Overview of services running on Port 1038 TCP.
~24 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version InfoOSDevicetypeCount Percent
http682127.606
ircDancer ircd388315.716
no match279511.312
httpSonicWALLfirewall24319.839
chatAIM or ICQ server20168.159
sslSSLv314155.727
flexlmFlexLM license manager7002.833
httplighttpd1.4.194301.74
httpAIM1.03311.34
httplighttpd1.4.292691.089
remotingMS .NET Remoting services1370.554
landeskLANDesk Management SuiteTargeted Multicast Service1280.518
httpBoa HTTPd0.94.14rc211180.478
http-proxySquid http proxy1150.465
httpGoAhead-Webs httpd1080.437
httpMicrosoft IIS httpd6.0Windows1070.433
httpMicrosoft IIS httpd980.397
ncacn_httpMicrosoft Windows RPC over HTTP1.0Windows950.384
httpMicrosoft HTTPAPI httpd2.0SSDP/UPnPWindows950.384
rtsp940.38
httpUbicom1.1930.376
sshprotocol 1.5920.372
httpWangWnagSimpleServer1.0900.364
httpNetwave IP camera http configwebcam730.295
httpthttpd2.24640.259
httpUbicomUbicom(EchoPark2)610.247
httpApache Tomcat/Coyote JSP engine1.1560.227
httpthttpd2.25b530.215
telnet510.206
httpAvtech AVN801 network camera1.0UPnP 1.0webcam460.186
sslTLSv1420.17
vncVNCprotocol 3.8370.15
arcserveARCserve Discovery350.142
ftpMicrosoft ftpdWindows320.13
ftpCheck Point Firewall-1 ftpdfirewall310.125
achatAChat chat system290.117
httpPDR-M8001.0280.113
giopCORBA naming service270.109
nntpINN nntpdposting ok260.105
giopomniORB omniNamesCorba naming service250.101
smtp230.093
ftp230.093
ovm-managerOracle VM Manager210.085
http-proxySquid http proxy2.7.STABLE9210.085
http-proxySquid http proxy2.6.STABLE12210.085
httpmini_httpd1.19 19dec2003200.081