Overview of services running on Port 1494 TCP.
~92 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version InfoOSDevicetypeCount Percent
citrix-icaCitrix Metaframe XP ICAWindows6303267.906
http1200212.93
ircDancer ircd40434.356
httpSonicWALLfirewall37023.988
chatAIM or ICQ server21982.368
no match15341.653
sslSSLv38880.957
httpWangWnagSimpleServer1.06720.724
httpAIM1.06060.653
httplighttpd1.4.294290.462
httplighttpd1.4.194160.448
httpMicrosoft IIS httpd6.0Windows1480.159
httpGoAhead-Webs httpd1000.108
sshprotocol 1.5970.105
httpMicrosoft HTTPAPI httpd2.0SSDP/UPnPWindows920.099
httpApache Tomcat/Coyote JSP engine1.1810.087
httpNetwave IP camera http configwebcam730.079
httpAvtech AVN801 network camera1.0UPnP 1.0webcam710.076
httpApache2.2.16DAV/2 SVN/1.6.12 PHP/5.2.17 mod_ssl/2.2.16 OpenSSL/0.9.8o690.074
httpthttpd2.24670.072
httpApache2.2.16DAV/2 SVN/1.6.12580.062
httpMicrosoft IIS httpd540.058
httpApache2.2.16DAV/2 SVN/1.6.12 PHP/5.3.10 mod_ssl/2.2.16 OpenSSL/0.9.8o510.055
telnet490.053
httpPDR-M8001.0490.053
httpApache2.2.16(Debian) DAV/2 SVN/1.6.12 PHP/5.2.17460.05
vncVNCprotocol 3.8450.048
httpApache2.2.16(Debian) DAV/2 SVN/1.6.12 PHP/5.2.17 mod_ssl/2.2.16 OpenSSL/0.9.8o430.046
arcserveARCserve Discovery410.044
httpSecure Computing Sidewinder firewall http adminfirewall390.042
httpApache2.2.16(Debian) DAV/2 SVN/1.6.12 PHP/5.3.10 mod_ssl/2.2.16 OpenSSL/0.9.8o350.038
httpApache350.038
httpBoa HTTPd0.94.14rc21320.034
httpGoAhead-Webs290.031
nntpINN nntpdposting ok280.03
ftpMicrosoft ftpdWindows280.03
http-proxySquid http proxy2.7.STABLE9260.028
httpApache2.2.16DAV/2 SVN/1.6.12 PHP/5.3.13260.028
httpmini_httpd1.19 19dec2003250.027
httpthttpd2.25b220.024
httpMbedthis-Appweb2.0.4210.023
httpuTorrent WebUIWindows200.022
httpApache2.2.16(Debian) DAV/2 SVN/1.6.12200.022