Overview of services running on Port 2002 TCP.
~520 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version InfoOSDevicetypeCount Percent
rpcapdWinPcap remote packet capture daemonWindows14784228.386
sslSSLv311292621.682
no match10249519.679
telnetCisco IOS telnetdIOSswitch322126.185
telnet289355.556
telnetCisco router telnetdIOSrouter215434.136
telnetCisco 1721 router telnetdIOSrouter176983.398
http138882.667
ircDancer ircd40880.785
httpSonicWALLfirewall40410.776
chatAIM or ICQ server27170.522
sshOpenSSH4.3protocol 2.023830.458
telnetUsually a Cisco/3com switchIOSswitch20650.396
sslTLSv119860.381
sshprotocol 2.013900.267
httpLogMeIn httpd4.0.784Windows11000.211
httpMicrosoft IIS httpd8560.164
httpAIM1.06960.134
httpBoa HTTPd0.94.14rc216320.121
httpWangWnagSimpleServer1.05050.097
irc-proxyShroudBNC irc-proxy1.1 revision 3714850.093
httpCisco Secure ACS loginIOS4650.089
httplighttpd1.4.294570.088
httplighttpd1.4.194280.082
httpLotus Expeditor Web Container6.14100.079
httpNetwave IP camera http configwebcam3840.074
sshOpenSSH5.1p1 Debian 5protocol 2.0Linux3830.074
sshOpenSSH5.5p1 Debian 6+squeeze2protocol 2.0Linux3740.072
httpRemotelyAnywhere remote PC management httpd8.0.6683720.071
httpLogMeIn httpd2.30.559Windows3720.071
httpMicrosoft IIS httpd6.0Windows3650.07
httpGateway-Webs3530.068
irc-proxypsyBNC2.3.2-73520.068
httplighttpd1.4.283290.063
telnetLinux telnetdLinux3200.061
httpApache1.3.41(Unix) FrontPage/5.0.2.2635 mod_ssl/2.8.31 OpenSSL/0.9.8i mod_watch/3.122920.056
httpGoAhead-Webs httpd2900.056
sshOpenSSH5.3protocol 2.02730.052
httpLogMeIn httpd4.0.680Windows2660.051
httpMicrosoft IIS httpd5.0Windows2640.051
httpMicrosoft HTTPAPI httpd2.0SSDP/UPnPWindows2610.05
httpIBM WebSphere Application Server6.02400.046
httpAvtech AVN801 network camera1.0UPnP 1.0webcam2310.044
httpt-gate web server2210.042
httpGoAhead-Webs embedded httpd2100.04
httpLogMeIn httpd4.0.734Windows2080.04
httpLotus Notes Expeditor httpd6.11880.036
httpRemotelyAnywhere remote PC management httpd10.0.10861720.033
ftpMicrosoft ftpdWindows1660.032
httpApache2.2.3(CentOS)1570.03
sshOpenSSH5.3p1 Debian 3ubuntu7Ubuntu Linux; protocol 2.0Linux1560.03
httpWeb Server Authentication1490.029
httpApache Tomcat/Coyote JSP engine1.11360.026
httpthttpd2.25b 29dec20031330.026
httpApache1270.024
httpRemotelyAnywhere remote PC management httpd8.0.7471240.024
rtsp1160.022
httpthttpdPanasonic BB-HCM511 IP camera http config1140.022
sshOpenSSH5.5p1 Debian 6+squeeze1protocol 2.0Linux1120.022
httpDrcomServer1.01120.022
ftp1110.021
httpIndy9.00.101080.021
httpLogMeIn httpd3.0.606Windows1070.021
sshprotocol 1.51040.02
sshOpenSSH5.1protocol 2.01020.02
httpmini_httpd1.19 19dec20031010.019
sshMikroTik RouterOS sshdprotocol 2.0Linuxrouter970.019
httplighttpd1.4.20960.018
vncVNCprotocol 3.8950.018
smtpPostfix smtpd880.017
httpApache1.3.41870.017
sshOpenSSH5.5p1 Debian 6protocol 2.0Linux850.016
httpthttpd2.24 26oct2003850.016
httpBoa HTTPd0.94.13840.016
sshOpenSSH3.9p1protocol 1.99830.016
httpIndy9.0.11820.016
httpHikvision-Webs820.016
httpPDR-M8001.0810.016
httpMicrosoft IIS httpd7.5Windows810.016
telnetWanMa Network, ****800.015
httpApache2.2.15(CentOS)800.015
httpLotus Expeditor Web Container790.015
httpGeneral User770.015
sshOpenSSH5.9p1 Debian 5ubuntu1Ubuntu Linux; protocol 2.0Linux750.014
httpInnovative Interfaces Innopac httpd110710.014
xfce-sessionXFCE Session Manager700.013
httpCross Web Server700.013
sshOpenSSH5.4p1FreeBSD 20100308; protocol 2.0FreeBSD690.013
httpuc-httpd1.0.0650.012
xml640.012
remotingMS .NET Remoting services590.011
httpHttpd1.0590.011
httpApache0.6.5580.011
sshOpenSSH5.9protocol 2.0570.011
httpRemotelyAnywhere remote PC management httpd8.0.597570.011
httpVirata-EmWeb6.0.1Netscreen administrative web serverfirewall550.011
sshOpenSSH5.8protocol 2.0530.01
httpRemotelyAnywhere remote PC management httpd8.0.605530.01
directconnectDirect Connect P2PWindows530.01
httplighttpd1.4.26520.01
sshOpenSSH4.3protocol 1.99490.009
httpthttpd2.25b490.009
httpMobotix Camera http configwebcam490.009
httphttpd490.009
sslTLS1.0480.009
sshOpenSSH4.7p1 Debian 8ubuntu1.2protocol 2.0Linux470.009
sshCisco SSH1.25protocol 2.0IOS470.009
httpthttpd2.24470.009
httpMicrosoft IIS httpd7.0Windows470.009
arcserveARCserve Discovery470.009
sshOpenSSH4.3p2 Debian 9etch3protocol 2.0Linux460.009
sshDropbear sshd0.52protocol 2.0Linux460.009
httpGadspot/Avtech AV787 webcam http configwebcam460.009
sshOpenSSH2.3.0 mikrotik 2.9protocol 1.99router450.009
httpGoAhead-Webs440.008
socks5430.008
httpGeoVision GeoHttpServer for webcamswebcam430.008
httpuTorrent WebUIWindows420.008
sshOpenSSH5.2protocol 2.0410.008
httpGoAhead-Webs httpdOvislink WAP http configWAP410.008
httpdcs-lig-httpd390.007
httpMicrosoft IIS httpd5.1Windows370.007
httpMbedthis-Appweb2.0.4370.007
telnetCisco 2514 router telnetdIOSrouter360.007
httpDVR Systems webcam http interfacewebcam360.007
sshOpenSSH5.8p1 Debian 1ubuntu3Ubuntu Linux; protocol 2.0Linux350.007
httpDraytek Vigor ADSL router webadminbroadband router350.007
httpApacheSSL-only mode340.007
ftpPure-FTPd340.007
sshOpenSSH3.9p1protocol 2.0330.006
httpGM Streaming Server httpdwebcam330.006
httpD-Link DIR-300 WAP http adminWAP320.006
sshOpenSSH5.8p1 Debian 7ubuntu1Ubuntu Linux; protocol 2.0Linux310.006
socks-proxySocks4A310.006
sshCisco SSH1.25protocol 1.5IOS300.006
sshOpenSSH5.0protocol 2.0290.006
sshOpenSSH4.5p1FreeBSD 20061110; protocol 2.0FreeBSD290.006
http-proxySquid http proxy290.006
httpCisco Secure ACS web interfaceWindows290.006
httpBchat290.006
sshOpenSSH5.5protocol 2.0280.005
httpRemotelyAnywhere remote PC management httpd6.20.467280.005
httpLogMeIn httpd4.0.994Windows280.005
sshOpenSSH5.4protocol 2.0270.005
sshOpenSSH4.3p2 Debian 9etch2protocol 2.0Linux270.005
imondimond fli4l router configrouter270.005
httpD-Link/Airlink IP webcam http config1.0webcam270.005
sshCisco SSH1.25protocol 1.99IOS260.005
nntpINN nntpdposting ok260.005
httpVivotek IP7131 Network Camera http configwebcam260.005
vncprotocol 3250.005
shoutcast-publishingSHOUTcast publishing port250.005
httpRemotelyAnywhere remote PC management httpd7.10.552250.005
httpCordaServer7.2.5.3711 (PopChart250.005
httpCordaServer7.0.1.1366 (PopChart250.005
ftpServ-U ftpd6.4Windows250.005
dominoconsoleLotus Domino Console250.005
sshKojoney SSH honeypotprotocol 2.0240.005
httpRemotelyAnywhere remote PC management httpd9.0.856240.005
sshOpenSSH5.5p1 Debian 4ubuntu6Ubuntu Linux; protocol 2.0Linux230.004
sshOpenSSH3.6.1p2protocol 2.0230.004
httpCCcam card sharing system http config230.004
httpApache2.2.14(Ubuntu)230.004
rifa-dvrRifatron DVRwebcam220.004
http-proxySquid http proxy2.7.STABLE9220.004
ftpvsftpd2.0.8 or later220.004
upnpPortable SDK for UPnP devices1.3.1Linux 2.6.21; UPnP 1.0Linux210.004
telnetFrontier Internet *210.004
sshOpenSSH5.4p1_hpn13v11FreeBSD 20100308; protocol 2.0FreeBSD210.004
sshOpenSSH5.3p1 Debian 3ubuntu6Ubuntu Linux; protocol 2.0Linux210.004
httpTRENDnet TV-IP100 or TV-IP110 webcam display httpdwebcam210.004
httpthttpdPanasonic BB-HCM511A Network camera http configwebcam210.004
httpLogMeIn httpd4.0.732Windows210.004
httplighttpd210.004
httpCordaServer6.0.483210.004
vncVNCprotocol 3.7200.004
vncRealVNC Personalprotocol 4.0200.004
sshOpenSSH4.6protocol 2.0200.004
sshDropbear sshd0.51protocol 2.0Linux200.004
smtp200.004
openvpnOpenVPN200.004
httplighttpd1.4.30200.004
httpIntoto httpd1.0200.004
httpCordaServer6.0.706200.004
httpApache2.2.3(Red Hat)200.004
httpApache2200.004