Overview of services running on Port 1095 TCP.
~17 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version Count Percent
ircDancer ircd409023.527
httpWangWnagSimpleServer1.0367121.117
no match-/--/-248714.306
chatAIM or ICQ server232413.369
http13447.731
httplighttpd1.4.194392.525
httpMicrosoft IIS httpd2401.381
httplighttpd1.4.292071.191
socks51851.064
httpMicrosoft HTTPAPI httpd2.01781.024
httpGoAhead-Webs httpd1450.834
httpthttpd2.241000.575
httpApache Tomcat/Coyote JSP engine1.1970.558
ssh950.546
httpBoa HTTPd0.94.14rc21800.46
vncVNC620.357
remotingMS .NET Remoting services620.357
httpthttpd2.25b590.339
arcserveARCserve Discovery490.282
httpnginx0.8.55480.276
telnet470.27
sslTLS1.0440.253
ftpMicrosoft ftpd440.253
httpHikvision-Webs340.196
nntpINN nntpd300.173
http-proxySquid http proxy2.7.STABLE9280.161
http-proxySquid http proxy2.6.STABLE12280.161
httpthttpd270.155
httpBoa HTTPd0.94.13250.144
ftp220.127
sshOpenSSH4.3210.121
httpApache2.2.3210.121
giopomniORB omniNames190.109
upnpMicrosoft Windows UPnP180.104
directconnectDirect Connect P2P180.104
telnetAllied Telesis x900-series switch telnetd160.092
smtp160.092
httplighttpd160.092
vncRealVNC Enterprise150.086
ovm-managerOracle VM Manager150.086
http-proxyF5 BIG-IP load balancer http proxy150.086
httpMS .NET Remoting httpd150.086
giopCORBA naming service150.086
ftpPure-FTPd150.086