Overview of services running on Port 5003 TCP.
~67 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version Count Percent
no match-/--/-2897043.095
http1241418.467
sslSSLv350137.457
ircDancer ircd40275.991
httpSonicWALL36855.482
chatAIM or ICQ server21583.21
httpthttpd6500.967
httpAIM1.06050.9
httpApache2.2.225110.76
httpGoAhead-Webs httpd4550.677
httplighttpd1.4.294270.635
httplighttpd1.4.194030.599
httpTornadoServer2.03220.479
httpTornadoServer2.12790.415
httpNetwave IP camera http config2680.399
httpSlingbox remote streaming httpd2520.375
remotingMS .NET Remoting services2440.363
httpBoa HTTPd0.94.14rc212390.356
httpMicrosoft IIS httpd6.02300.342
ftpMicrosoft ftpd1760.262
httpMicrosoft HTTPAPI httpd2.01720.256
vncVNC1580.235
httpMicrosoft IIS httpd1510.225
openvpnOpenVPN1380.205
rtsp1250.186
httpApache Tomcat/Coyote JSP engine1.11120.167
httpAvtech AVN801 network camera1.01060.158
telnet1050.156
httpApache980.146
ssh960.143
tandem-printSharp printer tandem printing890.132
httpApache2.2.16870.129
telnetVOIM24, remote maintenance750.112
sslTLSv1700.104
httpthttpd2.25b700.104
httpApache2.2.21700.104
httpthttpd2.24640.095
trackmania-gbxTrackMania game GBX remote600.089
httpApache2.2.14580.086
httpPDR-M8001.0570.085
arcserveARCserve Discovery550.082
vnc510.076
http-proxyEZproxy web proxy490.073
httpmini_httpd1.19 19dec2003490.073
httpdcs-lig-httpd460.068
httpBoa HTTPd0.94.13460.068
httpApache2.2.3460.068
httpGoAhead-Webs embedded httpd440.065
http-proxySquid http proxy420.062
httpApache2.2.17410.061
ftp400.06
telnetLinux telnetd380.057
httpthin 1.2.11 codename Bat-Shit Crazy380.057
httpHikvision-Webs380.057
httpthttpd2.19-MX Jul 1 2010360.054
vncRealVNC Enterprise340.051
vncRealVNC Personal330.049
socks5330.049
httpThin1.3.1330.049
sslTLS1.0320.048
httpCross Web Server310.046
telnetCisco router telnetd290.043
httpWSGIServer0.1290.043
httpPanasonic BB-HCM331 Network Camera http config290.043
httplighttpd290.043
sshOpenSSH4.3280.042
httpMicrosoft IIS httpd7.5280.042
httpTRENDnet TV-IP100 or TV-IP110 webcam display httpd270.04
httpApache2270.04
httpDVR Systems webcam http interface260.039
httpClw0.01260.039
http-proxySquid http proxy2.7.STABLE9250.037
rtspGeovision webcam rtspd240.036
httpuc-httpd1.0.0240.036
httpthttpd2.24 26oct2003240.036
httpMbedthis-Appweb2.0.4240.036
httpGeoVision GeoHttpServer for webcams240.036
httpApache1.3.41230.034
mysqlMySQL5.0.19-nt220.033
httpthttpd2.25b 29dec2003220.033
http-proxySquid http proxy2.6.STABLE12210.031
httplighttpd1.4.20210.031
httpCherryPy httpd3.2.0210.031
httpApache2.2.15210.031
ovm-managerOracle VM Manager200.03
httpuTorrent WebUI200.03
httpApache2.2.9200.03
netsupportNetSupport PC remote control190.028
httpAirlink 101 or TRENDnet TVIP-422w webcam http config190.028
httpNetwork Camera180.027
httplighttpd1.4.26180.027
httpD-Link/Airlink IP webcam http config1.0180.027
httpApache2.0.63180.027
httpthttpd2.19-MX Oct 19 2011170.025
httpMongrel httpd1.1.5170.025
httplighttpd1.4.28170.025
httpGoAhead-Webs170.025
geovision-audioGeovision webcam audio170.025
sshOpenSSH5.3160.024
httpMicrosoft IIS httpd5.1160.024
httpApache2.2.13160.024
ftpvsftpd2.0.8 or later160.024
ftpPure-FTPd160.024
sshOpenSSH5.5p1 Debian 6+squeeze2150.022
http-proxyF5 BIG-IP load balancer http proxy150.022
httpnginx150.022
httpMicrosoft IIS httpd7.0150.022
httpApache2.2.11150.022