Overview of services running on Port 85 TCP.
~211 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version InfoOSDevicetypeCount Percent
http3315215.683
httpApache196599.3
httpNetwave webcam http configwebcam75653.579
httpApache1.3.37(Unix) PHP/5.2.970423.331
httpMicrosoft IIS httpd6.0Windows69343.28
httpuc-httpd1.0.064613.056
httpmini_httpd1.19 19dec200355882.643
httpApache1.3.37(Unix) PHP/5.2.147692.256
httpAvtech AVN801 network camera1.0UPnP 1.0webcam45512.153
httpNetwave IP camera http configwebcam44802.119
httpHikvision-Webs43672.066
httpCross Web Server42762.023
httpGeoVision GeoHttpServer for webcamswebcam42482.01
httpSonicWALLfirewall37781.787
httpD-Link DIR-300 WAP http adminWAP36711.737
httpGoAhead-Webs httpd29581.399
httpMicrosoft IIS httpd7.5Windows28731.359
httpBoa HTTPd0.94.14rc2127351.294
no match25711.216
chatAIM or ICQ server23861.129
httpthttpd2.25b 29dec200321171.001
httpLinux2.x UPnP20190.955
httpBusyBox httpd1.13Linux19380.917
httpMicrosoft IIS httpd18050.854
httpMicrosoft IIS httpd7.0Windows13690.648
httpApache1.3.41(Unix)13590.643
httpApache1.3.37(Unix) mod_ssl/2.8.28 OpenSSL/0.9.8i13350.632
httpDVR Systems webcam http interfacewebcam12420.588
httpBoa HTTPd0.94.1310640.503
httpBusyBox httpdLinuxmedia device10150.48
httpMbedthis-Appweb2.0.49550.452
httpGoAhead-Webs embedded httpd9540.451
httpApache2.2.17(Ubuntu)9350.442
httpGadspot/Avtech AV787 webcam http configwebcam8900.421
httpMicrosoft HTTPAPI httpd2.0SSDP/UPnPWindows8650.409
httpGnway Web Server8350.395
httpApache2.2.228290.392
httpthttpdPanasonic BB-HCM511 IP camera http config8260.391
httpBoa httpd8140.385
httpApache Tomcat/Coyote JSP engine1.18120.384
httpCisco IOS http configIOS7860.372
httpnginx7730.366
httpAllegro RomPager4.51 UPnP/1.0ZyXEL ZyWALL 27710.365
httpDrayTek Vigor 2800-series ADSL router httpdbroadband router7700.364
httpGeneral User7640.361
httplighttpd1.4.287310.346
httpAIM1.07280.344
httpApacheSSL-only mode6980.33
httpdcs-lig-httpd6740.319
httpTroxo IISGuardWindows6120.29
httpBoa HTTPd0.93.156050.286
httplighttpd1.4.265880.278
httpApache1.3.37(Unix) PHP/5.2.9 mod_ssl/2.8.28 OpenSSL/0.9.8i5860.277
httplighttpd1.4.295080.24
httpApache2.2.3(CentOS)5080.24
arcserveARCserve Discovery4960.235
httpMikroTik router config httpdRouterOSrouter4780.226
httplighttpd1.4.194760.225
httpMicrosoft IIS httpd5.0Windows4670.221
httpWindWeb2.04590.217
httpW3MFC1.684580.217
httpTwistedWeb httpd8.2.04330.205
httpApache2.2.14(Ubuntu)4280.202
httpMicrosoft IIS httpd5.1Windows4090.193
httpAirlink 101 or TRENDnet TVIP-422w webcam http configwebcam4020.19
httpD-Link/Airlink IP webcam http config1.0webcam4010.19
httpMikroTik router http configrouter3970.188
httpAllegro RomPager4.07 UPnP/1.0ZyXEL ZyWALL 23900.184
httpApache1.3.33(Unix) PHP/4.4.03730.176
httpApache1.3.33(Debian GNU/Linux) mod_gzip/1.3.26.1a mod_python/2.7.10 Python/2.3.43680.174
httpApache2.2.16(Debian)3650.173
httpMS-SDK-HttpServer1.03550.168
httpApache2.2.16(Debian) PHP/5.3.3-7+squeeze1 with Suhosin-Patch mod_ssl/2.2.22 OpenSSL/1.0.13450.163
httpTRENDnet TV-IP100 or TV-IP110 webcam display httpdwebcam3430.162
httpWebServer(IPCamera_Logo)3110.147
httpW3SVR1.13070.145
httpwg_httpd1.0(based Boa2880.136
httpApache2.2.16(Debian) PHP/5.3.3-7+squeeze1 with Suhosin-Patch mod_ssl/2.2.16 OpenSSL/0.9.8o2760.131
httpSonicWALL firewall http configfirewall2650.125
httpnginx0.9.42620.124
httpGoAhead-Webs httpdLogiLink WC0002B webcam http config2600.123
httpnginx1.2.12590.123
rtspAvtech MPEG4 DVR control rtspd2550.121
httpPDR-M8001.02460.116
httplighttpd1.4.302450.116
httplighttpd2400.114
httpApache2.2.22(Unix) PHP/5.3.102280.108
httpthttpd2.25b-lxc 29dec20032170.103
httpTRENDnet TV-IP110w or TV-IP422W webcam display httpdwebcam2140.101
httpDraytek Vigor ADSL router webadminbroadband router2110.1
httpnginx0.5.341990.094
httpOwnServer1.01890.089
httpnginx1.0.01890.089
httpBoa HTTPd0.94.14rc18-ipcam1890.089
httpD-Link Internet Camera1880.089
httpFC1840.087
httpnginx0.8.541800.085
httpTechno Vision Security System http config2.0webcam1750.083
httpApache2.2.9(Debian) PHP/5.2.6-1+lenny9 with Suhosin-Patch mod_ssl/2.2.9 OpenSSL/0.9.8g1680.079
httphttp servereverfocus1620.077
httpApache2.2.8(Win32) PHP/5.2.61580.075
httpthttpd2.24 26oct20031540.073
httpthttpdPanasonic BB-HCM511A Network camera http configwebcam1530.072
sshOpenSSH4.3protocol 2.01510.071
httpHTTPServer1500.071
httpnginx0.6.341450.069
httpApache2.2.14(Win32) DAV/2 mod_ssl/2.2.14 OpenSSL/0.9.8l mod_autoindex_color PHP/5.3.11450.069
httpApache2.2.22(Ubuntu)1440.068
httpCompuOffice Webserver2.0.0.01430.068
httphttpd 1.11400.066
httpBoa0.94.131370.065
httpuTorrent utserver web interfaceLinux1350.064
httpIndy8.0.251350.064
httpD-Link DCS-900 webcam http configwebcam1350.064
httpthttpd2.19-MX Jul 1 20101340.063
httpWebs1320.062
httpnginx1.0.81320.062
httpWebServer1290.061
httpMicrosoft IISWindows1280.061
httpGoAhead-Webs1280.061
httpDrcomServer1.01280.061
httpTridium Niagara httpd1.1specialized1260.06
httpApache1.3.27(Unix) Debian GNU/Linux mod_gzip/1.3.26.1a mod_python/2.7.8 Python/2.2.21260.06
httpLinksys PAP2 VoIP http configVoIP adapter1250.059
httpD-Link DCS-920 webcam http configwebcam1230.058
httpserver1190.056
httpApache2.2.14(Win32) DAV/2 mod_ssl/2.2.14 OpenSSL/0.9.8l mod_autoindex_color PHP/5.3.1 mod_apreq2-20090110/2.7.1 mod_perl/2.0.4 Perl/v5.10.11190.056
httpTP-LINK WR740N WAP http configWAP1180.056
httpWebFS httpd1.211160.055
httpIQinVision Embedded 1.01160.055
httpMbedthis-Appweb2.4.21150.054
httphttp server 1.01140.054
httpnginx0.7.671130.053
httpDreambox httpdmedia device1120.053
httpDavid WebBox httpd11.00a.07171110.053
httpavtech httpd1.0Postef-8840 ADSL routerbroadband router1100.052
httpTcl-Webserver3.4.21090.052
httpMobotix Camera http configwebcam1090.052
httpApache2.2.9(Debian) mod_python/3.3.1 Python/2.5.21090.052
httpWYM httpd1.0IP-Video embedded camera http configwebcam1080.051
httpApache2.2.22(Unix) mod_ssl/2.2.22 OpenSSL/1.0.0h PHP/5.3.101080.051
httpnginx0.8.451060.05
httpJetty6.1.x1060.05
httpApache2.2.21(Win32) mod_ssl/2.2.21 OpenSSL/1.0.0e PHP/5.3.8 mod_perl/2.0.4 Perl/v5.10.11040.049
http-proxyMicrosoft Foundation Class httpd1.0Windows1020.048
sshOpenSSH5.8p2_hpn13v11FreeBSD 20110503; protocol 2.0FreeBSD1010.048
rtsp1010.048
httpCitrix Metaframe ICA Browser1010.048
sshprotocol 1.5980.046
httpWYM httpd1.0980.046
httpnginx0.9.7970.046
httpGrandstream HT286 VoIP router http configVoIP adapter970.046
httpD-Link DCS-910 webcam http configwebcam970.046
httpwebserver1.0960.045
httpgo1984960.045
httpKerio MailServer http config940.044
httpavtech1.0..Expires940.044
httpApache2.2.17(Win32) mod_ssl/2.2.17 OpenSSL/0.9.8o PHP/5.3.4 mod_perl/2.0.4 Perl/v5.10.1940.044
httpPanasonic BB-HCM331 Network Camera http configwebcam930.044
httpthttpdPanasonic Network Camera http config910.043
httpnginx1.0.4910.043
httpnginx1.0.11910.043
httpCrestron MPS-200 AV routing system http configmedia device900.043
httpApache2.0.52(CentOS)900.043
httpver2.4 rev0880.042
httpBoa HTTPd0.92o880.042
httpChipPC Extreme httpdWinCE 5.0Windows850.04
httpApache2.2.15(CentOS)850.04
httpVivotek Network Camera840.04
http-proxySquid http proxy840.04
httpImagiaTek840.04
httpHTTPsrv830.039
httpApache2.2.20(Ubuntu)830.039
httplighttpd1.4.13820.039
httpApache2.0.53(Win32) PHP/4.3.9820.039
httpthttpd2.25b PHP810.038
httplighttpd1.4.23800.038
httpApache2.2.9(Win32) PHP/5.2.6800.038
httpIndy10.1.5780.037
httphttpd780.037
httpnginx0.8.53760.036
httpTibetSystem Server 2.0740.035
httpVivotek 3102 Camera http configwebcam730.035
httpthttpd730.035
httpIpswitch Whats Up Gold6.0730.035
httpdvr1614n web-cam httpdwebcam720.034
httpApache1.1.1 (Unix) PHP720.034
httpnginx1.2.0710.034
httpLotus Domino httpd700.033
httpUbicom1.1690.033
httpRouterTP-LINK Wireless Router WR541G/542G690.033
httpTridium Niagara httpd3.5.34specialized680.032
httpthttpd2.19-MX Sep 9 2010680.032
httpnginx1.0.14680.032
httpApache1.3.33(Unix) mod_ssl/2.8.24 OpenSSL/0.9.7e PHP/4.3.11680.032
httpWindWeb2.0Home Gateway router http configbroadband router670.032
httpthttpd2.19-MX Dec 8 2009670.032
httpGrandstream HT502 VoIP router http configVoIP adapter670.032
httpApache2.2.16(Ubuntu)660.031
httpApache2.2.11(Ubuntu) PHP/5.2.6-3ubuntu4.1 with Suhosin-Patch mod_perl/2.0.4 Perl/v5.10.0660.031
httpUploader-HttpSvr1.0650.031
httpD-Link MiniAVServer640.03
httpTP-LINK WR541G/542G WAP http configWAP630.03
httpADAM-60008.1.0019620.029
httpIP Camera610.029
httpGS-Webs610.029
httpApache2.2.11(Win32) DAV/2 mod_ssl/2.2.11 OpenSSL/0.9.8i PHP/5.2.9610.029
httpWeb-Based Enterprise Management CIM serverOpenPegasus WBEM httpdLinux600.028
httpWCY_WEBServer1.0600.028
httpthttpd2.23beta1 26may2002600.028
httpMicrosoft IIS httpdWindows600.028
httpSkyIPCam590.028
httpApache2.2.3(Red Hat)590.028
httpLinksys SPA942 VoIP phone http configVoIP phone580.027
httpApache2580.027
httpnginx1.0.10570.027
httpSNF0.1560.026
httpBoa HTTPd0.94.14rc20560.026
httpBlueIris1.1560.026
httpApache2.2.22(Unix)560.026
ftp560.026
httpMongoose httpd550.026
httpApache2.2.9(Debian) PHP/5.2.6-1+lenny8 with Suhosin-Patch mod_ssl/2.2.9 OpenSSL/0.9.8g540.026
httpApache2.2.4(Unix) mod_ssl/2.2.4 OpenSSL/0.9.7k PHP/5.2.17540.026
sshOpenSSH5.5p1 Debian 6+squeeze1protocol 2.0Linux530.025
httpHttpFileServer httpd2.2fWindows530.025
httpGoAhead-Webs httpdOvislink WAP http configWAP510.024
httpD-Link DCS-3220 webcam http configwebcam510.024
httpBlueIris-HTTPBlueIris-HTTPBlueIris510.024
httpApache2.2.11(FreeBSD) mod_ssl/2.2.11 OpenSSL/0.9.8e DAV/2 PHP/5.2.9 with Suhosin-Patch510.024
ftpMicrosoft ftpdWindows510.024
httpHomeSeer Home Control Web InterfaceWindows500.024
vncVNCprotocol 3.8490.023
httpWindWeb1.0Nomadix AG 2100 router http configrouter490.023
httpuTorrent WebUIWindows490.023
httpApache2.2.6(Win32) PHP/5.2.5490.023
httpApache2.2.14(Unix) mod_jk/1.2.21490.023
httpnginx1.0.5480.023
httpGoAhead-Webs httpdRouter with realtek 8181 chipset http configrouter470.022
httpFnord httpd1.9470.022
httpEverfocus webcam http configwebcam470.022
httpD-Link web camera http configwebcam470.022
httpApache2.2.12(Ubuntu)460.022
telnet450.021
httpNetwork Camera450.021
httpTalkSwitch HTTP Server2.0440.021
httpnginx0.7.65440.021
httpApache1.3.39(Unix)440.021
httpApache0.6.5440.021
httpalphapd440.021
httpRouter WebserverTP-LINK Wireless Lite N Router WR740N430.02
http-proxySquid http proxy2.6.STABLE12430.02
httpApache2.2.16(Unix) PHP/5.3.3430.02
httpnetcam420.02
httpEmbedded HTTPD v1.00420.02
httpApache2.2.16(Win32) PHP/5.2.14420.02
httpZyXEL ZyWALL USG 200 firewall http configredirect to port 445firewall410.019
http-proxySquid http proxy2.7.STABLE9410.019
httpnginx1.1.2410.019
httpDreambox DVB Enigma httpdmedia device410.019
httpDavid WebBox httpd12.00a.0781410.019
httpBosch Divar Security Systems http configsecurity-misc410.019
httpAverMedia WebCamX httpdwebcam410.019
httpApache2.2.11(Win32) PHP/5.2.10410.019
httpNetBox httpd2.8 Build 4128400.019
httpIntoto httpd1.0400.019
httpavtech1.0400.019
httpWebLogic httpd390.018
httpViewSonic PJD6521 projector http configmedia device390.018
httpthttpd2.19-MX Apr 26 2011390.018
httpSatel ETHM-1 alarm control unitspecialized390.018
httpBlueIris-HTTP1.1390.018
httpZimbra http config380.018
httpvidiPCAM380.018
httplighttpd1.4.20380.018
httpbozohttpd20080303380.018
httpApache2.2.16(Win32)380.018
httpApache2.2.15(Win32) PHP/5.2.13380.018
httpAllegro-Software-RomPager4.30b3380.018
httpthttpd2.19-MX Oct 19 2011370.018
httpsbcache3.5.5370.018
httpDart WebServer Tool1.0370.018
httpChipPC Extreme httpdWinCE 6.00Windows370.018
httpADH-Web370.018
httpnginx1.0.1360.017
httpJetty360.017
httpFileMaker Web Publishing httpd360.017
httpXWeb 1.0350.017
httpVPON Server1.0350.017
httpNETWORK350.017
httpHeiTel GmbH Web Server350.017
httpthttpd2.19-MX Feb 27 2009340.016
httpSmartLinc340.016
http-proxyCCProxy http proxyunauthorizedWindows340.016
httpDD-WRT milli_httpdLinuxWAP340.016
httpApache2.2.19(Win32) PHP/5.2.17340.016
httpApache2.2.17(Win32) PHP/5.3.5340.016
httpAllegro RomPager4.01340.016
http-proxySquid http proxy3.1.18330.016
httpMicrosoft Windows Media Server9.01.01.5001Windows330.016
httpHyNetOS2.0330.016
httpApache2.2.10(Unix) DAV/2 PHP/5.2.8330.016
httpApache2.0.54(Debian GNU/Linux) PHP/5.0.4330.016
httpwebcamXP httpd5Windows320.015
httpVelazquez 6.2320.015
httpUltiDev Cassini httpd2.1.4.3Windows320.015
httpIPCamera-Webs320.015
httpD-Link printer/webcam http config320.015
httpApache Tomcat/Coyote JSP engine1.1Tomcat 5.5320.015
httpApache2.2.14320.015
httpApache2.2.10(Win32)320.015
httpTCAdmin-2.0 Microsoft-HTTPAPI2.0310.015
http-proxySquid http proxy3.1.20310.015
httpNetApp DFM httpd310.015
httpMiniServ0.01Webmin httpd310.015
httpDvrs WebSvr 1.0.0310.015
httpApache2.2.9(Debian) PHP/5.2.6-1+lenny9 with Suhosin-Patch310.015
httpApache2.2.14(Unix) mod_ssl/2.2.14 OpenSSL/0.9.8l mod_perl/2.0.4 Perl/v5.10.0310.015
httpApache2.2.11(Win32) PHP/5.3.0310.015
httpApache1.3.33(Win32) PHP/4.3.10310.015
spy-netSpy-Net or CyberGate backdoor**BACKDOOR**300.014
httpVideoDR-S300.014
httpthttpdMobotix M10 PRISMB web cam http configwebcam300.014
httpnginx1.1.10300.014
httpnginx1.0.15300.014
httpMini ASP Web Server300.014
httpIndy9.00.10300.014
httpGoldStar iPECS 50B PBX http configPBX300.014
httpGeneric router http configrouter300.014
httpCherryPy httpd3.2.0300.014
httpApache2.2.22(Unix) mod_ssl/2.2.22 OpenSSL/1.0.0g PHP/5.3.10300.014
httpApache2.2.14(Win32) SVN/1.5.5 DAV/2300.014
httpApache1.3.27(Win32)300.014
httpWebServer4.6.2.0290.014
httpSun Niagara httpd1.1Niagara release 2.301.522.v1290.014
httpSmall Home Server httpdWindows290.014
httpHttpFileServer httpd2.3 betaWindows290.014
httpHttpd1.0290.014
httpApache2.2.21(Win32) PHP/5.3.8290.014
httpApache2.2.14(Win32)290.014
httpApache2.0.52(Win32) PHP/5.2.6290.014
httpSun ONE Web Server280.013
httpSEEnergy SVR-116280.013
httpMWS1.2.0280.013
httpise GmbH HTTP-Server v2.0280.013
httpImagiaTekIpcam manager280.013
httpDavid WebBox httpd11.00a.0636280.013
httpApache2.2.9(APMServ) PHP/5.2.6280.013
httpApache2.2.3(Debian) PHP/5.2.0-8+etch16280.013
httpApache2.2.14(Win32) mod_aspdotnet/2.2 IISMS/4.0280.013
httpTP-LINK WR941N WAP http configWAP270.013
httpTeamViewer httpd270.013
httpnginx1.2.3270.013
httpIMSPntml2.0270.013
httpHTTPD 1.0270.013
httpHenry1.1270.013
httpGoAhead-Webs2.5.0270.013
httpD-Link DCS-3220G webcam http configwebcam270.013
httpD-Link DCS-2121 webcam http configwebcam270.013
httpApache2.2.8(Win32) DAV/2 mod_ssl/2.2.8 OpenSSL/0.9.8g mod_autoindex_color PHP/5.2.5270.013
httpApache2.2.22(Debian)270.013
httpApache2.0.40(Red Hat Linux)270.013
httpVideo server260.012
httpnginx0.8.52260.012
httpnginx0.6.35260.012
httpFRITZ!Box http configbroadband router260.012
httpApache2.2.4(Win32) PHP/5.2.3260.012
httpApache1.3.37(Unix)260.012
httpMultView WEB Server V1.1250.012
httpfec1.0 (Funkwerk BOSS)250.012
httpCasi-Rusco camera/Bestelco VoIP phone http config250.012
httpApache2.2.9(Unix) mod_ssl/2.2.9 OpenSSL/0.9.8o mod_wsgi/2.4 Python/2.6.2250.012
sslTLS1.0240.011
httpTP-LINK WR841N WAP http configWAP240.011
httpnginx0.8.55240.011
httpIQhttpD1.0 07oct2007240.011
httpApache2.4.2(Win32) OpenSSL/1.0.1c PHP/5.4.4240.011
httpApache2.2.4(Win32) PHP/5.2.1240.011
httpApache2.2.17(Win32)240.011
httpWireless Network CameraWireless Network Camera230.011
httpPanasonic DVR slinger http config1.1amedia device230.011
httpnginx1.1.19230.011
httpMiktotik Dude network monitor230.011
httpMerlin Carwash230.011
httpiPACS Prism Imaging Server 5.0(1263)230.011
httpHTTPD 1.0WayOS230.011
httpHTTPD230.011
httpgatewayPlease input username/password230.011
httpBuffalo AirStation http configWAP230.011
httpApache2.2.16(Win32) mod_ssl/2.2.16 OpenSSL/0.9.8o mod_python/3.3.1-ts Python/2.5.4230.011
httpApache1.3.42(Unix)230.011
directconnectDirect Connect P2PWindows230.011
ircUnreal ircd220.01
httpWindWebWindWebAG 2100220.01
httpIBM HTTP ServerDerived from Apache220.01
httpHttpFileServer httpd2.0 beta38Windows220.01
httpFortinet VPN/firewall http configfirewall220.01
httpBeck IPC@CHIP embedded httpdSolarLog 200 power monitor httpdpower-misc220.01
httpApache2.2.21(Win32) PHP/5.3.10220.01
httpApache2.2.15(Win32) PHP/5.2.14220.01
httpApache2.2.12(Win32) DAV/2 mod_ssl/2.2.12 OpenSSL/0.9.8k mod_autoindex_color PHP/5.3.0 mod_perl/2.0.4 Perl/v5.10.0220.01
httpApache2.2.10(Linux/SUSE)220.01
httpantid220.01
ftpPure-FTPd220.01
smtpPostfix smtpd210.01
httpWYM httpd1.0Grandtec wifi webcam http configwebcam210.01
http-proxySquid http proxy2.6.STABLE21210.01
http-proxyMikroTik http proxy210.01
httpPLKWebServer210.01
httpnginx1.2.2210.01
httplighttpd1.4.8210.01
httpIpswitch WS_FTP http config1.0210.01
httpDavid-WebBox12.00a (0781) WIN32210.01
httpCherryPy httpd2.2.1210.01
httpApache2.2.22(Unix) mod_ssl/2.2.22 OpenSSL/1.0.0h210.01
httpApache2.2.15(Red Hat)210.01
httpApache2.2.15210.01
sshOpenSSH3.9p1protocol 1.99200.009
httpthttpd2.19-MX Jan 9 2008200.009
httpSun ONE Web Server6.1200.009
httpRouterMercury Wireless N Router MW150R200.009
httpMilestone XProtect video surveillance http interfaceen-USwebcam200.009
httpEmbedded Web Server200.009
httpDVSS Herculese DVR http config1.0webcam200.009
httpD-Link Internet CameraDCS-5300200.009
httpApache2.2.9(Debian) PHP/5.2.6-1+lenny16 with Suhosin-Patch200.009
httpApache2.2.22(Unix) PHP/5.3.13200.009
httpApache2.2.17(Fedora)200.009
httpAllegro RomPager3.05200.009