Oracle WebLogic Server | Servlet 2.5; JSP 2.1 | 90 | 0.023 | |||
http | Jetty | 8.y.z-SNAPSHOT | 90 | 0.023 | |||
http | AvantiHTTPd | 1.0.2_0.9.7_0.9 | 90 | 0.023 | |||
http | Jetty | 6.1.19 | 89 | 0.022 | |||
http | nginx | 86 | 0.022 | ||||
http | Apache | SSL-only mode | 85 | 0.021 | |||
time | 32 bits | 83 | 0.021 | ||||
http-proxy | Squid http proxy | 83 | 0.021 | ||||
http | DVR Systems webcam http interface | webcam | 83 | 0.021 | |||
http | Jetty | 6.0.2 | 82 | 0.021 | |||
xml | 81 | 0.02 | |||||
http | Secure Computing Sidewinder firewall http admin | firewall | 80 | 0.02 | |||
http | PDR-M800 | 1.0 | 80 | 0.02 | |||
telnet | cisco router pgp-gw3.ccl.ru | 79 | 0.02 | ||||
irc-proxy | ShroudBNC irc-proxy | 1.2 revision 1080 | 76 | 0.019 | |||
http | Panasonic webcam http config | webcam | 75 | 0.019 | |||
http | Microsoft IIS httpd | 5.0 | Windows | 74 | 0.019 | ||
http | Apache | 1.3.31 | 73 | 0.018 | |||
http | thttpd | 2.19-MX Jul 1 2010 | WAP | 72 | 0.018 | ||
http | GoAhead-Webs embedded httpd | 72 | 0.018 | ||||
telnet | This Router | 71 | 0.018 | ||||
http | http server 1.0 | 71 | 0.018 | ||||
vnc | RealVNC Personal | protocol 4.0 | 69 | 0.017 | |||
http | GM Streaming Server httpd | webcam | 69 | 0.017 | |||
http | Mongrel httpd | 1.1.5 | 68 | 0.017 | |||
ssh | OpenSSH | 5.3p1 Debian 3ubuntu7 | Ubuntu Linux; protocol 2.0 | Linux | 67 | 0.017 | |
http-proxy | Ncat http proxy | Nmap 4.85BETA1 or later | 67 | 0.017 | |||
http | Apache | 2.2.20 | 67 | 0.017 | |||
http | Draytek Vigor ADSL router webadmin | broadband router | 66 | 0.017 | |||
http | HTTPsrv | 65 | 0.016 | ||||
http | Jetty | 6.1.25 | 64 | 0.016 | |||
http | Icecast streaming media server | 64 | 0.016 | ||||
vnc | VNC | protocol 3.6 | 62 | 0.016 | |||
http | lighttpd | 1.4.30 | 62 | 0.016 | |||
vnc | protocol 3 | 61 | 0.015 | ||||
http | Jetty | 7.4.2.v20110526 | 61 | 0.015 | |||
http | WYM httpd | 1.0 | 60 | 0.015 | |||
http | Mbedthis-Appweb | 2.0.4 | 60 | 0.015 | |||
http | thttpd | 2.20b 10oct00 | 59 | 0.015 | |||
http | lighttpd | 1.4.20 | 59 | 0.015 | |||
http | Allegro-Software-RomPager | 2.00 | 58 | 0.015 | |||
http | BaseHTTP | 0.3 Python | 57 | 0.014 | |||
http | OwnServer1.0 | 54 | 0.014 | ||||
http | Linux | 2.x.x | 54 | 0.014 | |||
http | Jetty | 8.0.y.z-SNAPSHOT | 53 | 0.013 | |||
http | Apache | 2.2.14 | (Ubuntu) | 53 | 0.013 | ||
upnp | TwonkyMedia UPnP | Linux 2.X.X; UPnP 1.0; pvConnect SDK 1.0 | Linux | 50 | 0.013 | ||
telnet | cisco router tusm-gw3.ccl.ru | 50 | 0.013 | ||||
http | Microsoft IIS httpd | 5.1 | Windows | 50 | 0.013 | ||
http | Gadspot/Avtech AV787 webcam http config | webcam | 50 | 0.013 | |||
http | Apache | 2.2.15 | (CentOS) | 50 | 0.013 | ||
telnet | Enterasys XSR Security Router telnetd | router | 49 | 0.012 | |||
ssh | SCS sshd | 2.0.13 | protocol 1.5 | 48 | 0.012 | ||
ssh | OpenSSH | 5.3 | protocol 2.0 | 48 | 0.012 | ||
ftp | vsftpd | 2.0.8 or later | 47 | 0.012 | |||
socks5 | 46 | 0.012 | |||||
http | ZNC IRC bouncer http config | 0.097 or later | 46 | 0.012 | |||
http | PunkBuster http config | Game: BC2 | 46 | 0.012 | |||
http | Transmission BitTorrent management httpd | 45 | 0.011 | ||||
http | thttpd | 2.25b 29dec2003 | 44 | 0.011 | |||
http | Oracle WebLogic Server | Servlet 2.4; JSP 2.0 | 44 | 0.011 | |||
http | dcs-lig-httpd | 44 | 0.011 | ||||
http | uTorrent WebUI | Windows | 43 | 0.011 | |||
http | MS-SDK-HttpServer | 1.0 | 43 | 0.011 | |||
http | TP-LINK Router | 42 | 0.011 | ||||
http | libwww-perl-daemon | libwww-perl-daemon | Squeezebox Server | 41 | 0.01 | ||
http | Rex media encoder http config | 11.0.5721.5275 | Windows | 40 | 0.01 | ||
http | Jetty | 6.1.x | 40 | 0.01 | |||
ssl | Microsoft IIS SSL | Windows | 39 | 0.01 | |||
http | Rex media encoder http config | 12.0.7601.17514 | Windows | 39 | 0.01 | ||
http | Boa HTTPd | 0.92o | 39 | 0.01 | |||
http | TeleEye | 1.1 | 38 | 0.01 | |||
http | uTorrent utserver web interface | Linux | 37 | 0.009 | |||
http | TwistedWeb httpd | 11.1.0 | 37 | 0.009 | |||
http | Boa HTTPd | 0.93.15 | 37 | 0.009 | |||
http | B2BPROCESSOR | 37 | 0.009 | ||||
http | Apache Tomcat/Coyote JSP engine | 1.1 | Tomcat 5.5 | 37 | 0.009 | ||
http | Apache | 2.2.22 | 37 | 0.009 | |||
ssh | OpenSSH | 5.9p1 Debian 5ubuntu1 | Ubuntu Linux; protocol 2.0 | Linux | 36 | 0.009 | |
ssh | OpenSSH | 5.5p1 Debian 6+squeeze2 | protocol 2.0 | Linux | 36 | 0.009 | |
http | Microsoft ISA httpd | Windows | 36 | 0.009 | |||
http | libwww-perl-daemon httpd | 5.827 | 36 | 0.009 | |||
http | Apache | 2.2.16 | (Debian) | 36 | 0.009 | ||
ssh | Dropbear sshd | 0.52 | protocol 2.0 | Linux | 35 | 0.009 | |
http | Ubicom | 1.1 | 35 | 0.009 | |||
http | Boa HTTPd | 0.94.14rc18 | 35 | 0.009 | |||
ssh | OpenSSH | 5.1p1 Debian 5 | protocol 2.0 | Linux | 34 | 0.009 | |
http-proxy | Squid http proxy | 2.7.STABLE9 | 34 | 0.009 | |||
http | lighttpd | 1.4.13 | 34 | 0.009 | |||
http | CherryPy httpd | 3.2.0rc1 | 34 | 0.009 | |||
ftp | Pure-FTPd | 34 | 0.009 | ||||
http | Axigen-Webmail | 33 | 0.008 | ||||
http | Apache | 2.2.16 | 33 | 0.008 | |||
telnet | VPN-5 Router | 32 | 0.008 | ||||
http | WIWA | 32 | 0.008 | ||||
http | Microsoft IIS httpd | 7.0 | Windows | 32 | 0.008 | ||
http | CherryPy httpd | 3.2.0 | 32 | 0.008 | |||
soap | gSOAP soap | 2.7 | 31 | 0.008 | |||
http | Mbedthis-Appweb | 2.4.2 | Iomega StorCenter sohoclient | Windows | 31 | 0.008 | |
http | Apache | 2.2.20 | (Ubuntu) | 31 | 0.008 | ||
ssh | OpenSSH | 5.8p1-hpn13v10 | protocol 2.0 | 30 | 0.008 | ||
ssh | Dropbear sshd | 0.53.1 | protocol 2.0 | Linux | 30 | 0.008 | |
http | Transmission BitTorrent management httpd | unauthorized | 30 | 0.008 | |||
http | thttpd | 2.19-MX Apr 26 2011 | WAP | 30 | 0.008 | ||
http | AOLserver httpd | 3.4.2 | 30 | 0.008 | |||
http | Virata-EmWeb | 6.0.1 | 29 | 0.007 | |||
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | webcam | 29 | 0.007 | |||
http | thttpd | 2.19-MX Dec 8 2009 | WAP | 29 | 0.007 | ||
http | Rex media encoder http config | 10.0.0.4007 | Windows | 29 | 0.007 | ||
http | MochiWeb Erlang HTTP library | 1.1 | WebMachine/1.9.0 | 29 | 0.007 | ||
http | Mobotix Camera http config | webcam | 29 | 0.007 | |||
http | D-Link router/Airlink NAS http config | 29 | 0.007 | ||||
http | Allegro RomPager | 4.51 UPnP/1.0 | ZyXEL ZyWALL 2 | 29 | 0.007 | ||
ftp | ProFTPD | Unix | 29 | 0.007 | |||
upnp | TwonkyMedia UPnP | Linux 2.x.x; UPnP 1.0; pvConnect SDK 1.0 | Linux | 28 | 0.007 | ||
telnet | Netgear broadband router or ZyXel VoIP adapter telnetd | 28 | 0.007 | ||||
http | PunkBuster http config | Game: MOH | 28 | 0.007 | |||
http | D-Link/Airlink IP webcam http config | 1.0 | webcam | 28 | 0.007 | ||
http | Axigen-Webadmin | 28 | 0.007 | ||||
http | Logitech Media Server (7.7.1 - 33735) | 27 | 0.007 | ||||
http | Indy | 8.0.25 | 27 | 0.007 | |||
tandem-print | Sharp printer tandem printing | printer | 26 | 0.007 | |||
redis | Redis key-value store | 26 | 0.007 | ||||
http | MS .NET Remoting | 26 | 0.007 | ||||
http | Intoto httpd | 1.0 | 26 | 0.007 | |||
http | Apache | 2.2.22 | (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips DAV/2 PHP/5.2.17 | 26 | 0.007 | ||
http | Apache | 2.2.22 | (Ubuntu) | 26 | 0.007 | ||
http | Apache | 2.2.17 | 26 | 0.007 | |||
http | thttpd | 2.19-MX Sep 9 2010 | WAP | 25 | 0.006 | ||
http | Router Webserver | 25 | 0.006 | ||||
http | Goliath | 25 | 0.006 | ||||
H.323-gatekeeper | CompTek AquaGateKeeper | 25 | 0.006 | ||||
svnserve | Subversion | 24 | 0.006 | ||||
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | webcam | 24 | 0.006 | |||
http | thttpd | 2.19-MX Oct 19 2011 | WAP | 24 | 0.006 | ||
http | RapidLogic | 1.1 | 24 | 0.006 | |||
http | PunkBuster http config | Game: BF2 | 24 | 0.006 | |||
http-proxy | Squid http proxy | 2.6.STABLE12 | 24 | 0.006 | |||
http | MultView WEB Server V1.1 | 24 | 0.006 | ||||
http | Boa HTTPd | 0.94.14rc18-ipcam | 24 | 0.006 | |||
http | Apache | 2.2.8 | (Win32) PHP/5.2.6 | 24 | 0.006 | ||
http | Apache | 2.2.15 | 24 | 0.006 | |||
http | WEB SERVER | Multi-Homing Security Gateway Administration Tools | 23 | 0.006 | |||
http | Jetty | 6.1.7 | 23 | 0.006 | |||
http | D-Link DCS-920 webcam http config | webcam | 23 | 0.006 | |||
directconnect | Direct Connect P2P | Windows | 23 | 0.006 | |||
rtsp | Avtech MPEG4 DVR control rtspd | 22 | 0.006 | ||||
http | nginx | 1.1.19 | 22 | 0.006 | |||
http | MiniServ | 1.540 | Webmin httpd | 22 | 0.006 | ||
http | AIP250 | 22 | 0.006 | ||||
vnc | VNC | protocol 3.3 | 21 | 0.005 | |||
upnp | TwonkyMedia UPnP | Iomega Home Media NAS device; Linux 2.x.x; UPnP 1.0; pvConnect SDK 1.0 | Linux | 21 | 0.005 | ||
telnet | Mulberry Co-op Telco *** | 21 | 0.005 | ||||
http | Squeezebox Server (7.5.4 - 32171) | 21 | 0.005 | ||||
http-proxy | MikroTik http proxy | 21 | 0.005 | ||||
http | nginx | 1.2.1 | 21 | 0.005 | |||
http | D-Link DCS-900 webcam http config | webcam | 21 | 0.005 | |||
ftp | FileZilla ftpd | 0.9.41 beta | Windows | 21 | 0.005 | ||
ssh | OpenSSH | 5.4p1 | FreeBSD 20100308; protocol 2.0 | FreeBSD | 20 | 0.005 | |
http | Netgear DGN1000 router http config | router | 20 | 0.005 | |||
http | monit httpd | 4.10.1 | Unix | 20 | 0.005 | ||
http | Microsoft Windows Media Server | 9.01.01.5001 | Windows | 20 | 0.005 | ||
http | HTTPServer 3.0 | 20 | 0.005 | ||||
http | GS-Webs | 20 | 0.005 | ||||
http | eHTTP v2.0 | 20 | 0.005 | ||||
http | CCcam card sharing system http config | 20 | 0.005 | ||||
http | bywifi | 20 | 0.005 | ||||
http | Apache | 2.2.8 | (Ubuntu) PHP/5.2.4-2ubuntu5.10 with Suhosin-Patch | 20 | 0.005 | ||
http | Apache | 2.2.22 | (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0h; SSL-only mode | 20 | 0.005 | ||
http | Apache | 2.0.53 | (Win32) PHP/4.3.9 | 20 | 0.005 |