Overview of services running on Port 2002 TCP.
~520 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Count Percent
rpcapdWinPcap remote packet capture daemon14784228.385
sslSSLv311292621.681
no match-/-10249519.679
telnetCisco IOS telnetd322126.185
telnet310005.952
telnetCisco router telnetd215434.136
telnetCisco 1721 router telnetd176983.398
http141722.721
sshOpenSSH51630.991
ircDancer ircd40880.785
httpSonicWALL40410.776
chatAIM or ICQ server27170.522
httpLogMeIn httpd23050.443
sslTLSv119860.381
httpMicrosoft IIS httpd16520.317
ssh14960.287
httplighttpd14230.273
httpApache14130.271
httpRemotelyAnywhere remote PC management httpd9420.181
httpBoa HTTPd7760.149
httpAIM6960.134
httpthttpd6150.118
httpWangWnagSimpleServer5050.097
httpLotus Expeditor Web Container4890.094
irc-proxyShroudBNC irc-proxy4850.093
httpCisco Secure ACS login4840.093
httpNetwave IP camera http config3840.074
irc-proxypsyBNC3580.069
httpGateway-Webs3530.068
httpGoAhead-Webs httpd3470.067
telnetLinux telnetd3200.061
httpMicrosoft HTTPAPI httpd2650.051
httpIBM WebSphere Application Server2420.046
httpCordaServer2330.045
httpAvtech AVN801 network camera2310.044
httpt-gate web server2210.042
httpGoAhead-Webs embedded httpd2100.04
httpIndy2010.039
httpLotus Notes Expeditor httpd1880.036
ftpMicrosoft ftpd1810.035
vncVNC1430.027
httpApache Tomcat/Coyote JSP engine1420.027
sshDropbear sshd1160.022
rtsp1160.022
httpDrcomServer1.01120.022
ftp1110.021
httpmini_httpd1080.021
sshCisco SSH1030.02
sshMikroTik RouterOS sshd970.019
smtpPostfix smtpd880.017
http-proxySquid http proxy860.017
httpHikvision-Webs820.016
httpPDR-M800810.016
telnetWanMa Network, ****800.015
httpInnovative Interfaces Innopac httpd710.014
xfce-sessionXFCE Session Manager700.013
httpCross Web Server700.013
httpuc-httpd650.012
xml640.012
httpVirata-EmWeb620.012
remotingMS .NET Remoting services590.011
httpHttpd590.011
ftpProFTPD580.011
httpnginx530.01
directconnectDirect Connect P2P530.01
httphttpd510.01
ftpServ-U ftpd510.01
httpMobotix Camera http config490.009
sslTLS480.009
httpGoAhead-Webs480.009
arcserveARCserve Discovery470.009
shoutcastSHOUTcast server460.009
httpGadspot/Avtech AV787 webcam http config460.009
httpNetwork Camera450.009
httpMbedthis-Appweb450.009
ftpFileZilla ftpd450.009
socks5440.008
httpGeoVision GeoHttpServer for webcams430.008
httpuTorrent WebUI420.008
httpMiniServ420.008
ftpvsftpd420.008
httpdcs-lig-httpd390.007
httpWorld Client WDaemon httpd370.007
telnetCisco 2514 router telnetd360.007
httpDVR Systems webcam http interface360.007
mysqlMySQL350.007
httpDraytek Vigor ADSL router webadmin350.007
httpAllegro RomPager350.007
ftpPure-FTPd350.007
dominoconsoleLotus Domino Console350.007
httpGM Streaming Server httpd330.006
httpD-Link DIR-300 WAP http admin320.006
socks-proxySocks4A310.006
httpWYM httpd300.006
httpCisco Secure ACS web interface290.006
httpBchat290.006
imondimond fli4l router config270.005
httpD-Link/Airlink IP webcam http config270.005
nntpINN nntpd260.005
httpVivotek IP7131 Network Camera http config260.005
vnc250.005
shoutcast-publishingSHOUTcast publishing port250.005
mongodbMongoDB250.005
sshKojoney SSH honeypot240.005
httpWireless Network Camera240.005
vnc-httpRealVNC230.004
upnpPortable SDK for UPnP devices230.004
httpCCcam card sharing system http config230.004
rifa-dvrRifatron DVR220.004
telnetFrontier Internet *210.004
httpTRENDnet TV-IP100 or TV-IP110 webcam display httpd210.004
vncRealVNC Personal200.004
smtp200.004
openvpnOpenVPN200.004
httpIntoto httpd200.004
smtpMicrosoft ESMTP190.004
httpJetty190.004
urpUNO Remote Protocol (URP)180.003
smtpMicrosoft Exchange smtpd180.003
httpCordaServer (PopChartServer compatible) 5.1.2h180.003
telnetTachyon.NET *170.003
citrix-icaCitrix Metaframe XP ICA170.003
httpTwistedWeb httpd160.003
httpCherryPy httpd160.003
httpAXIS 205 network camera web interface160.003
vncRealVNC Enterprise150.003
sshSunSSH150.003
httpZNC IRC bouncer http config150.003
httpTP-LINK Router150.003
httpAirlink 101 or TRENDnet TVIP-422w webcam http config150.003
httpVivotek 3102 Camera http config140.003
httpTRENDnet TV-IP110w or TV-IP422W webcam display httpd140.003
http-proxyF5 BIG-IP load balancer http proxy140.003
audioworksAudioWorks sound server140.003
printerPanasonic mfpscdl.exe service130.002
netbios-ssn130.002
httpQNAP TS-219P NAS http config130.002
httpMikroTik router http config130.002
flexlmFlexLM license manager130.002
telnetBSD-derived telnetd120.002
telnetAllied Telesis x900-series switch telnetd120.002
httpAIM HTTP120.002
giopCORBA naming service120.002
telnetthe BCC terminal server110.002
httpWindWeb110.002
httpWebs110.002
httpVivotek Network Camera110.002
httpTeamViewer httpd110.002
httpMS-SDK-HttpServer110.002
httpCisco IOS http config110.002
httpavtech httpd110.002
vncApple remote desktop vnc100.002
telnetSMC SMC2870W Wireless Ethernet Bridge100.002
soapgSOAP soap100.002
httpudpxy multicast UDP-to-HTTP100.002
httpUbicom httpd100.002
http-proxyMikroTik http proxy100.002
httpOracle-iPlanet-Web-Server100.002
httpMikroTik router config httpd100.002
httpDD-WRT milli_httpd100.002
httpAmatic100.002