Overview of services running on Port 15000 TCP.
~41 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version InfoOSDevicetypeCount Percent
http1010324.124
no match847020.224
ircDancer ircd40529.675
httpSonicWALLfirewall36448.701
chatAIM or ICQ server21425.115
smtpExim smtpd4.7712633.016
httpMiniServ0.01Webmin httpd7111.698
httpAIM1.06381.523
httpApache2.2.8(Ubuntu) PHP/5.2.4-2ubuntu5.19 with Suhosin-Patch6311.507
httplighttpd1.4.194010.957
httpApacheSSL-only mode3620.864
httpMiniServ1.580Webmin httpd2520.602
irc-proxypsyBNC2.3.2-92480.592
smtpExim smtpd2380.568
irc-proxypsyBNC2.3.2-72290.547
httplighttpd1.4.292240.535
httpMicrosoft HTTPAPI httpd2.0SSDP/UPnPWindows2060.492
httpTrend Micro OfficeScan Antivirus http configWindows1920.458
httpMicrosoft IIS httpd6.0Windows1920.458
vncVNCprotocol 3.81720.411
httpApache Tomcat/Coyote JSP engine1.11500.358
httpZNC IRC bouncer http config0.097 or later1490.356
httpMicrosoft IIS httpd1450.346
cccamCCcam DVR card sharing system information1340.32
backdoorOptixPro backdoor**BACKDOOR**Windows1210.289
httpNetwave IP camera http configwebcam1160.277
socks51150.275
httpJetty6.1.12rc11140.272
openvpnOpenVPN1040.248
httpApache1010.241
sshprotocol 1.5980.234
httpMiniServ1.530Webmin httpd970.232
httpGoAhead-Webs930.222
httpuTorrent WebUIWindows910.217
eggdropEggdrop irc bot console900.215
httpa_63880.21
sshOpenSSH5.3protocol 2.0850.203
remotingMS .NET Remoting services810.193
httpBoa HTTPd0.94.14rc21800.191
httpCCcam card sharing system http config760.181
vncVNCprotocol 3.6740.177
httpKannel SMS proxy httpd1.4.3730.174
httpAvtech AVN801 network camera1.0UPnP 1.0webcam730.174
httpTimesTen httpd720.172
httpGoAhead-Webs httpd720.172
sslTLS1.0660.158
httpHttpd1.0630.15
wesnothBattle For Wesnoth game server600.143
telnet600.143
ftp560.134
ovm-managerOracle VM Manager520.124
httpuc-httpd1.0.0510.122
httplighttpd1.4.26510.122
httpFLPS500.119
vtunVtun Virtual Tunnel3.X 01/14/2009490.117
ftpMicrosoft ftpdWindows490.117
httpMicrosoft IIS httpd5.0Windows470.112
httpMicrosoft IIS httpd7.5Windows460.11
httpmini_httpd1.19 19dec2003450.107
httpApache2.2.22(Unix)450.107
netbios-ssn440.105
httpthttpd2.25b440.105
upnpMicrosoft Windows UPnPWindows420.1
httpPDR-M8001.0400.096
httpApache2.2.3(CentOS)390.093
vncprotocol 3380.091
httpthttpd2.25b 29dec2003380.091
httpSun-Java-SystemWeb-Services-Pack-1.4380.091
httpBoa HTTPd0.94.13380.091
httpthttpdPanasonic BB-HCM511 IP camera http config360.086
zabbixZabbix Monitoring System350.084
httpnginx350.084
httpMiniServ1.570Webmin httpd350.084
httpGeoVision GeoHttpServer for webcamswebcam350.084
sshOpenSSH4.3protocol 2.0340.081
httplighttpd340.081
httpMicrosoft IIS httpd5.1Windows330.079
irc-proxypsyBNC2.3.1320.076
httpApache0.6.5320.076
http-proxyMikroTik http proxy310.074
iceInternet Communications Engine300.072
vncRealVNC Enterpriseprotocol 4.1290.069
memcachememcached280.067
httpBoa httpd280.067
httpApache2.2.22(Unix) mod_ssl/2.2.22 OpenSSL/1.0.0h280.067
vtunVtun Virtual Tunnel3.X 09/27/2010270.064
sshOpenSSH5.1p1 Debian 5protocol 2.0Linux270.064
ftpvsftpd (before 2.0.8) or WU-FTPD270.064
httpwebserver1.0260.062
httpTwistedWeb httpd8.2.0260.062
vncRealVNC Personalprotocol 4.0250.06
shoutcastSHOUTcast server1.9.8Name: #MUSIK.LOUNGE - WWW.RAUTEMUSIK.FM - 24H CHILLOUT AMBIENT SMOOTH JAZZ DOWNTEMPO LATIN SOUL AND MORE!Linux250.06
httpwebcamXP httpdWindows250.06
httpthttpd250.06
httpApache2.2.16(Debian)240.057
http-proxySquid http proxy230.055
vtunVtun Virtual Tunnel3.X 04/11/2011220.053
http-proxySquid http proxy2.7.STABLE9220.053
httpGoAhead-Webs embedded httpd220.053
httpApache2.2.15(Red Hat)220.053
httpMbedthis-Appweb2.0.4210.05
httpCross Web Server210.05
httpApache2.2.14(Ubuntu)210.05
directconnectDirect Connect P2PWindows210.05