Overview of services running on Port 4444 TCP.
~123 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version Count Percent
sslTLSv13871131.371
no match-/--/-2236818.127
httpApache2169517.581
sslSSLv3113529.2
ircDancer ircd34812.821
telnetCisco router telnetd32682.648
http24972.024
chatAIM or ICQ server19421.574
httpSonicWALL17201.394
honeypothoneyd cmdexe.pl12541.016
httpApache2.2.811520.934
eggdropEggdrop IRC bot console1.6.2011030.894
eggdropEggdrop irc bot console1.6.19+ctcpfix8020.65
sshOpenSSH4.35130.416
httpMicrosoft HTTPAPI httpd2.04780.387
httpSecure Computing Sidewinder firewall http admin4010.325
httplighttpd1.4.193940.319
eggdropEggdrop IRC bot console1.6.213330.27
httpAIM1.02810.228
httpJetty5.1.x2790.226
sslTLS1.02730.221
httpMicrosoft IIS httpd2530.205
http-proxySquid http proxy2370.192
httpApache2.2.92100.17
vncVNC1870.152
httpGoAhead-Webs httpd1670.135
httpthttpd2.25b1660.135
eggdropEggdrop irc bot console1.6.181400.113
httpBoa HTTPd0.94.14rc211380.112
irc-proxypsyBNC2.3.2-61350.109
ssh1170.095
httpZNC IRC bouncer http config0.097 or later1100.089
eggdropEggdrop irc bot console1.6.191020.083
directconnectDirect Connect P2P990.08
httpNetwave IP camera http config980.079
httplighttpd1.4.29980.079
sshDropbear sshd0.52920.075
httplighttpd1.4.28910.074
httpApache Tomcat/Coyote JSP engine1.1880.071
httpMicrosoft IIS httpd6.0860.07
httpJetty6.0.x840.068
httpApache2.2.3780.063
httpApache2.2.14780.063
ovm-managerOracle VM Manager770.062
backdoorOptixPro backdoor760.062
sshOpenSSH5.3740.06
httpAvtech AVN801 network camera1.0740.06
httpthttpd730.059
httpJetty7.x.y-SNAPSHOT720.058
remotingMS .NET Remoting services710.058
ircUnreal ircd710.058
httpthttpd2.24690.056
httpMicrosoft IIS httpd5.1690.056
ftpMicrosoft ftpd680.055
telnet660.053
ripbotRipBot video encoding server660.053
smtpMicrosoft ESMTP7.5.7601.17514650.053
httpGeoVision GeoHttpServer for webcams630.051
httpThin1.4.1620.05
httpApache2.2.16600.049
sshOpenSSH5.1p1 Debian 5590.048
httpJetty6.1.x580.047
http-proxy3Proxy http proxy550.045
httpTBSR2 UPnP520.042
httpApache2.2.22510.041
sshOpenSSH5.3p1 Debian 3ubuntu7500.041
ftp480.039
arcserveARCserve Discovery460.037
sshOpenSSH5.5p1 Debian 6+squeeze2450.036
httpDraytek Vigor ADSL router webadmin450.036
telnetRoku SoundBridge telnetd3.0.44440.036
httpSockso personal music player httpd430.035
sshOpenSSH5.9p1 Debian 5ubuntu1420.034
httpMicrosoft IIS httpd7.5420.034
shellw4ck1ng-shell0.3410.033
httpHikvision-Webs400.032
ftpServ-U ftpd400.032
ftpPure-FTPd400.032
xml380.031
sshOpenSSH5.8380.031
kerberosHeimdal Kerberos380.031
httpOracle Universal Content Management httpd380.031
httpmini_httpd1.19 19dec2003380.031
httpuTorrent WebUI360.029
sslMicrosoft IIS SSL340.028
httpCitrix Metaframe ICA Browser340.028
sshOpenSSH5.4p1330.027
httpXymphony-WS330.027
httpVirata-EmWeb6.0.1330.027
vncRealVNC Enterprise310.025
upnpPortable SDK for UPnP1.3.1310.025
netbios-ssn310.025
http-proxySquid http proxy2.7.STABLE9300.024
httplighttpd1.4.30300.024
httpthttpd2.25b 29dec2003280.023
http-proxySquid http proxy2.6.STABLE12280.023
httpMbedthis-Appweb2.0.4280.023
httpPDR-M8001.0270.022
httpApache2.2.15270.022
sshOpenSSH5.5p1 Debian 6+squeeze1260.021
httpBoa HTTPd0.94.13260.021
svnserveSubversion250.02
rsync250.02
httpuTorrent utserver web interface250.02
httpRouter250.02
httpnginx250.02
vnc240.019
httpAllegro RomPager4.07 UPnP/1.0240.019
sshMikroTik RouterOS sshd220.018
httpUbicom1.1220.018
httpSockso music server220.018
httpKskServer220.018
sshOpenSSH5.2210.017
openvpnOpenVPN210.017
httpuc-httpd1.0.0210.017
httpBoa HTTPd0.93.15210.017
ftpvsftpd2.0.8 or later210.017
sshOpenSSH5.9200.016
httpMicrosoft ISA httpd190.015
httpDirectAdmin Daemon v1.41.0190.015
httpApache2.2.21190.015
httpApache2.2.17190.015
vncRealVNC Personal180.015
sshOpenSSH5.8p1 Debian 7ubuntu1180.015
meterpreterMetasploit meterpreter180.015
httpnginx1.2.1180.015
httpMiniServ1.550180.015
httpiKeyGuard1.0180.015
httpDirectAdmin Daemon v1.41.1180.015
httpADTRAN180.015
sshOpenSSH3.9p1170.014
http-proxyMikroTik http proxy170.014
http-proxyCCProxy http proxy170.014
httpIntoto httpd1.0170.014
httpGadspot/Avtech AV787 webcam http config170.014
httpApache Tomcat3.2.4170.014
sshOpenSSH6.0p1 Debian 2160.013
jetdirectJetDirect160.013
httpWangWnagSimpleServer1.0160.013
httpmonocle0.17160.013
httplighttpd160.013
httpGoAhead-Webs160.013
httpCross Web Server160.013
ftpFileZilla ftpd0.9.41 beta160.013
smtp150.012
httpuhttpd1.0.0150.012
http-proxyEZproxy web proxy150.012
httpMicrosoft IIS httpd7.0150.012
httpLinksys router http config150.012
httpDVR Systems webcam http interface150.012