Unfortunately, a lot of those are honeypots, even though the number might be unbelievable. A quick look on the first page shows this one[1] claiming to be a PHP

Unfortunately, a lot of those are honeypots, even though the number might be unbelievable. A quick look on the first page shows this one[1] claiming to be a PHP web server serving a Java application(!), this other one[2] claims to be an embedded system web server, this one[3] claims that it's a streaming service, this one[4] claims its Mac OS X server (how long has it been obsolete again?) And those are just the headers! Just taking a cursory look at [4], I can see it is claiming to be a ASP.net server being served by a TP-Link device on one port, all the while also being a QNAP device on another, and also another PHP application served through thttpd. All the while running on AWS... [1] https://www.shodan.io/host/44.204.245.187 https://www.shodan.io/host/44.204.245.187 [2] https://www.shodan.io/host/13.246.35.40 https://www.shodan.io/host/13.246.35.40 [3] https://www.shodan.io/host/16.171.64.23 https://www.shodan.io/host/16.171.64.23 [4] https://www.shodan.io/host/44.204.245.187 https://www.shodan.io/host/44.204.245.187