Overview of services running on Port 8009 TCP.
~512 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version InfoOSDevicetypeCount Percent
ajp13Apache JservProtocol v1.341951481.796
httpFortiClient firewall http configfirewall182453.557
httpNetBox httpd2.8 Build 4128149672.918
http118382.308
no match94491.842
sslTLSv145760.892
ircDancer ircd40960.799
httpSonicWALLfirewall36060.703
sslSSLv326870.524
chatAIM or ICQ server25560.498
httpMicrosoft IIS httpd13540.264
ajp13Apache Jserv13450.262
httpGoAhead-Webs httpd9310.182
httpVirata-EmWeb6.2.07580.148
httpMicrosoft HTTPAPI httpd2.0SSDP/UPnPWindows7450.145
xml6840.133
httpAIM1.06250.122
httpApache Tomcat/Coyote JSP engine1.15690.111
httpBoa HTTPd0.94.14rc215340.104
http-proxyFortinet FortiGuard http proxyfirewall5220.102
shoutcast-publishingSHOUTcast publishing port4630.09
httplighttpd1.4.294390.086
httplighttpd1.4.194320.084
httpMicrosoft IIS httpd6.0Windows4190.082
httpNetwave webcam http configwebcam2970.058
httpApache2890.056
httpApacheSSL-only mode2680.052
httpHikvision-Webs2140.042
httpNetwave IP camera http configwebcam2110.041
arcserveARCserve Discovery2070.04
httpApache2.2.3(CentOS)1750.034
httpthttpd2.241400.027
httpthttpd2.25b1330.026
http-proxyBlueCoat SG-400 http proxyproxy server1310.026
httpthttpd1300.025
http-proxyF5 BIG-IP load balancer http proxyload balancer1280.025
eggdropEggdrop IRC bot console1.6.201280.025
httplighttpd1.4.281200.023
httpDrcomServer1.01180.023
httpOpenDNS Guide1100.021
httpIcecast streaming media server1080.021
vncVNCprotocol 3.81070.021
httpmini_httpd1.19 19dec20031020.02
sshprotocol 1.5990.019
http-proxySquid http proxy2.6.STABLE21900.018
mysqlMySQLunauthorized890.017
httpnginx1.0.12890.017
httpJetty6.1.25810.016
httpAvtech AVN801 network camera1.0UPnP 1.0webcam780.015
telnet760.015
httpBoa HTTPd0.94.13730.014
httplighttpd690.013
sslMicrosoft IIS SSLWindows650.013
http-proxySquid http proxy3.0.STABLE19650.013
upnpConexant-EmWeb6.1.0UPnP 1.0640.012
httpMicrosoft IIS httpd7.5Windows640.012
httpuTorrent utserver web interfaceLinux620.012
httpthttpdPanasonic BB-HCM511 IP camera http config610.012
rtsp580.011
httpMicrosoft IIS httpd5.0Windows580.011
httpGeoVision GeoHttpServer for webcamswebcam560.011
httpApache2.2.3540.011
httpBoa HTTPd0.93.15530.01
httpADAM-60008.1.0019530.01
ftpMicrosoft ftpdWindows530.01
sshOpenSSH4.3protocol 2.0520.01
httpPDR-M8001.0510.01
httpuTorrent WebUIWindows490.01
http-proxySquid http proxy2.6.STABLE12480.009
httpnginx470.009
httpuc-httpd1.0.0450.009
httpApache0.6.5450.009
httpGoAhead-Webs440.009
httpApache2.2.14(Ubuntu)440.009
httpApache2.2.16(Debian)430.008
httpiDVRhttpSvr420.008
httpHelix Mobile Server httpd14.3.0.268x86_64Windows420.008
httpUbicom1.1410.008
httpthttpd2.25b 29dec2003410.008
httpthttpd2.24 26oct2003410.008
http-proxySquid http proxy410.008
httpMicrosoft IIS httpd5.1Windows400.008
httplighttpd1.4.20400.008
httpGeneral User400.008
httpApache2.2.14400.008
httpNetgear FS726TP switch http configswitch380.007
httpMikroTik router http configrouter380.007
httpLinux2.x UPnP380.007
httpHelix Mobile Server httpd14.2.0.212x86_64Windows360.007
httpApache2.3.8(Unix) mod_ssl/2.3.8 OpenSSL/1.0.0c360.007
httpthttpd2.19-MX Jul 1 2010WAP350.007
httpHAProxy Statistics350.007
httpApache2.2.15(CentOS)350.007
httpOracle HTTP Server Powered by Apache1.3.19mod_fastcgi/2.2.10 mod_perl/1.25 mod_oprocmgr/1.0Unix340.007
httpnginx1.0.11340.007
httpMarkLogic340.007
vncRealVNC Enterpriseprotocol 4.1330.006
httpMotion Camera httpd3.2.7webcam330.006
httpApache2.2.16330.006
httpTwistedWeb httpd8.2.0320.006
httpMochiWeb1.0 (Any of you quaids got a smint320.006
httpWindWeb2.0310.006
httpRouter310.006
httphttp server 1.0310.006
httpHelix Mobile Server14.2.0.212 (linux-rhel5-x86)310.006
httpApache1.3.27Ben-SSL/1.48 (Unix) PHP/4.3.11310.006
sslTLS1.0300.006
http-proxySquid http proxy2.7.STABLE9290.006
http-proxyMikroTik http proxy290.006
httpBoa HTTPd0.94.14rc18270.005
httpApache2.0.53(Win32) PHP/5.1.4270.005
httpthttpd2.19-MX Oct 19 2011WAP260.005
httpHelix Mobile Server14.0.1.571 (win32)260.005
httpUbicomUbicom(PHSAccess)250.005
upnpConexant-EmWeb6.1.0Billion 740- or 7400-series ADSL router UPnP; UPnP 1.0WAP240.005
httpTP-LINK Router240.005
httpMbedthis-Appweb2.0.4240.005
httplighttpd1.4.30240.005
httpGoAhead-Webs embedded httpd240.005
httpdcs-lig-httpd240.005
ftp240.005
httpZimbra http config230.004
httpMicrosoft ISA httpdWindows230.004
httpMicrosoft IIS httpd7.0Windows230.004
httpHelix Mobile Server14.2.0.212 (win-x86-vc10)230.004
httpSnom 300 VoIP phone http configVoIP phone220.004
httpCherryPy httpd3.2.0220.004
httpBoa HTTPd0.94.11220.004
httpApache2.2.8(Ubuntu) PHP/5.2.4-2ubuntu5.10 with Suhosin-Patch220.004
ftpvsftpd2.0.8 or later220.004
httpWebLogic httpd210.004
httpMicrosoft HTTPAPI httpd1.0SSDP/UPnPWindows210.004
httpHelix Mobile Server14.3.0.268 (linux-rhel5-x86_64)210.004
httpCisco IOS http configIOS210.004
httpFlowWeb1.4.28200.004
httpApache2.2.15200.004