Overview of services running on Port 85 TCP.
~211 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version Count Percent
http3466216.397
httpApache203819.641
httpApache1.3.37137806.519
httpNetwave webcam http config75653.579
httpMicrosoft IIS httpd6.069343.28
httpuc-httpd1.0.064613.056
httpmini_httpd1.19 19dec200355882.643
httpAvtech AVN801 network camera1.045512.153
httpNetwave IP camera http config44802.119
httpHikvision-Webs43862.075
httpCross Web Server42762.023
httpGeoVision GeoHttpServer for webcams42482.01
httpSonicWALL37781.787
httpD-Link DIR-300 WAP http admin36711.737
httpGoAhead-Webs httpd33311.576
httpMicrosoft IIS httpd7.528731.359
httpBoa HTTPd0.94.14rc2127351.294
no match-/--/-25711.216
chatAIM or ICQ server23861.129
httpthttpd2.25b 29dec200321171.001
httpLinux2.x UPnP20190.955
httpBusyBox httpd1.1319380.917
httpMicrosoft IIS httpd18810.89
httpApache2.2.2217510.828
httpApache2.2.1614330.678
httpApache1.3.4114330.678
httpMicrosoft IIS httpd7.013690.648
httpApache2.2.1713260.627
httpDVR Systems webcam http interface12420.588
httpthttpd11750.556
httpBoa HTTPd0.94.1310640.503
httpApache2.2.1410390.492
httpBusyBox httpd10150.48
httpApache2.2.99630.456
httpMbedthis-Appweb2.0.49550.452
httpGoAhead-Webs embedded httpd9540.451
httpApache1.3.339080.43
httpGadspot/Avtech AV787 webcam http config8900.421
httpMicrosoft HTTPAPI httpd2.08650.409
httpApache Tomcat/Coyote JSP engine1.18440.399
httpGnway Web Server8350.395
httpBoa httpd8140.385
httpCisco IOS http config7880.373
httpnginx7730.366
httpApache2.2.37720.365
httpAllegro RomPager4.51 UPnP/1.07710.365
httpDrayTek Vigor 2800-series ADSL router httpd7700.364
httplighttpd1.4.287310.346
httpAIM1.07280.344
httpdcs-lig-httpd6740.319
httpTroxo IISGuard6120.29
httpBoa HTTPd0.93.156050.286
httplighttpd1.4.265910.28
httpWindWeb2.05270.249
httplighttpd1.4.295080.24
arcserveARCserve Discovery4960.235
httplighttpd1.4.194940.234
httpMikroTik router config httpd4800.227
httpMicrosoft IIS httpd5.04670.221
httpW3MFC1.684580.217
httpTwistedWeb httpd8.2.04330.205
httpApache2.2.114240.201
httpMicrosoft IIS httpd5.14090.193
httpAirlink 101 or TRENDnet TVIP-422w webcam http config4020.19
httpD-Link/Airlink IP webcam http config1.04010.19
httpMikroTik router http config3970.188
httpApache2.2.213940.186
httpAllegro RomPager4.07 UPnP/1.03900.184
httpApache2.2.83760.178
httpMS-SDK-HttpServer1.03550.168
httpTRENDnet TV-IP100 or TV-IP110 webcam display httpd3430.162
httpApache2.2.153320.157
httpWebServer(IPCamera_Logo)3110.147
httpW3SVR1.13070.145
httpwg_httpd1.0(based Boa2880.136
httpD-Link Internet Camera2670.126
httpSonicWALL firewall http config2650.125
httpnginx0.9.42620.124
httpnginx1.2.12600.123
rtspAvtech MPEG4 DVR control rtspd2550.121
httpWYM httpd1.02460.116
httpPDR-M8001.02460.116
httplighttpd1.4.302450.116
httplighttpd2400.114
httpApache2.2.42280.108
httpthttpd2.25b-lxc 29dec20032170.103
httpTRENDnet TV-IP110w or TV-IP422W webcam display httpd2140.101
httpDraytek Vigor ADSL router webadmin2110.1
httpRouter2010.095
httpnginx0.5.341990.094
httpnginx1.0.01900.09
httpOwnServer1.01890.089
httpBoa HTTPd0.94.14rc18-ipcam1890.089
httpnginx0.8.541870.088
httpApache1.3.271870.088
httpFC1840.087
httpTechno Vision Security System http config2.01750.083
httphttp servereverfocus1620.077
httpApache2.0.521590.075
httpthttpd2.24 26oct20031540.073
sshOpenSSH4.31510.071
httpHTTPServer1500.071
httpnginx0.6.341450.069
httpCompuOffice Webserver2.0.0.01430.068
httphttpd 1.11400.066
httpWebs1370.065
httpBoa0.94.131370.065
httpImagiaTek1360.064
httpuTorrent utserver web interface1350.064
httpIndy8.0.251350.064
httpD-Link DCS-900 webcam http config1350.064
httpthttpd2.19-MX Jul 1 20101340.063
httpChipPC Extreme httpd1340.063
httpnginx1.0.81320.062
httpWebServer1310.062
httpApache2.2.101310.062
httpIQinVision Embedded 1.01300.061
httpMicrosoft IIS1280.061
httpGoAhead-Webs1280.061
httpDrcomServer1.01280.061
httpTridium Niagara httpd1.11260.06
httpLinksys PAP2 VoIP http config1250.059
httpD-Link DCS-920 webcam http config1230.058
httpTP-LINK WR740N WAP http config1180.056
httpMbedthis-Appweb2.4.21180.056
httpApache2.0.531180.056
httpWebFS httpd1.211160.055
httpVivotek Network Camera1150.054
httphttp server 1.01140.054
httpnginx0.7.671130.053
httpDreambox httpd1120.053
httpDavid WebBox httpd11.00a.07171110.053
httpavtech httpd1.01100.052
httpTcl-Webserver3.4.21090.052
httpMobotix Camera http config1090.052
httpKerio MailServer http config1080.051
httpApache2.2.201080.051
httpnginx0.8.451060.05
httpJetty6.1.x1060.05
httpApache2.2.191060.05
ssh1040.049
http-proxyMicrosoft Foundation Class httpd1.01020.048
sshOpenSSH5.8p2_hpn13v111010.048
rtsp1010.048
httpCitrix Metaframe ICA Browser1010.048
httpApache2.2.61010.048
httpwebserver1.0970.046
httpnginx0.9.7970.046
httpGrandstream HT286 VoIP router http config970.046
httpD-Link DCS-910 webcam http config970.046
httpgo1984960.045
httpApache2.0.54960.045
httpavtech1.0..Expires940.044
httpPanasonic BB-HCM331 Network Camera http config930.044
httpnginx1.0.4910.043
httpnginx1.0.11910.043
httpD-Link MiniAVServer910.043
httpCrestron MPS-200 AV routing system http config900.043
httpApache2.0.59900.043
httpver2.4 rev0880.042
httpRouter Webserver880.042
httphttpd880.042
httpBoa HTTPd0.92o880.042
http-proxySquid http proxy840.04
httpHTTPsrv830.039
httplighttpd1.4.13820.039
httpthttpd2.25b PHP810.038
httplighttpd1.4.23800.038
httpNetwork Camera790.037
httpApache2.2.12790.037
httpIndy10.1.5780.037
httpnginx0.8.53770.036
httpSun Niagara httpd1.1760.036
httpApache2.2.13750.035
vncVNC740.035
httpTibetSystem Server 2.0740.035
httpApache2.0.55740.035
httpVivotek 3102 Camera http config730.035
httpIpswitch Whats Up Gold6.0730.035
httpnginx1.2.0720.034
httpdvr1614n web-cam httpd720.034
httpApache1.1.1 (Unix) PHP720.034
httpGS-Webs710.034
httpTP-LINK Router700.033
httpLotus Domino httpd700.033
httpUbicom1.1690.033
httpthttpd2.19-MX Dec 8 2009690.033
httpTridium Niagara httpd3.5.34680.032
httpthttpd2.19-MX Sep 9 2010680.032
httpnginx1.0.14680.032
httpGrandstream HT502 VoIP router http config670.032
httpUploader-HttpSvr1.0650.031
httpZyXEL ZyWALL USG 200 firewall http config630.03
httpTP-LINK WR541G/542G WAP http config630.03
httpADAM-60008.1.0019620.029
httpnginx1.0.10610.029
httpApache2.0.63610.029
httpWeb-Based Enterprise Management CIM serverOpenPegasus WBEM httpd600.028
httpWCY_WEBServer1.0600.028
httpthttpd2.23beta1 26may2002600.028
httpLinksys SPA942 VoIP phone http config580.027
httpApache2580.027
httpDD-WRT milli_httpd570.027
httpSNF0.1560.026
httpBoa HTTPd0.94.14rc20560.026
httpBlueIris1.1560.026
httpalphapd560.026
ftp560.026
httpMongoose httpd550.026
httpApache1.3.39550.026
sshOpenSSH5.5p1 Debian 6+squeeze1530.025
httpHttpFileServer httpd2.2f530.025
httpHTTPD 1.0510.024
httpD-Link DCS-3220 webcam http config510.024
httpBlueIris-HTTPBlueIris-HTTP510.024
ftpMicrosoft ftpd510.024
httpWireless Network Camera500.024
httpHomeSeer Home Control Web Interface500.024
httpWindWeb1.0490.023
httpuTorrent WebUI490.023
httpgo1984 httpd490.023
httpnginx1.0.5480.023
httpFnord httpd1.9470.022
httpEverfocus webcam http config470.022
httpD-Link web camera http config470.022
telnet460.022
httpJetty450.021
httpApache2.4.2450.021
httpTalkSwitch HTTP Server2.0440.021
httpnginx0.7.65440.021
httpApache0.6.5440.021
http-proxySquid http proxy2.6.STABLE12430.02
httpEmbedded HTTPD v1.00420.02
http-proxySquid http proxy2.7.STABLE9410.019
httpnginx1.1.2410.019
httpDreambox DVB Enigma httpd410.019
httpDavid WebBox httpd12.00a.0781410.019
httpBosch Divar Security Systems http config410.019
httpAverMedia WebCamX httpd410.019
httpZimbra http config400.019
httpNetBox httpd2.8 Build 4128400.019
httpIntoto httpd1.0400.019
httpavtech1.0400.019
httpWebLogic httpd390.018
httpViewSonic PJD6521 projector http config390.018
httpthttpd2.19-MX Apr 26 2011390.018
httpSatel ETHM-1 alarm control unit390.018
httpBlueIris-HTTP1.1390.018
httpvid380.018
httplighttpd1.4.20380.018
httpbozohttpd20080303380.018
httpApache1.3.42380.018
httpAllegro-Software-RomPager4.30b3380.018
httpthttpd2.19-MX Oct 19 2011370.018
httpsbcache3.5.5370.018
httpDart WebServer Tool1.0370.018
httpApache2.0.64370.018
httpADH-Web370.018
httpnginx1.0.1360.017
httpFileMaker Web Publishing httpd360.017
httpXWeb 1.0350.017
httpVPON Server1.0350.017
httpNETWORK350.017
httpHeiTel GmbH Web Server350.017
httpthttpd2.19-MX Feb 27 2009340.016
http-proxyCCProxy http proxy340.016
httpnginx1.0.15340.016
httpAllegro RomPager4.01340.016
httpUbicomUbicom330.016
http-proxySquid http proxy3.1.18330.016
httpMicrosoft Windows Media Server9.01.01.5001330.016
httpHyNetOS2.0330.016
httpwebcamXP httpd5320.015
httpVelazquez 6.2320.015
httpUltiDev Cassini httpd2.1.4.3320.015
httpIPCamera-Webs320.015
httpD-Link printer/webcam http config320.015
httpTCAdmin-2.0 Microsoft-HTTPAPI2.0310.015
http-proxySquid http proxy3.1.20310.015
httpNetwork Dome Camera310.015
httpNetApp DFM httpd310.015
httpMiniServ0.01310.015
httpDvrs WebSvr 1.0.0310.015
spy-netSpy-Net or CyberGate backdoor300.014
httpVideoDR-S300.014
httpnginx1.1.10300.014
httpMini ASP Web Server300.014
httpIndy9.00.10300.014
httpGoldStar iPECS 50B PBX http config300.014
httpGeneric router http config300.014
httpCherryPy httpd3.2.0300.014
httpWebServer4.6.2.0290.014
httpSmall Home Server httpd290.014
httpHttpFileServer httpd2.3 beta290.014
httpHttpd1.0290.014
httpApache1.3.34290.014
httpSEEnergy SVR-116280.013
httpMWS1.2.0280.013
httpise GmbH HTTP-Server v2.0280.013
httpDavid WebBox httpd11.00a.0636280.013
httpu-Server270.013
httpTP-LINK WR941N WAP http config270.013
httpTeamViewer httpd270.013
httpnginx1.2.3270.013
httpIndyIndy270.013
httpIMSPntml2.0270.013
httpHenry1.1270.013
httpGoAhead-Webs2.5.0270.013
httpD-Link DCS-3220G webcam http config270.013
httpD-Link DCS-2121 webcam http config270.013
httpApache2.2.0270.013
httpApache2.0.40270.013
httpVideo server260.012
httpnginx0.8.52260.012
httpnginx0.6.35260.012
httpFRITZ!Box http config260.012
httpApache2.0.50260.012
httpAllegro RomPager4.03260.012
upnpConexant-EmWeb6.1.0250.012
httpVivotek Video Server250.012
httpMultView WEB Server V1.1250.012
httpiCanWebServer1.1250.012
httpfec1.0 (Funkwerk BOSS)250.012
httpCasi-Rusco camera/Bestelco VoIP phone http config250.012
sslTLS1.0240.011
httpTP-LINK WR841N WAP http config240.011
httpnginx0.8.55240.011
httpIQhttpD1.0 07oct2007240.011
sshOpenSSH3.9p1230.011
httpPanasonic DVR slinger http config1.1a230.011
httpnginx1.1.19230.011
httpMilestone XProtect video surveillance http interface230.011
httpMiktotik Dude network monitor230.011
httpMerlin Carwash230.011
httpiPACS Prism Imaging Server 5.0(1263)230.011
httpHTTPD230.011
httpgateway230.011
httpBuffalo AirStation http config230.011
httpApache1.3.31230.011
directconnectDirect Connect P2P230.011
ircUnreal ircd220.01
httpWindWebWindWeb220.01
httpWEB SERVER220.01
httpIBM HTTP Server220.01
httpHttpFileServer httpd2.0 beta38220.01
httpFortinet VPN/firewall http config220.01
httpBeck IPC@CHIP embedded httpd220.01
httpantid220.01
ftpPure-FTPd220.01
smtpPostfix smtpd210.01
http-proxySquid http proxy2.6.STABLE21210.01
http-proxyMikroTik http proxy210.01
httpPLKWebServer210.01
httpnginx1.2.2210.01
httplighttpd1.4.8210.01
httpIpswitch WS_FTP http config1.0210.01
httpDavid-WebBox12.00a (0781) WIN32210.01
httpCherryPy httpd2.2.1210.01
httpthttpd2.19-MX Jan 9 2008200.009
httpSun ONE Web Server6.1200.009
httpEmbedded Web Server200.009
httpDVSS Herculese DVR http config1.0200.009
httpAllegro RomPager3.05200.009
smtp190.009
httpVB190.009
httpVA Web Server190.009
httpU S Software Web Server190.009
httpTP-LINK WR340G WAP http config190.009
httpthttpd2.19-MX Sep 1 2008190.009
httpTED 5000 power use monitor190.009
httpNetgear FVS318 router http config190.009
httplighttpd1.4.31190.009
httpi3 micro or Linksys SPA400 VoIP gateway http config190.009
httpHP StorageWorks AG118A tape autoloader http config190.009
httpDavid WebBox httpd12.00a.0780190.009
httpApache2.0.58190.009
sshOpenSSH5.1p1180.009
sshMikroTik RouterOS sshd180.009
httpthttpd2.19-MX Jan 24 2006180.009
httpTeleEye1.1180.009
httpSnom 300 VoIP phone http config180.009
httpnginx1.1.0180.009
httpnginx1.0.13180.009
httpNetPort httpd1.1180.009
httpMicrosoft-WinCE5.0180.009
httpMicrosiga httpd180.009
httplighttpd1.4.11180.009
httpIPC180.009
httpCrestron PRO2 automation system web server180.009
httpBoa HTTPd0.94.11180.009
httpApache2.2180.009
httpAllegro RomPager4.06180.009
httpADH-Web httpd180.009
smtpMicrosoft Exchange smtpd170.008
httpStanley NT500 access control system httpd170.008
httpnginx0.8.47170.008
httplighttpd1.4.18170.008
httpH264WebCam170.008
httpDigifort Enterprise 6.5 httpd170.008
soapgSOAP soap2.7160.008
httpVirata-EmWeb6.2.1160.008
httpTP-LINK WR741N WAP http config160.008
httpthttpd2.19-MX Jul 16 2009160.008
httpSipura SPA VoIP http config160.008
httpRapidLogic httpd1.1160.008
httpQNAP TS-219P NAS http config1.0160.008
httpnginx0.7.33160.008
httpMicrosoft Windows Media Server9.6.7600.16564160.008
httpD-Link DCS-6620G webcam http config160.008
httpDavid WebBox httpd12.00a.0738160.008
httpbozohttpd20040823160.008
httpApache2.0.48160.008
http2Wire HomePortal touer http config160.008
ftpvsftpd (before 2.0.8) or WU-FTPD160.008
httpZ-World Rabbit microcontroller httpd150.007
httpWaveplus HTTPD150.007
httpTridium Niagara httpd3.6.31150.007
httpSiemens Gigaset A580 or S450 VoIP phone http config150.007
httpSagem F@st router httpd150.007
http-proxyF5 BIG-IP load balancer http proxy150.007
httpnginx0.6.32150.007
httplighttpd1.4.22150.007
httpiPACS Prism Imaging Server 5.0(1418)150.007
httpIndy9.0.50150.007
httpD-Link DCS-6620 webcam http config150.007
httpDebut embedded httpd1.08150.007
httpDavid WebBox httpd11.00a.0715150.007
httpAxigen webmail httpd150.007
httpAvigilonGateway1.0 Microsoft-HTTPAPI150.007
httpApache2.0.47150.007