Overview of services running on Port 1054 TCP.
~30 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version InfoOSDevicetypeCount Percent
http1014433.18
ircDancer ircd403613.201
httpSonicWALLfirewall370212.109
eggdropEggdrop IRC bot console1.6.2122107.229
chatAIM or ICQ server21927.17
no match15745.148
sslSSLv312774.177
httpAIM1.06071.985
httplighttpd1.4.194671.527
httplighttpd1.4.294341.42
httpWangWnagSimpleServer1.02550.834
flexlmFlexLM license manager1450.474
httpBoa HTTPd0.93.151430.468
httpMicrosoft IIS httpd6.0Windows1420.464
httpBoa HTTPd0.94.14rc211110.363
httpGoAhead-Webs httpd1080.353
httpMicrosoft HTTPAPI httpd2.0SSDP/UPnPWindows1010.33
httpNetwave IP camera http configwebcam1000.327
sshprotocol 1.5960.314
httpAvtech AVN801 network camera1.0UPnP 1.0webcam820.268
httpApache Tomcat/Coyote JSP engine1.1810.265
httpthttpd2.24700.229
remotingMS .NET Remoting services670.219
giopCORBA naming service660.216
httpthttpd2.25b530.173
httpMicrosoft IIS httpd510.167
httpPDR-M8001.0500.164
rtsp490.16
telnet480.157
vncVNCprotocol 3.8400.131
httpApache380.124
giopomniORB omniNamesCorba naming service360.118
arcserveARCserve Discovery360.118
nntpINN nntpdposting ok280.092
httpuTorrent WebUIWindows280.092
httpmini_httpd1.19 19dec2003280.092
ftpMicrosoft ftpdWindows280.092
ftp260.085
landeskLANDesk Management SuiteTargeted Multicast Service250.082
httpGoAhead-Webs250.082
http-proxySquid http proxy2.7.STABLE9240.079
http-proxySquid http proxy2.6.STABLE12210.069
httpApacheSSL-only mode200.065
httpApache2.2.3(CentOS)200.065