Overview of services running on Port 4444 TCP.
~123 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Count Percent
sslTLSv13871131.371
httpApache2354119.077
no match-/-2236818.127
sslSSLv3113529.2
ircDancer ircd34812.821
telnetCisco router telnetd32682.648
http24972.024
chatAIM or ICQ server19421.574
httpSonicWALL17201.394
eggdropEggdrop IRC bot console14441.17
honeypothoneyd cmdexe.pl12541.016
sshOpenSSH12431.007
eggdropEggdrop irc bot console10760.872
httplighttpd6570.532
httpJetty5460.442
httpMicrosoft HTTPAPI httpd4880.395
httpMicrosoft IIS httpd4720.383
httpSecure Computing Sidewinder firewall http admin4010.325
httpthttpd3900.316
http-proxySquid http proxy3420.277
httpAIM2810.228
sslTLS2730.221
httpBoa HTTPd2050.166
vncVNC1870.152
irc-proxypsyBNC1680.136
httpGoAhead-Webs httpd1670.135
sshDropbear sshd1290.105
ssh1170.095
httpZNC IRC bouncer http config1100.089
httpnginx1070.087
directconnectDirect Connect P2P990.08
httpNetwave IP camera http config980.079
httpApache Tomcat/Coyote JSP engine880.071
smtpMicrosoft ESMTP850.069
mysqlMySQL800.065
ovm-managerOracle VM Manager770.062
backdoorOptixPro backdoor760.062
httpAvtech AVN801 network camera740.06
remotingMS .NET Remoting services710.058
ircUnreal ircd710.058
ftpMicrosoft ftpd710.058
httpThin680.055
telnet660.053
ripbotRipBot video encoding server660.053
httpGeoVision GeoHttpServer for webcams630.051
ftpServ-U ftpd630.051
telnetRoku SoundBridge telnetd560.045
http-proxy3Proxy http proxy550.045
httpTBS520.042
ftp480.039
httpMiniServ460.037
arcserveARCserve Discovery460.037
httpDraytek Vigor ADSL router webadmin450.036
httpMbedthis-Appweb440.036
httpAdSubtract httpd440.036
ftpFileZilla ftpd440.036
httpSockso personal music player httpd430.035
httpAllegro RomPager420.034
shellw4ck1ng-shell410.033
httpVirata-EmWeb410.033
ftpPure-FTPd410.033
httpHikvision-Webs400.032
xml380.031
kerberosHeimdal Kerberos380.031
httpOracle Universal Content Management httpd380.031
httpmini_httpd380.031
httpuTorrent WebUI360.029
sslMicrosoft IIS SSL340.028
httpCitrix Metaframe ICA Browser340.028
httpXymphony-WS330.027
ftpProFTPD330.027
vncRealVNC Enterprise310.025
upnpPortable SDK for UPnP310.025
netbios-ssn310.025
httpPDR-M800270.022
svnserveSubversion250.02
rsync250.02
httpuTorrent utserver web interface250.02
httpRouter250.02
ftpvsftpd250.02
vnc240.019
sshMikroTik RouterOS sshd220.018
httpUbicom220.018
httpSockso music server220.018
httpKskServer220.018
openvpnOpenVPN210.017
httpuc-httpd210.017
smtpSendmail190.015
httpMicrosoft ISA httpd190.015
httpDirectAdmin Daemon v1.41.0190.015
vncRealVNC Personal180.015
meterpreterMetasploit meterpreter180.015
java-rmiJava RMI180.015
httpiKeyGuard180.015
httpGoAhead-Webs180.015
httpDirectAdmin Daemon v1.41.1180.015
httpADTRAN180.015
httpuhttpd170.014
http-proxyMikroTik http proxy170.014
http-proxyCCProxy http proxy170.014
httpIntoto httpd170.014
httpGadspot/Avtech AV787 webcam http config170.014
httpApache Tomcat170.014
jetdirectJetDirect160.013
httpWangWnagSimpleServer160.013
httpmonocle160.013
httpCross Web Server160.013
smtp150.012
http-proxyEZproxy web proxy150.012
httpLinksys router http config150.012
httplibwww-perl-daemon httpd150.012
httpDVR Systems webcam http interface150.012
telnetDraytek Vigor ADSL router telnetd140.011
irc-proxyShroudBNC irc-proxy140.011
httpUbicom httpd140.011
httpSonicWALL firewall http config140.011
sshCisco SSH130.011
socks5130.011
smtpMicrosoft Exchange smtpd130.011
httpDD-WRT milli_httpd130.011
zabbixZabbix Monitoring System120.01
vncApple remote desktop vnc120.01
socks-proxySocks4A120.01
upnpPortable SDK for UPnP devices110.009
telnetVLC media player telnetd110.009
http-proxyF5 BIG-IP load balancer http proxy110.009
dominoconsoleLotus Domino Console110.009
sshBitvise WinSSHD100.008
mongodbMongoDB100.008
httpWYM httpd100.008
httpWorld Client WDaemon httpd100.008
httpWEBrick httpd100.008
httpTwistedWeb httpd100.008
httpTransmission BitTorrent management httpd100.008
httpSagem F@st router httpd100.008
httpgo1984 httpd100.008
httpESET NOD32 anti-virus update httpd100.008
httpCherryPy httpd100.008
httpCCcam card sharing system http config100.008
httpBoa httpd100.008