Overview of services running on Port 901 TCP.
~26 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename	Product	Version	Count	Percent
http	Samba SWAT administration server		11725	44.305
http			3421	12.927
http	SonicWALL		3405	12.867
chat	AIM or ICQ server		1519	5.74
no match	-/-	-/-	1142	4.315
http	AIM	1.0	643	2.43
http	Apache		604	2.282
smtp			342	1.292
http	Microsoft IIS httpd	6.0	337	1.273
http	lighttpd	1.4.19	331	1.251
http	lighttpd	1.4.29	257	0.971
http	Netwave IP camera http config		133	0.503
http	DrcomServer1.0		111	0.419
vnc	VNC		99	0.374
ssh			91	0.344
http	Apache Tomcat/Coyote JSP engine	1.1	86	0.325
http	Microsoft IIS httpd	7.5	85	0.321
http	GoAhead-Webs		82	0.31
http	thttpd	2.24 26oct2003	75	0.283
http	Avtech AVN801 network camera	1.0	63	0.238
http	Microsoft IIS httpd	7.0	54	0.204
http	Microsoft IIS httpd		52	0.196
telnet			49	0.185
http	PDR-M800	1.0	46	0.174
tcpwrapped	BSD TCP Wrappers		45	0.17
http	Apache	2.2.3	38	0.144
http	Apache	2.2.14	37	0.14
http	Apache	2.2.22	32	0.121
http	uc-httpd	1.0.0	31	0.117
http	Boa HTTPd	0.94.14rc21	30	0.113
http	thttpd	2.25b 29dec2003	29	0.11
http	mini_httpd	1.19 19dec2003	29	0.11
http	Microsoft HTTPAPI httpd	2.0	29	0.11
ftp	Microsoft ftpd		27	0.102
telnet	Microsoft Windows 2000 telnetd		23	0.087
http	Gadspot/Avtech AV787 webcam http config		22	0.083
http	thttpd		20	0.076
http	Mbedthis-Appweb	2.0.4	20	0.076
http	Hikvision-Webs		20	0.076
directconnect	Direct Connect P2P		19	0.072
iss-realsecure	ISS RealSecure IDS ServerSensor	6.0 - 7.0	17	0.064
http	GoAhead-Webs embedded httpd		17	0.064
http	Cross Web Server		17	0.064
http	Apache	2.2.16	17	0.064
ssl/vmware-auth	VMware Authentication Daemon	1.10	16	0.06
http	Microsoft IIS httpd	5.1	16	0.06
http	Apache	2.2.9	16	0.06
ssh	Cisco SSH	1.25	15	0.057
http	GeoVision GeoHttpServer for webcams		15	0.057