Overview of services running on Port 2002 TCP.
~520 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version Count Percent
rpcapdWinPcap remote packet capture daemon14784228.385
sslSSLv311292621.681
no match-/--/-10249519.679
telnetCisco IOS telnetd322126.185
telnet310005.952
telnetCisco router telnetd215434.136
telnetCisco 1721 router telnetd176983.398
http141722.721
ircDancer ircd40880.785
httpSonicWALL40410.776
chatAIM or ICQ server27170.522
sshOpenSSH4.324320.467
sslTLSv119860.381
ssh14960.287
httpLogMeIn httpd4.0.78411000.211
httpMicrosoft IIS httpd8580.165
httpAIM1.06960.134
httpBoa HTTPd0.94.14rc216320.121
httpWangWnagSimpleServer1.05050.097
irc-proxyShroudBNC irc-proxy1.1 revision 3714850.093
httpCisco Secure ACS login4840.093
httplighttpd1.4.294570.088
httplighttpd1.4.194290.082
httpLotus Expeditor Web Container6.14100.079
httpApache1.3.413880.074
sshOpenSSH5.1p1 Debian 53840.074
httpNetwave IP camera http config3840.074
sshOpenSSH5.5p1 Debian 6+squeeze23740.072
httpRemotelyAnywhere remote PC management httpd8.0.6683720.071
httpLogMeIn httpd2.30.5593720.071
httpMicrosoft IIS httpd6.03650.07
httpGateway-Webs3530.068
irc-proxypsyBNC2.3.2-73520.068
httpGoAhead-Webs httpd3470.067
httplighttpd1.4.283290.063
telnetLinux telnetd3200.061
sshOpenSSH5.32750.053
httpLogMeIn httpd4.0.6802660.051
httpMicrosoft IIS httpd5.02640.051
httpMicrosoft HTTPAPI httpd2.02610.05
httpIBM WebSphere Application Server6.02400.046
httpAvtech AVN801 network camera1.02310.044
httpt-gate web server2210.042
httpGoAhead-Webs embedded httpd2100.04
httpLogMeIn httpd4.0.7342080.04
httpApache2.2.32020.039
httpLotus Notes Expeditor httpd6.11880.036
httpRemotelyAnywhere remote PC management httpd10.0.10861720.033
httpthttpd1690.032
ftpMicrosoft ftpd1660.032
httpApache1610.031
sshOpenSSH5.3p1 Debian 3ubuntu71560.03
vncVNC1430.027
httpApache Tomcat/Coyote JSP engine1.11410.027
httpthttpd2.25b 29dec20031330.026
httpRemotelyAnywhere remote PC management httpd8.0.7471240.024
sshOpenSSH3.9p11160.022
rtsp1160.022
sshOpenSSH5.5p1 Debian 6+squeeze11120.022
httpDrcomServer1.01120.022
ftp1110.021
httpIndy9.00.101080.021
httpLogMeIn httpd3.0.6061070.021
sshOpenSSH5.11040.02
sshCisco SSH1.251030.02
httpApache2.2.151020.02
httpmini_httpd1.19 19dec20031010.019
sshMikroTik RouterOS sshd970.019
httplighttpd1.4.20960.018
smtpPostfix smtpd880.017
sshOpenSSH5.5p1 Debian 6850.016
httpthttpd2.24 26oct2003850.016
httpBoa HTTPd0.94.13840.016
httpIndy9.0.11820.016
httpHikvision-Webs820.016
httpPDR-M8001.0810.016
httpMicrosoft IIS httpd7.5810.016
telnetWanMa Network, ****800.015
httpLotus Expeditor Web Container790.015
sshOpenSSH5.9p1 Debian 5ubuntu1750.014
httpInnovative Interfaces Innopac httpd110710.014
xfce-sessionXFCE Session Manager700.013
httpCross Web Server700.013
sshOpenSSH5.4p1690.013
httpApache2.2.22690.013
httpApache2.2.14670.013
httpuc-httpd1.0.0650.012
xml640.012
httpVirata-EmWeb6.0.1600.012
remotingMS .NET Remoting services590.011
httpHttpd1.0590.011
sshOpenSSH5.9580.011
httpApache0.6.5580.011
httpRemotelyAnywhere remote PC management httpd8.0.597570.011
sshOpenSSH5.8550.011
httpRemotelyAnywhere remote PC management httpd8.0.605530.01
directconnectDirect Connect P2P530.01
httplighttpd1.4.26520.01
httpApache2.2.16520.01
httphttpd500.01
httpthttpd2.25b490.009
httpMobotix Camera http config490.009
sslTLS1.0480.009
sshOpenSSH4.7p1 Debian 8ubuntu1.2470.009
httpthttpd2.24470.009
httpMicrosoft IIS httpd7.0470.009
httpGoAhead-Webs470.009
arcserveARCserve Discovery470.009
sshOpenSSH4.3p2 Debian 9etch3460.009
sshDropbear sshd0.52460.009
httpGadspot/Avtech AV787 webcam http config460.009
sshOpenSSH2.3.0 mikrotik 2.9450.009
httpNetwork Camera450.009
sshOpenSSH5.2440.008
socks5440.008
httpGeoVision GeoHttpServer for webcams430.008
httpuTorrent WebUI420.008
httpdcs-lig-httpd390.007
httpMicrosoft IIS httpd5.1370.007
httpMbedthis-Appweb2.0.4370.007
telnetCisco 2514 router telnetd360.007
httpDVR Systems webcam http interface360.007
sshOpenSSH5.8p1 Debian 1ubuntu3350.007
httpDraytek Vigor ADSL router webadmin350.007
dominoconsoleLotus Domino Console350.007
httpApache1.3.28340.007
ftpPure-FTPd340.007
httpGM Streaming Server httpd330.006
httpD-Link DIR-300 WAP http admin320.006
sshOpenSSH5.8p1 Debian 7ubuntu1310.006
socks-proxySocks4A310.006
sshOpenSSH5.0300.006
httpWYM httpd1.0300.006
sshOpenSSH5.5290.006
sshOpenSSH4.5p1290.006
http-proxySquid http proxy290.006
httpCisco Secure ACS web interface290.006
httpBchat290.006
httpRemotelyAnywhere remote PC management httpd6.20.467280.005
httpLogMeIn httpd4.0.994280.005
sshOpenSSH5.4270.005
sshOpenSSH4.3p2 Debian 9etch2270.005
sshOpenSSH3.6.1p2270.005
imondimond fli4l router config270.005
httpD-Link/Airlink IP webcam http config1.0270.005
httpApache2.2.9270.005
nntpINN nntpd260.005
httpVivotek IP7131 Network Camera http config260.005
vnc250.005
shoutcast-publishingSHOUTcast publishing port250.005
httpRemotelyAnywhere remote PC management httpd7.10.552250.005
httpCordaServer7.2.5.3711 (PopChart250.005
httpCordaServer7.0.1.1366 (PopChart250.005
ftpServ-U ftpd6.4250.005
sshKojoney SSH honeypot240.005
httpWireless Network Camera240.005
httpRemotelyAnywhere remote PC management httpd9.0.856240.005
sshOpenSSH5.5p1 Debian 4ubuntu6230.004
shoutcastSHOUTcast server1.9.5230.004
httpCCcam card sharing system http config230.004
rifa-dvrRifatron DVR220.004
http-proxySquid http proxy2.7.STABLE9220.004
httpApache2.2.21220.004
httpApache2.2.17220.004
ftpvsftpd2.0.8 or later220.004
upnpPortable SDK for UPnP devices1.3.1210.004
telnetFrontier Internet *210.004
sshOpenSSH5.4p1_hpn13v11210.004
sshOpenSSH5.3p1 Debian 3ubuntu6210.004
httpTRENDnet TV-IP100 or TV-IP110 webcam display httpd210.004
httpLogMeIn httpd4.0.732210.004
httplighttpd210.004
httpCordaServer6.0.483210.004
httpApache2.0.53210.004
vncRealVNC Personal200.004
vnc-httpRealVNC4.0200.004
sshOpenSSH4.6200.004
sshDropbear sshd0.51200.004
smtp200.004
shoutcastSHOUTcast server1.9.8200.004
openvpnOpenVPN200.004
httplighttpd1.4.30200.004
httpIntoto httpd1.0200.004
httpCordaServer6.0.706200.004
httpApache2200.004
sshOpenSSH6.0190.004
sshOpenSSH5.9p1-hpn13v11190.004
sshOpenSSH4.3p2 Debian 9190.004
sshOpenSSH3.8.1p1 Debian 8.sarge.6190.004
sshDropbear sshd0.53.1190.004
httpLogMeIn httpd4.0.656190.004
httpLogMeIn httpd2.30.555190.004
httpLogMeIn httpd2.30.539190.004
httpAllegro RomPager4.07 UPnP/1.0190.004
urpUNO Remote Protocol (URP)180.003
smtpMicrosoft Exchange smtpd180.003
httpWorld Client WDaemon httpd4.0180.003
httpRemotelyAnywhere remote PC management httpd7.00.531180.003
httpLogMeIn httpd4.0.771180.003
httpLogMeIn httpd2.30.511180.003
httpCordaServer (PopChartServer compatible) 5.1.2h180.003
httpCordaServer6.0.597180.003
telnetTachyon.NET *170.003
sshOpenSSH5.3p1 Debian 3ubuntu5170.003
httpMiniServ0.01170.003
citrix-icaCitrix Metaframe XP ICA170.003
sshOpenSSH5.1p1160.003
mongodbMongoDB.00.160.003
httpApache2.0.52160.003
ftpProFTPD160.003
vncRealVNC Enterprise150.003
httpTP-LINK Router150.003
httpthttpd2.19-MX Dec 8 2009150.003
http-proxySquid http proxy2.6.STABLE12150.003
httpMiniServ1.580150.003
httpCordaServer6.0.727150.003
httpApache2.2.8150.003
httpApache2.2.11150.003
httpAirlink 101 or TRENDnet TVIP-422w webcam http config150.003
ftpMicrosoft ftpd5.0150.003
ftpFileZilla ftpd0.9.41 beta150.003