Overview of services running on Port 2396 TCP.
~26 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Count Percent
http528219.649
ircDancer ircd373513.894
httpSonicWALL352113.098
httpWusage httpd26589.888
telnetCisco IOS telnetd21157.868
chatAIM or ICQ server15275.68
telnet14025.215
no match-/-9523.541
httplighttpd8583.192
httpAIM6642.47
http-proxyEZproxy web proxy4811.789
httpApache3301.228
httpMicrosoft IIS httpd3071.142
httpGateway-Webs2310.859
telnetCisco 1721 router telnetd1920.714
httpthttpd1270.472
httpDrcomServer1.01210.45
httpWangWnagSimpleServer1020.379
httpGoAhead-Webs embedded httpd900.335
ssh870.324
httpGoAhead-Webs850.316
httpApache Tomcat/Coyote JSP engine810.301
httpAvtech AVN801 network camera710.264
httpNetwave IP camera http config700.26
httpPDR-M800550.205
sshOpenSSH540.201
httpBoa HTTPd540.201
vncVNC360.134
httpmini_httpd290.108
ftpMicrosoft ftpd290.108
nntpINN nntpd260.097
telnetCisco router telnetd240.089
httpnginx230.086
upnpPortable SDK for UPnP devices220.082
mysqlMySQL210.078
httpuc-httpd200.074
httpHikvision-Webs180.067
bittorrentBittorrent P2P client170.063
httpDVR Systems webcam http interface160.06
http-proxySquid http proxy150.056
httpGadspot/Avtech AV787 webcam http config150.056
httpCross Web Server140.052
sslTLS130.048
httpuTorrent WebUI130.048
httpMicrosoft HTTPAPI httpd130.048
httpGeoVision GeoHttpServer for webcams130.048
remotingMS .NET Remoting services120.045
http-proxyF5 BIG-IP load balancer http proxy120.045
ftpFileZilla ftpd120.045
httpMbedthis-Appweb110.041
httpAIM HTTP110.041
ftpProFTPD110.041
smtpMicrosoft Exchange smtpd100.037
ftpvsftpd (before 2.0.8) or WU-FTPD100.037