Overview of services running on Port 4000 TCP.
~190 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version InfoOSDevicetypeCount Percent
no match10124553.221
http188539.91
ircDancer ircd40932.152
httpSonicWALLfirewall37211.956
eggdropEggdrop IRC bot console1.6.2131671.665
httpApache2.2.16(Debian) PHP/5.3.3-7+squeeze1 with Suhosin-Patch mod_ssl/2.2.22 OpenSSL/1.0.131591.661
sshCisco/3com IPSSHd6.5.0protocol 2.027221.431
sslSSLv326241.379
chatAIM or ICQ server24561.291
httpwg_httpd1.0(based Boa23701.246
rifa-dvrRifatron DVRwebcam19381.019
donkeyMLDonkey multi-network P2P server control portIP disallowed19241.011
sshOpenSSH4.3protocol 2.015610.821
arcserveARCserve Discovery12300.647
httpTopsecOS11790.62
diablo2Diablo 2 game server10980.577
httpWEBrick httpd1.3.1Ruby 1.9.3 (2011-10-30)8640.454
httpHttpd1.07910.416
httpAvtech AVN801 network camera1.0UPnP 1.0webcam7570.398
httpGeoVision GeoHttpServer for webcamswebcam7100.373
httpAIM1.07090.373
httpMicrosoft IIS httpd6.0Windows6620.348
telnetthe MIPU Telnet Server6520.343
httpSNF0.16510.342
httpCross Web Server6230.327
httpThin1.2.4codename Flaming Astroboy6180.325
httpNetwave IP camera http configwebcam6070.319
httpBoa HTTPd0.94.14rc215590.294
httpmini_httpd1.19 19dec20035150.271
httpApache2.2.14(Unix)5050.265
httplighttpd1.4.294930.259
http-proxy3proxy http proxyauthentication required4870.256
httpThin1.3.1codename Triple Espresso4850.255
httplighttpd1.4.194750.25
httpBoa HTTPd0.94.134700.247
httpVirata-EmWeb6.0.1Netscreen administrative web serverfirewall4670.245
mysqlMySQL5.0.51a-24+lenny5-log4340.228
httpApache4250.223
audioworksAudioWorks sound serverIRIX3870.203
httpuc-httpd1.0.03780.199
httpHikvision-Webs3770.198
vncVNCprotocol 3.83230.17
httpD-Link DIR-300 WAP http adminWAP2800.147
httpApache Tomcat/Coyote JSP engine1.12790.147
httpDraytek Vigor ADSL router webadminbroadband router2670.14
httpApache2.2.142630.138
httpApache2.2.15(Unix) PHP/5.3.3-7+squeeze13 with Suhosin-Patch mod_ssl/2.2.15 OpenSSL/0.9.8o2540.134
httpALT-N SecurityGateway httpd2.0.72540.134
httpMicrosoft HTTPAPI httpd2.0SSDP/UPnPWindows2400.126
httpApacheSSL-only mode2230.117
httpMicrosoft IIS httpd7.5Windows2220.117
httpGadspot/Avtech AV787 webcam http configwebcam2180.115
httpTBSR2 UPnP2100.11
socks-proxySocks4A2030.107
httpGoAhead-Webs httpd2030.107
telnet2020.106
httpPDR-M8001.01940.102
mysqlMySQL4.1.181910.1
httpThin1.4.1codename Chromeo1890.099
httpthin 1.2.11 codename Bat-Shit Crazy1890.099
httpApache1.3.22(Unix)1880.099
svnserveSubversion1820.096
httpMongrel httpd1.1.51750.092
httpDVR Systems webcam http interfacewebcam1750.092
ftpMicrosoft ftpdWindows1750.092
telnetLinux telnetdLinux1700.089
httpthttpd2.25b 29dec20031700.089
httpMbedthis-Appweb2.0.41650.087
httpMicrosoft IIS httpd1590.084
httpApache1.3.61560.082
httpGoAhead-Webs embedded httpd1530.08
irc-proxyShroudBNC irc-proxy1.2 revision 10801520.08
telnetMLDonkey telnetd3.1.01450.076
httpWangWnagSimpleServer1.01440.076
httpGemtek0.8991390.073
httplighttpd1.4.261360.071
httpGoldStar iPECS 50B PBX http configPBX1320.069
httpMicrosoft IIS httpd5.0Windows1310.069
httpIBM_HTTP_Server6.0.2.27 Apache1260.066
remotingMS .NET Remoting services1220.064
httpSecure Computing Sidewinder firewall http adminfirewall1220.064
vncRealVNC Personalprotocol 4.01210.064
ircUnreal ircd1190.063
http-proxyEZproxy web proxy1160.061
httpApache2.2.22(Unix)1160.061
ericomEricom PowerTermWebConnect1.0Windows1160.061
upnpPortable SDK for UPnP devices1.3.1Linux 2.6.21; UPnP 1.0Linux1130.059
httpMicrosoft IIS httpd7.0Windows1120.059
httpDrcomServer1.01090.057
vncVNCprotocol 3.61040.055
httpthttpdPanasonic BB-HCM511 IP camera http config1020.054
telnetSMC SMC2870W Wireless Ethernet Bridgebridge1000.053
sshprotocol 1.5990.052
httplighttpd1.4.28990.052
httpApache2.2.22(Unix) PHP/5.3.10960.05
httpCatalyst Framework httpd5.90007950.05
iceInternet Communications Engine940.049
httplighttpd1.4.20930.049
ftp930.049
httpApache2.2.2(Fedora)920.048
telnetMLDonkey telnetd3.0.7910.048
httpAirlink 101 or TRENDnet TVIP-422w webcam http configwebcam900.047
ntop-httpNtop web interface3.3Linux850.045
httpALT-N SecurityGateway httpd2.0.6840.044
vncprotocol 3820.043
soapgSOAP soap2.6810.043
httpthttpd2.25b800.042
httpRemotelyAnywhere remote PC management httpd8.0.668800.042
httpOracleAS Web Cache 10g9.0.4.0.0800.042
httpApache1.3.9 (Unix) (Red Hat790.042
httpthttpd2.24 26oct2003780.041
httpApache2.2.3(CentOS)780.041
telnetMLDonkey telnetd2.9.3770.04
httpuTorrent WebUIWindows770.04
httpTechno Vision Security System http config2.0webcam750.039
telnetMLDonkey telnetd3.0.3730.038
httpMicrosoft IIS httpd5.1Windows730.038
sshOpenSSH5.3protocol 2.0720.038
telnetMLDonkey telnetd3.0.0690.036
sslTLS1.0690.036
telnetMLDonkey telnetd3.0.6680.036
httpNetgear DG834G router http configrouter680.036
httpGM Streaming Server httpdwebcam680.036
rtsp670.035
httpUbuntulucid UPnP670.035
httpNetgear DG834 router http configbroadband router660.035
sshOpenSSH5.1p1 Debian 5protocol 2.0Linux650.034
httpApache2.2.14(Ubuntu)650.034
httpThin1.2.7codename No Hup640.034
httpWindWeb2.0620.033
httpWorld Client WDaemon httpd4.0Alt-N MDaemon webmailWindows610.032
httpGeneral User610.032
httpstreamts600.032
telnetMLDonkey telnetd3.0.0.CVS580.03
httpVirata-EmWeb6.0.1580.03
httpAllegro RomPager4.07 UPnP/1.0ZyXEL ZyWALL 2580.03
secure-socketCA Secure Socket Adapter570.03
httpApache2.2.13(Unix) DAV/2 PHP/5.2.11540.028
vncRealVNC Enterpriseprotocol 4.1530.028
telnetMLDonkey telnetd3.0.1530.028
sshprotocol 2.0510.027
activemqApache ActiveMQ510.027
upnpMicrosoft Windows UPnPWindows500.026
sshOpenSSH5.5p1 Debian 6+squeeze2protocol 2.0Linux500.026
httpApache2.2.16(Debian)500.026
directconnectDirect Connect P2PWindows500.026
http-proxyMikroTik http proxy490.026
httpBoa httpd480.025
httpdcs-lig-httpd470.025
httpnginx1.0.10Phusion Passenger 3.0.11 (mod_rails/mod_rack)460.024
ftpFileZilla ftpd0.9.41 betaWindows460.024
httpAllegro RomPager4.51 UPnP/1.0ZyXEL ZyWALL 2450.024
tandem-printSharp printer tandem printingprinter440.023
httpTwistedWeb httpd8.2.0440.023
httpTRENDnet TV-IP100 or TV-IP110 webcam display httpdwebcam440.023
httpthttpd2.24430.023
httpApache2.2.22(Unix) mod_ssl/2.2.22 OpenSSL/1.0.0h430.023
httpALT-N SecurityGateway httpd2.0.4420.022
ftpServ-U ftpdSSL RequiredWindows420.022
httpnginx410.022
ftpPure-FTPd400.021
httpWEBrick httpd1.3.1Ruby 1.8.7 (2010-08-16)380.02
telnetMLDonkey telnetd3.1.1370.019
http-proxyCCProxy http proxyunauthorizedWindows370.019
httpApache2.2.8PHP/5.2.4-2ubuntu5.3 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g mod_perl/2.0.3 Perl/v5.8.8370.019
telnetMLDonkey telnetd3.1.2360.019
httpWEBrick httpd1.3.1Ruby 1.9.3 (2012-04-20)360.019
http-proxySquid http proxy2.7.STABLE9360.019
httpVivotek IP7131 Network Camera http configwebcam350.018
httplighttpd350.018
httpApache2.2.3350.018
httpNode.jsExpress middleware340.018
httpGoAhead-Webs340.018
httpDVR340.018
ftpvsftpd2.0.8 or later340.018
sshDropbear sshd0.52protocol 2.0Linux330.017
httpIntoto httpd1.0330.017
sslMicrosoft IIS SSLWindows320.017
httpMiniServ0.01Webmin httpd320.017
openvpnOpenVPN310.016
xml300.016
sshOpenSSH5.3p1 Debian 3ubuntu7Ubuntu Linux; protocol 2.0Linux300.016
sshOpenSSH4.3p2protocol 2.0300.016
sshOpenSSH3.9p1protocol 1.99300.016
socks5300.016
rtspAvtech MPEG4 DVR control rtspd300.016
httpQNAP TS-219P NAS http config1.0storage-misc300.016
httpTRENDnet TV-IP110w or TV-IP422W webcam display httpdwebcam290.015
httpMS-SDK-HttpServer1.0290.015
httpApache2.2.22(Ubuntu)290.015
ftpMikroTik router ftpd3.30router290.015
sshOpenSSH3.9p1protocol 2.0280.015
httpnginx1.0.10280.015
httpJetty6.1.x280.015
httpHTTPServer280.015
telnetMLDonkey telnetd2.9.5.CVS270.014
smtpPostfix smtpd270.014
httpthttpd270.014
httpRemotelyAnywhere remote PC management httpd10.0.1086270.014
httpApache2.2.22(Unix) mod_ssl/2.2.22 OpenSSL/1.0.0g270.014
httpApache2.2.17(Ubuntu)270.014
donkeyMLDonkey multi-network P2P server control port2.8.2270.014
sshOpenSSH5.9p1 Debian 5ubuntu1Ubuntu Linux; protocol 2.0Linux260.014
httpNetgear DG834GT router http configrouter260.014
httpMiniServ1.580Webmin httpd260.014
httpMikroTik router config httpdRouterOSrouter260.014
httpImagiaTekNetwork Card Manager260.014
httpIcecast streaming media server260.014
httphttpd 1.1260.014
httpApache2.2.3(Red Hat)260.014
sshOpenSSH5.8protocol 2.0250.013
httpuClinux-httpd0.2.2DxClient NetViewer DVR viewer 2.6.8.97Linux250.013
lnsLegalis Intranet legal information server240.013
httpWEBrick httpd1.3.1Ruby 1.9.3 (2012-02-16)240.013
httpVivotek 3102 Camera http configwebcam240.013
httpnginx0.8.54240.013
telnetthe MRV Communications' LX Series Server230.012
httpWEBrick httpd1.3.1Ruby 1.9.2 (2011-07-09)230.012
httpW3MFC1.68230.012
httpApache2.0.53(Win32) PHP/5.1.4230.012
sshOpenSSH5.4p1FreeBSD 20100308; protocol 2.0FreeBSD220.012
mysqlMySQLunauthorized220.012
httpWYM httpd1.0IP-Video embedded camera http configwebcam220.012
httpMS .NET Remoting httpd.NET CLR 2.0.50727.3634Windows220.012
httpGoAhead-Webs httpdLogiLink WC0002B webcam http config220.012
httpApache2.2.15(CentOS)220.012
httpApache1.3.28(SolutionIP) PHP/5.0.4 mod_perl/1.28 mod_ssl/2.8.15 OpenSSL/0.9.7b220.012
telnetthe MRV Communications' LX Series Console Server210.011
telnetMLDonkey telnetd2.9.5210.011
nntpINN nntpdposting ok210.011
netbios-ssn210.011
http-proxySquid http proxy2.6.STABLE21210.011
httpMicrosoft HTTPAPI httpd1.0SSDP/UPnPWindows210.011
httpHP Integrated Lights-Out http configremote management210.011
httpD-Link/Airlink IP webcam http config1.0webcam210.011
httpBoa HTTPd0.93.15210.011
httpApache0.6.5210.011
sshOpenSSH5.8p1 Debian 7ubuntu1Ubuntu Linux; protocol 2.0Linux200.011
sshCisco SSH1.25protocol 2.0IOS200.011
smtpMicrosoft Exchange smtpdWindows200.011
httpZ-World Rabbit200.011
httpLinksys router http configdevice model BEFSX41WAP200.011
httphttp server 1.0200.011
httpApache2.2.14(Unix) mod_ssl/2.2.14 OpenSSL/0.9.8l mod_perl/2.0.4 Perl/v5.10.0200.011
httpApache1.3.28(SolutionIP) mod_perl/1.28 mod_ssl/2.8.15 OpenSSL/0.9.7b200.011
ftpGene6 ftpd3.9.0 build 2Windows200.011