Overview of services running on Port 254 TCP.
~45 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename	Product	Version	Count	Percent
telnet	Conexant ATU-R ADSL router telnetd		23503	51.35
http			9417	20.575
http	SonicWALL		3675	8.029
chat	AIM or ICQ server		2201	4.809
no match	-/-	-/-	919	2.008
ssl	SSLv3		786	1.717
http	Apache	2.2.8	719	1.571
http	AIM	1.0	603	1.317
http	lighttpd	1.4.29	424	0.926
http	lighttpd	1.4.19	417	0.911
http	a_63		339	0.741
http	GoAhead-Webs httpd		130	0.284
http	Microsoft IIS httpd	6.0	127	0.277
ssh			100	0.218
http	Netwave IP camera http config		95	0.208
http	Microsoft HTTPAPI httpd	2.0	94	0.205
http	Apache Tomcat/Coyote JSP engine	1.1	81	0.177
http	thttpd	2.24	65	0.142
http	Avtech AVN801 network camera	1.0	63	0.138
http	Apache		62	0.135
telnet			60	0.131
http	Microsoft IIS httpd		53	0.116
http	PDR-M800	1.0	46	0.101
vnc	VNC		44	0.096
http	Apache	2.2.3	39	0.085
http	mini_httpd	1.19 19dec2003	36	0.079
http	Apache	2.2.14	36	0.079
http-proxy	Squid http proxy	2.6.STABLE12	31	0.068
http	thttpd		30	0.066
arcserve	ARCserve Discovery		30	0.066
http	Boa HTTPd	0.94.14rc21	27	0.059
http	Hikvision-Webs		25	0.055
http	GoAhead-Webs		25	0.055
http-proxy	Squid http proxy	2.7.STABLE9	24	0.052
http	Apache	2.2.22	23	0.05
http	Apache	2.2.16	22	0.048
http	Mbedthis-Appweb	2.0.4	21	0.046
http	nginx		20	0.044
ftp			19	0.042
http	thttpd	2.25b	18	0.039
http	uc-httpd	1.0.0	17	0.037
http	thttpd	2.24 26oct2003	17	0.037
ftp	Microsoft ftpd		17	0.037
http	GeoVision GeoHttpServer for webcams		16	0.035
http	Apache	2.2.9	16	0.035
ssh	OpenSSH	5.1p1 Debian 5	15	0.033
socks5			15	0.033
http	lighttpd	1.4.20	15	0.033
http	lighttpd		15	0.033
http	Cross Web Server		15	0.033