Overview of services running on Port 1400 TCP.
~10 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version Count Percent
ircDancer ircd361735.326
chatAIM or ICQ server146614.318
no match-/--/-134313.117
http6125.977
httplighttpd1.4.294474.366
httplighttpd1.4.193743.653
httpWangWnagSimpleServer1.02802.735
httpMicrosoft IIS httpd2382.324
httpMicrosoft HTTPAPI httpd2.01601.563
vtunVtun Virtual Tunnel3.X 05/06/20101211.182
httpBoa HTTPd0.94.14rc211020.996
ssh830.811
vtunVtun Virtual Tunnel3.X 06/14/2010810.791
xbmspCcXstream Media Server1.0.15750.732
httpthttpd2.24710.693
vncVNC660.645
directconnectDirect Connect P2P510.498
telnetPrecidia serial2ethernet gateway telnetd490.479
telnet480.469
socks5470.459
arcserveARCserve Discovery370.361
httpthttpd2.25b360.352
ftpMicrosoft ftpd270.264
echolinkEchoLink radio-over-VoIP270.264
nntpINN nntpd250.244
httpGeoVision GeoHttpServer for webcams220.215
ftp210.205
httpthttpd200.195
httplighttpd1.4.20170.166
httpATIG 1.0170.166
httplighttpd160.156
httpPanasonic webcam http config150.146
httpMicrosoft IIS httpd5.1150.146