Overview of services running on Port 4000 TCP.
~190 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename	Product	Version	Info	OS	Devicetype	Count	Percent
no match						101245	53.221
http						18853	9.91
irc	Dancer ircd					4093	2.152
http	SonicWALL				firewall	3721	1.956
eggdrop	Eggdrop IRC bot console	1.6.21				3167	1.665
http	Apache	2.2.16	(Debian) PHP/5.3.3-7+squeeze1 with Suhosin-Patch mod_ssl/2.2.22 OpenSSL/1.0.1			3159	1.661
ssh	Cisco/3com IPSSHd	6.5.0	protocol 2.0			2722	1.431
ssl	SSLv3					2624	1.379
chat	AIM or ICQ server					2456	1.291
http	wg_httpd	1.0(based Boa				2370	1.246
rifa-dvr	Rifatron DVR				webcam	1938	1.019
donkey	MLDonkey multi-network P2P server control port		IP disallowed			1924	1.011
ssh	OpenSSH	4.3	protocol 2.0			1561	0.821
arcserve	ARCserve Discovery					1230	0.647
http	TopsecOS					1179	0.62
diablo2	Diablo 2 game server					1098	0.577
http	WEBrick httpd	1.3.1	Ruby 1.9.3 (2011-10-30)			864	0.454
http	Httpd	1.0				791	0.416
http	Avtech AVN801 network camera	1.0	UPnP 1.0		webcam	757	0.398
http	GeoVision GeoHttpServer for webcams				webcam	710	0.373
http	AIM	1.0				709	0.373
http	Microsoft IIS httpd	6.0		Windows		662	0.348
telnet	the MIPU Telnet Server					652	0.343
http	SNF	0.1				651	0.342
http	Cross Web Server					623	0.327
http	Thin	1.2.4	codename Flaming Astroboy			618	0.325
http	Netwave IP camera http config				webcam	607	0.319
http	Boa HTTPd	0.94.14rc21				559	0.294
http	mini_httpd	1.19 19dec2003				515	0.271
http	Apache	2.2.14	(Unix)			505	0.265
http	lighttpd	1.4.29				493	0.259
http-proxy	3proxy http proxy		authentication required			487	0.256
http	Thin	1.3.1	codename Triple Espresso			485	0.255
http	lighttpd	1.4.19				475	0.25
http	Boa HTTPd	0.94.13				470	0.247
http	Virata-EmWeb	6.0.1	Netscreen administrative web server		firewall	467	0.245
mysql	MySQL	5.0.51a-24+lenny5-log				434	0.228
http	Apache					425	0.223
audioworks	AudioWorks sound server			IRIX		387	0.203
http	uc-httpd	1.0.0				378	0.199
http	Hikvision-Webs					377	0.198
vnc	VNC		protocol 3.8			323	0.17
http	D-Link DIR-300 WAP http admin				WAP	280	0.147
http	Apache Tomcat/Coyote JSP engine	1.1				279	0.147
http	Draytek Vigor ADSL router webadmin				broadband router	267	0.14
http	Apache	2.2.14				263	0.138
http	Apache	2.2.15	(Unix) PHP/5.3.3-7+squeeze13 with Suhosin-Patch mod_ssl/2.2.15 OpenSSL/0.9.8o			254	0.134
http	ALT-N SecurityGateway httpd	2.0.7				254	0.134
http	Microsoft HTTPAPI httpd	2.0	SSDP/UPnP	Windows		240	0.126
http	Apache		SSL-only mode			223	0.117
http	Microsoft IIS httpd	7.5		Windows		222	0.117
http	Gadspot/Avtech AV787 webcam http config				webcam	218	0.115
http	TBS	R2 UPnP				210	0.11
socks-proxy	Socks4A					203	0.107
http	GoAhead-Webs httpd					203	0.107
telnet						202	0.106
http	PDR-M800	1.0				194	0.102
mysql	MySQL	4.1.18				191	0.1
http	Thin	1.4.1	codename Chromeo			189	0.099
http	thin 1.2.11 codename Bat-Shit Crazy					189	0.099
http	Apache	1.3.22	(Unix)			188	0.099
svnserve	Subversion					182	0.096
http	Mongrel httpd	1.1.5				175	0.092
http	DVR Systems webcam http interface				webcam	175	0.092
ftp	Microsoft ftpd			Windows		175	0.092
telnet	Linux telnetd			Linux		170	0.089
http	thttpd	2.25b 29dec2003				170	0.089
http	Mbedthis-Appweb	2.0.4				165	0.087
http	Microsoft IIS httpd					159	0.084
http	Apache	1.3.6				156	0.082
http	GoAhead-Webs embedded httpd					153	0.08
irc-proxy	ShroudBNC irc-proxy	1.2 revision 1080				152	0.08
telnet	MLDonkey telnetd	3.1.0				145	0.076
http	WangWnagSimpleServer	1.0				144	0.076
http	Gemtek	0.899				139	0.073
http	lighttpd	1.4.26				136	0.071
http	GoldStar iPECS 50B PBX http config				PBX	132	0.069
http	Microsoft IIS httpd	5.0		Windows		131	0.069
http	IBM_HTTP_Server	6.0.2.27 Apache				126	0.066
remoting	MS .NET Remoting services					122	0.064
http	Secure Computing Sidewinder firewall http admin				firewall	122	0.064
vnc	RealVNC Personal		protocol 4.0			121	0.064
irc	Unreal ircd					119	0.063
http-proxy	EZproxy web proxy					116	0.061
http	Apache	2.2.22	(Unix)			116	0.061
ericom	Ericom PowerTermWebConnect	1.0		Windows		116	0.061
upnp	Portable SDK for UPnP devices	1.3.1	Linux 2.6.21; UPnP 1.0	Linux		113	0.059
http	Microsoft IIS httpd	7.0		Windows		112	0.059
http	DrcomServer1.0					109	0.057
vnc	VNC		protocol 3.6			104	0.055
http	thttpd		Panasonic BB-HCM511 IP camera http config			102	0.054
telnet	SMC SMC2870W Wireless Ethernet Bridge				bridge	100	0.053
ssh			protocol 1.5			99	0.052
http	lighttpd	1.4.28				99	0.052
http	Apache	2.2.22	(Unix) PHP/5.3.10			96	0.05
http	Catalyst Framework httpd	5.90007				95	0.05
ice	Internet Communications Engine					94	0.049
http	lighttpd	1.4.20				93	0.049
ftp						93	0.049
http	Apache	2.2.2	(Fedora)			92	0.048
telnet	MLDonkey telnetd	3.0.7				91	0.048
http	Airlink 101 or TRENDnet TVIP-422w webcam http config				webcam	90	0.047
ntop-http	Ntop web interface	3.3		Linux		85	0.045
http	ALT-N SecurityGateway httpd	2.0.6				84	0.044
vnc			protocol 3			82	0.043
soap	gSOAP soap	2.6				81	0.043
http	thttpd	2.25b				80	0.042
http	RemotelyAnywhere remote PC management httpd	8.0.668				80	0.042
http	OracleAS Web Cache 10g	9.0.4.0.0				80	0.042
http	Apache	1.3.9 (Unix) (Red Hat				79	0.042
http	thttpd	2.24 26oct2003				78	0.041
http	Apache	2.2.3	(CentOS)			78	0.041
telnet	MLDonkey telnetd	2.9.3				77	0.04
http	uTorrent WebUI			Windows		77	0.04
http	Techno Vision Security System http config	2.0			webcam	75	0.039
telnet	MLDonkey telnetd	3.0.3				73	0.038
http	Microsoft IIS httpd	5.1		Windows		73	0.038
ssh	OpenSSH	5.3	protocol 2.0			72	0.038
telnet	MLDonkey telnetd	3.0.0				69	0.036
ssl	TLS	1.0				69	0.036
telnet	MLDonkey telnetd	3.0.6				68	0.036
http	Netgear DG834G router http config				router	68	0.036
http	GM Streaming Server httpd				webcam	68	0.036
rtsp						67	0.035
http	Ubuntu	lucid UPnP				67	0.035
http	Netgear DG834 router http config				broadband router	66	0.035
ssh	OpenSSH	5.1p1 Debian 5	protocol 2.0	Linux		65	0.034
http	Apache	2.2.14	(Ubuntu)			65	0.034
http	Thin	1.2.7	codename No Hup			64	0.034
http	WindWeb	2.0				62	0.033
http	World Client WDaemon httpd	4.0	Alt-N MDaemon webmail	Windows		61	0.032
http			General User			61	0.032
http	streamts					60	0.032
telnet	MLDonkey telnetd	3.0.0.CVS				58	0.03
http	Virata-EmWeb	6.0.1				58	0.03
http	Allegro RomPager	4.07 UPnP/1.0	ZyXEL ZyWALL 2			58	0.03
secure-socket	CA Secure Socket Adapter					57	0.03
http	Apache	2.2.13	(Unix) DAV/2 PHP/5.2.11			54	0.028
vnc	RealVNC Enterprise		protocol 4.1			53	0.028
telnet	MLDonkey telnetd	3.0.1				53	0.028
ssh			protocol 2.0			51	0.027
activemq	Apache ActiveMQ					51	0.027
upnp	Microsoft Windows UPnP			Windows		50	0.026
ssh	OpenSSH	5.5p1 Debian 6+squeeze2	protocol 2.0	Linux		50	0.026
http	Apache	2.2.16	(Debian)			50	0.026
directconnect	Direct Connect P2P			Windows		50	0.026
http-proxy	MikroTik http proxy					49	0.026
http	Boa httpd					48	0.025
http	dcs-lig-httpd					47	0.025
http	nginx	1.0.10	Phusion Passenger 3.0.11 (mod_rails/mod_rack)			46	0.024
ftp	FileZilla ftpd	0.9.41 beta		Windows		46	0.024
http	Allegro RomPager	4.51 UPnP/1.0	ZyXEL ZyWALL 2			45	0.024
tandem-print	Sharp printer tandem printing				printer	44	0.023
http	TwistedWeb httpd	8.2.0				44	0.023
http	TRENDnet TV-IP100 or TV-IP110 webcam display httpd				webcam	44	0.023
http	thttpd	2.24				43	0.023
http	Apache	2.2.22	(Unix) mod_ssl/2.2.22 OpenSSL/1.0.0h			43	0.023
http	ALT-N SecurityGateway httpd	2.0.4				42	0.022
ftp	Serv-U ftpd		SSL Required	Windows		42	0.022
http	nginx					41	0.022
ftp	Pure-FTPd					40	0.021
http	WEBrick httpd	1.3.1	Ruby 1.8.7 (2010-08-16)			38	0.02
telnet	MLDonkey telnetd	3.1.1				37	0.019
http-proxy	CCProxy http proxy		unauthorized	Windows		37	0.019
http	Apache	2.2.8	PHP/5.2.4-2ubuntu5.3 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g mod_perl/2.0.3 Perl/v5.8.8			37	0.019
telnet	MLDonkey telnetd	3.1.2				36	0.019
http	WEBrick httpd	1.3.1	Ruby 1.9.3 (2012-04-20)			36	0.019
http-proxy	Squid http proxy	2.7.STABLE9				36	0.019
http	Vivotek IP7131 Network Camera http config				webcam	35	0.018
http	lighttpd					35	0.018
http	Apache	2.2.3				35	0.018
http	Node.js		Express middleware			34	0.018
http	GoAhead-Webs					34	0.018
http	DVR					34	0.018
ftp	vsftpd	2.0.8 or later				34	0.018
ssh	Dropbear sshd	0.52	protocol 2.0	Linux		33	0.017
http	Intoto httpd	1.0				33	0.017
ssl	Microsoft IIS SSL			Windows		32	0.017
http	MiniServ	0.01	Webmin httpd			32	0.017
openvpn	OpenVPN					31	0.016
xml						30	0.016
ssh	OpenSSH	5.3p1 Debian 3ubuntu7	Ubuntu Linux; protocol 2.0	Linux		30	0.016
ssh	OpenSSH	4.3p2	protocol 2.0			30	0.016
ssh	OpenSSH	3.9p1	protocol 1.99			30	0.016
socks5						30	0.016
rtsp	Avtech MPEG4 DVR control rtspd					30	0.016
http	QNAP TS-219P NAS http config	1.0			storage-misc	30	0.016
http	TRENDnet TV-IP110w or TV-IP422W webcam display httpd				webcam	29	0.015
http	MS-SDK-HttpServer	1.0				29	0.015
http	Apache	2.2.22	(Ubuntu)			29	0.015
ftp	MikroTik router ftpd	3.30			router	29	0.015
ssh	OpenSSH	3.9p1	protocol 2.0			28	0.015
http	nginx	1.0.10				28	0.015
http	Jetty	6.1.x				28	0.015
http	HTTPServer					28	0.015
telnet	MLDonkey telnetd	2.9.5.CVS				27	0.014
smtp	Postfix smtpd					27	0.014
http	thttpd					27	0.014
http	RemotelyAnywhere remote PC management httpd	10.0.1086				27	0.014
http	Apache	2.2.22	(Unix) mod_ssl/2.2.22 OpenSSL/1.0.0g			27	0.014
http	Apache	2.2.17	(Ubuntu)			27	0.014
donkey	MLDonkey multi-network P2P server control port	2.8.2				27	0.014
ssh	OpenSSH	5.9p1 Debian 5ubuntu1	Ubuntu Linux; protocol 2.0	Linux		26	0.014
http	Netgear DG834GT router http config				router	26	0.014
http	MiniServ	1.580	Webmin httpd			26	0.014
http	MikroTik router config httpd			RouterOS	router	26	0.014
http	ImagiaTek		Network Card Manager			26	0.014
http	Icecast streaming media server					26	0.014
http	httpd 1.1					26	0.014
http	Apache	2.2.3	(Red Hat)			26	0.014
ssh	OpenSSH	5.8	protocol 2.0			25	0.013
http	uClinux-httpd	0.2.2	DxClient NetViewer DVR viewer 2.6.8.97	Linux		25	0.013
lns	Legalis Intranet legal information server					24	0.013
http	WEBrick httpd	1.3.1	Ruby 1.9.3 (2012-02-16)			24	0.013
http	Vivotek 3102 Camera http config				webcam	24	0.013
http	nginx	0.8.54				24	0.013
telnet	the MRV Communications' LX Series Server					23	0.012
http	WEBrick httpd	1.3.1	Ruby 1.9.2 (2011-07-09)			23	0.012
http	W3MFC	1.68				23	0.012
http	Apache	2.0.53	(Win32) PHP/5.1.4			23	0.012
ssh	OpenSSH	5.4p1	FreeBSD 20100308; protocol 2.0	FreeBSD		22	0.012
mysql	MySQL		unauthorized			22	0.012
http	WYM httpd	1.0	IP-Video embedded camera http config		webcam	22	0.012
http	MS .NET Remoting httpd		.NET CLR 2.0.50727.3634	Windows		22	0.012
http	GoAhead-Webs httpd		LogiLink WC0002B webcam http config			22	0.012
http	Apache	2.2.15	(CentOS)			22	0.012
http	Apache	1.3.28	(SolutionIP) PHP/5.0.4 mod_perl/1.28 mod_ssl/2.8.15 OpenSSL/0.9.7b			22	0.012
telnet	the MRV Communications' LX Series Console Server					21	0.011
telnet	MLDonkey telnetd	2.9.5				21	0.011
nntp	INN nntpd		posting ok			21	0.011
netbios-ssn						21	0.011
http-proxy	Squid http proxy	2.6.STABLE21				21	0.011
http	Microsoft HTTPAPI httpd	1.0	SSDP/UPnP	Windows		21	0.011
http	HP Integrated Lights-Out http config				remote management	21	0.011
http	D-Link/Airlink IP webcam http config	1.0			webcam	21	0.011
http	Boa HTTPd	0.93.15				21	0.011
http	Apache	0.6.5				21	0.011
ssh	OpenSSH	5.8p1 Debian 7ubuntu1	Ubuntu Linux; protocol 2.0	Linux		20	0.011
ssh	Cisco SSH	1.25	protocol 2.0	IOS		20	0.011
smtp	Microsoft Exchange smtpd			Windows		20	0.011
http	Z-World Rabbit					20	0.011
http	Linksys router http config		device model BEFSX41		WAP	20	0.011
http	http server 1.0					20	0.011
http	Apache	2.2.14	(Unix) mod_ssl/2.2.14 OpenSSL/0.9.8l mod_perl/2.0.4 Perl/v5.10.0			20	0.011
http	Apache	1.3.28	(SolutionIP) mod_perl/1.28 mod_ssl/2.8.15 OpenSSL/0.9.7b			20	0.011
ftp	Gene6 ftpd	3.9.0 build 2		Windows		20	0.011