Overview of services running on Port 4001 TCP.
~294 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version InfoOSDevicetypeCount Percent
telnetCisco router telnetdrouter13478045.763
no match10763336.545
http123624.197
ftpvsftpd2.0.8 or later73922.51
telnetCisco telnetdIOSrouter49651.686
ircDancer ircd40451.373
httpSonicWALLfirewall33611.141
chatAIM or ICQ server23010.781
eggdropEggdrop IRC bot console1.6.2121970.746
sslSSLv317420.591
donkeyMLDonkey multi-network P2P server7860.267
upnpPortable SDK for UPnP devices1.3.1Linux 2.6.21; UPnP 1.0Linux7160.243
httplighttpd6880.234
httpAIM1.05620.191
httpSNF0.14230.144
httplighttpd1.4.294190.142
httplighttpd1.4.194080.139
mysqlMySQL5.0.51a-24+lenny5-log3850.131
httpMicrosoft HTTPAPI httpd2.0SSDP/UPnPWindows3830.13
httpMicrosoft IIS httpd6.0Windows3090.105
httpNetwave IP camera http configwebcam2420.082
irc-proxypsyBNC2.3.2-72170.074
telnet2060.07
httpMicrosoft IIS httpd2040.069
mysqlMySQL4.1.181910.065
httpApache Tomcat/Coyote JSP engine1.11660.056
httpBoa HTTPd0.94.14rc211590.054
httpGoAhead-Webs httpd1410.048
httpwg_httpd1.0(based Boa1350.046
sshOpenSSH4.3protocol 2.01260.043
httpWangWnagSimpleServer1.01130.038
vncVNCprotocol 3.81040.035
ftpMicrosoft ftpdWindows1010.034
httplighttpd1.4.261000.034
httpMongrel httpd1.1.5980.033
remotingMS .NET Remoting services970.033
irc-proxypsyBNC2.3.2-4.6-EuShells.com970.033
httpTBSR2 UPnP960.033
sshprotocol 1.5930.032
httpAvtech AVN801 network camera1.0UPnP 1.0webcam930.032
rtsp810.028
httpOracleAS Web Cache 10g9.0.4.0.0810.028
oracle-tnsOracle TNS Listener800.027
httpApacheSSL-only mode750.025
httpApache730.025
iceInternet Communications Engine670.023
httpthttpd2.24650.022
httpMicrosoft IIS httpd7.5Windows650.022
http-proxyEZproxy web proxy640.022
httpUbuntulucid UPnP590.02
httpSecure Computing Sidewinder firewall http adminfirewall590.02
httpPDR-M8001.0590.02
httpmini_httpd1.19 19dec2003560.019
httpIndy10.0.52540.018
secure-socketCA Secure Socket Adapter520.018
arcserveARCserve Discovery520.018
sslTLSv1510.017
httpHikvision-Webs500.017
httpthttpd2.19-MX Sep 9 2010WAP490.017
httpApache2.2.13(Unix) DAV/2 PHP/5.2.11490.017
httpThin1.3.1codename Triple Espresso460.016
httpthttpd2.25b430.015
httpthttpdPanasonic BB-HCM511 IP camera http config390.013
vncprotocol 3360.012
http-proxySquid http proxy2.7.STABLE9360.012
httpCisco IOS http configIOS360.012
httpBoa HTTPd0.94.13360.012
httpnginx1.0.10Phusion Passenger 3.0.11 (mod_rails/mod_rack)350.012
httpuc-httpd1.0.0340.012
httpMicrosoft IIS httpd7.0Windows330.011
ftp330.011
httpuTorrent WebUIWindows310.011
httpGeoVision GeoHttpServer for webcamswebcam310.011
httpBoa HTTPd0.93.15300.01
httpApache2.2.3(CentOS)300.01
mysqlMySQL5.0.96-log290.01
httpNet-OS 5.xx UPnP1.0290.01
sshprotocol 2.0280.01
httpJetty8.0.y.z-SNAPSHOT280.01
citrix-icaCitrix Metaframe XP ICAWindows280.01
httpCross Web Server270.009
httpGeneral User260.009
httpGadspot/Avtech AV787 webcam http configwebcam260.009
vncVNCprotocol 3.6250.008
httpWebFS httpd1.21250.008
httpthttpd250.008
http-proxySquid http proxy3.1.19250.008
httpMicrosoft IIS httpd5.1Windows250.008
httpMbedthis-Appweb2.0.4250.008
httplighttpd1.4.28250.008
sslTLS1.0240.008
httpImagiaTekNetwork Card Manager240.008
httpGoAhead-Webs240.008
httpApache2.2.22(Unix) mod_ssl/2.2.22 OpenSSL/1.0.0h; SSL-only mode240.008
ericomEricom PowerTermWebConnect1.0Windows240.008
bnetdbnetd open source Blizzard Battlenet server230.008
sshOpenSSH5.1p1 Debian 5protocol 2.0Linux220.007
httpHttpd1.0220.007
httpDVR Systems webcam http interfacewebcam220.007
upnpMicrosoft Windows UPnPWindows210.007
sshOpenSSH5.3p1 Debian 3ubuntu7Ubuntu Linux; protocol 2.0Linux210.007
vncRealVNC Personalprotocol 4.0200.007
sslMicrosoft IIS SSLWindows200.007
httpMicrosoft IIS httpd5.0Windows200.007
httpApache2.2.3200.007