Overview of services running on Port 9003 TCP.
~54 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Count Percent
httpMicrosoft HTTPAPI httpd1410125.919
telnetQuintum Tenor A800 VoIP gateway CDR telnetd630711.593
httpMicrosoft IIS httpd585810.768
telnetCisco router telnetd577610.617
no match-/-51089.389
ircDancer ircd38317.042
http22904.209
telnet18023.312
telnetCisco IOS telnetd17953.299
chatAIM or ICQ server14342.636
httplighttpd11952.197
eggdropEggdrop IRC bot console8621.584
telnetCisco 1721 router telnetd5441.0
httpthttpd3260.599
httpBoa HTTPd2800.515
httpnginx2460.452
insight-managerConsul InSight Manager2280.419
vncVNC1840.338
geovision-audioGeovision webcam audio1500.276
remotingMS .NET Remoting services1410.259
httpVeritas backup exec continuous protection httpd1410.259
sshOpenSSH1280.235
sshDropbear sshd980.18
httpImagiaTek910.167
httpGeoVision GeoHttpServer for webcams900.165
ssh890.164
sslTLS870.16
ftpMicrosoft ftpd630.116
httpPanasonic webcam http config480.088
vncRealVNC Personal430.079
vncRealVNC Enterprise420.077
upnpMicrosoft Windows UPnP400.074
ftpProFTPD390.072
httpCross Web Server380.07
shoutcast-publishingSHOUTcast publishing port370.068
ftp320.059
mysqlMySQL310.057
irc-proxyShroudBNC irc-proxy300.055
httpMS-SDK-HttpServer300.055
xml250.046
ftpFileZilla ftpd210.039
httpUbicom200.037
smtpMicrosoft ESMTP160.029
http-proxyMicrosoft Foundation Class httpd150.028
httpm0n0wall http portal150.028
httpGeneric router http config150.028
ftpServ-U ftpd150.028
httpWindWeb140.026
rtsp120.022
httpWYM httpd120.022
ftpvsftpd (before 2.0.8) or WU-FTPD120.022
smtp110.02
httphttp server 1.0110.02
ftpPure-FTPd110.02
arcserveARCserve Discovery110.02
telnetthe BCC terminal server100.018
ircUnreal ircd100.018
iceInternet Communications Engine100.018
httpWMI V5100.018