Overview of services running on Port 2103 TCP.
~83 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version Count Percent
netbios-ssnNepenthes honeypot netbios-ssn2559830.523
telnet1874022.346
http1048712.505
no match-/--/-67118.002
ircDancer ircd40304.805
httpSonicWALL36904.4
chatAIM or ICQ server21942.616
telnetCisco IOS telnetd20762.475
sslSSLv317292.062
telnetCisco 1721 router telnetd15481.846
http-proxyEZproxy web proxy12481.488
httpAIM1.06270.748
httplighttpd1.4.194410.526
httplighttpd1.4.294090.488
httpWangWnagSimpleServer1.02580.308
httpGateway-Webs2530.302
httpApache2.2.32310.275
httpMicrosoft IIS httpd6.02230.266
httpGoAhead-Webs httpd1620.193
sslTLS1.01400.167
ftpMicrosoft ftpd1170.14
httpMicrosoft HTTPAPI httpd2.0970.116
ssh940.112
httpApache Tomcat/Coyote JSP engine1.1870.104
httpMicrosoft IIS httpd850.101
httpNetwave IP camera http config740.088
httpAvtech AVN801 network camera1.0710.085
httpApache2.2.14700.083
httpthttpd2.24620.074
telnetCisco router telnetd600.072
httpBoa HTTPd0.94.14rc21560.067
httpApache560.067
vncVNC510.061
ftp500.06
httpPDR-M8001.0480.057
httpApache2.2.15380.045
ftpProFTPD320.038
arcserveARCserve Discovery300.036
nntpINN nntpd280.033
httpmini_httpd1.19 19dec2003270.032
httpApache2.2.22250.03
http-proxySquid http proxy2.7.STABLE9230.027
httpGoAhead-Webs230.027
sshOpenSSH3.8.1p1 Debian 8.sarge.6220.026
ftpvsftpd2.0.8 or later220.026
ftpPure-FTPd220.026
httpthttpd2.24 26oct2003210.025
httpthttpd210.025
httpApache2.2.11210.025
httpApache1.3.37210.025
httpuTorrent WebUI190.023
httpthttpd2.25b190.023
httpHikvision-Webs190.023
httpGoAhead-Webs embedded httpd190.023
httpApache2.2.17190.023
httpApache2.2.16190.023
httpApache2.0.53190.023
httpMbedthis-Appweb2.0.4170.02
upnpPortable SDK for UPnP devices1.3.1160.019
sshOpenSSH4.3160.019
httpApache2.2.9160.019
httpApache1.3.28160.019
telnetFrontier Internet *150.018
httpuc-httpd1.0.0150.018