Overview of services running on Port 2003 TCP.
~54 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version InfoOSDevicetypeCount Percent
http1159221.238
no match739813.554
telnetCisco IOS telnetdIOSswitch43417.953
telnet43097.895
ircDancer ircd40547.427
httpSonicWALLfirewall37036.784
chatAIM or ICQ server22204.067
telnetCisco 1721 router telnetdIOSrouter17673.237
sslSSLv316062.942
telnetSMC SMC2870W Wireless Ethernet Bridgebridge15862.906
telnetCisco router telnetdIOSrouter11412.09
httpAIM1.06001.099
telnetUsually a Cisco/3com switchIOSswitch5160.945
irc-proxyShroudBNC irc-proxy1.1 revision 3714460.817
httplighttpd1.4.294280.784
httplighttpd1.4.194110.753
httpMicrosoft IIS httpd6.0Windows3060.561
telnetLinux telnetdLinux2950.54
httpGoAhead-Webs httpd2920.535
httpBoa HTTPd0.94.14rc212850.522
ftpvsftpd2.0.8 or later2680.491
httplighttpd1.4.282560.469
httpMicrosoft IIS httpd2490.456
httpWangWnagSimpleServer1.02180.399
httpApache2.2.3(CentOS)2070.379
httpNetwave IP camera http configwebcam1850.339
httpMicrosoft HTTPAPI httpd2.0SSDP/UPnPWindows1820.333
httpMiniServ0.01Webmin httpd1570.288
httpGateway-Webs1380.253
irc-proxypsyBNC2.3.2-91100.202
httpApache Tomcat/Coyote JSP engine1.1990.181
httpRemotelyAnywhere remote PC management httpd8.0.668970.178
sshprotocol 1.5950.174
ftpMicrosoft ftpdWindows910.167
httpApache2.2.14 (Unix) mod_ssl850.156
httpAvtech AVN801 network camera1.0UPnP 1.0webcam810.148
httpthttpd2.25b800.147
httpApache730.134
httpthttpd2.24720.132
httpTP-LINK WR543G WAP http configWAP680.125
httpthttpdPanasonic BB-HCM511 IP camera http config680.125
sshOpenSSH4.3protocol 2.0660.121
remotingMS .NET Remoting services620.114
sslTLS1.0570.104
httpRemotelyAnywhere remote PC management httpd10.0.1086570.104
directconnectDirect Connect P2PWindows540.099
httpMikroTik router config httpdRouterOSrouter520.095
vncVNCprotocol 3.8510.093
httpApacheSSL-only mode510.093
httpBoa HTTPd0.94.13500.092
httpApache0.6.5500.092
http-proxySquid http proxy480.088
httpPDR-M8001.0480.088
rtsp430.079
httpGoAhead-Webs embedded httpd430.079
httpRemotelyAnywhere remote PC management httpd8.0.747420.077
httpHikvision-Webs390.071
sshDropbear sshd0.48protocol 2.0Linux380.07
httpRemotelyAnywhere remote PC management httpd8.0.605380.07
httpmini_httpd1.19 19dec2003380.07
httpApache2.2.3380.07
sshCisco SSH1.25protocol 2.0IOS360.066
arcserveARCserve Discovery360.066
httpMicrosoft IIS httpd7.5Windows350.064
xml330.06
telnetCisco 2514 router telnetdIOSrouter310.057
httpuTorrent WebUIWindows310.057
sshOpenSSH5.3protocol 2.0300.055
sslTLSv1290.053
nntpINN nntpdposting ok280.051
httplighttpd1.4.20280.051
httpGeneral User280.051
httpApache2.2.14(Fedora)280.051
http-proxySquid http proxy2.7.STABLE9260.048
httpdcs-lig-httpd250.046
httplighttpd1.4.26240.044
httpCross Web Server240.044
ftp240.044
lmtpCyrus lmtpd Murder2.3.15230.042
httpthttpd230.042
httpRemotelyAnywhere remote PC management httpd8.0.597230.042
httpApache2.2.15(CentOS)230.042
sshOpenSSH3.9p1protocol 2.0220.04
httpMbedthis-Appweb2.0.4220.04
httpthttpd2.25b 29dec2003210.038
httpMiniServ1.550Webmin httpd210.038
httpGeoVision GeoHttpServer for webcamswebcam210.038
geovision-audioGeovision webcam audiowebcam210.038
httpthttpd2.24 26oct2003200.037
httpMicrosoft IIS httpd7.0Windows200.037
httpGoAhead-Webs httpdOvislink WAP http configWAP200.037