Overview of services running on Port 902 TCP.
~160 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename	Product	Version	Info	OS	Devicetype	Count	Percent
ssl/vmware-auth	VMware Authentication Daemon	1.10	Uses VNC, SOAP			129955	80.916
http						11102	6.913
ssl/vmware-auth	VMware Authentication Daemon	1.10	Uses VNC			6542	4.073
http	SonicWALL				firewall	3717	2.314
chat	AIM or ICQ server					2221	1.383
no match						1264	0.787
ssl	SSLv3					1156	0.72
http	AIM	1.0				599	0.373
http	lighttpd	1.4.19				424	0.264
http	lighttpd	1.4.29				422	0.263
http	Microsoft IIS httpd	6.0		Windows		178	0.111
ftp	vsftpd (before 2.0.8) or WU-FTPD					116	0.072
http	Microsoft HTTPAPI httpd	2.0	SSDP/UPnP	Windows		113	0.07
http	GoAhead-Webs httpd					103	0.064
http	Netwave IP camera http config				webcam	101	0.063
ssh			protocol 1.5			94	0.059
http	Apache Tomcat/Coyote JSP engine	1.1				90	0.056
http	Microsoft IIS httpd					71	0.044
http	Avtech AVN801 network camera	1.0	UPnP 1.0		webcam	71	0.044
vnc	VNC		protocol 3.8			70	0.044
http	thttpd	2.24				70	0.044
telnet						51	0.032
ssl/vmware-auth	VMware Authentication Daemon	1.10				50	0.031
http	PDR-M800	1.0				48	0.03
pop3	qmail pop3d					44	0.027
http	Apache					41	0.026
http-proxy	Squid http proxy	2.6.STABLE12				39	0.024
vmware-auth	VMware Authentication Daemon	1.0	Uses VNC, SOAP			38	0.024
arcserve	ARCserve Discovery					37	0.023
http	Boa HTTPd	0.94.14rc21				29	0.018
http-proxy	Squid http proxy	2.7.STABLE9				25	0.016
ssh	OpenSSH	4.3	protocol 2.0			24	0.015
http	mini_httpd	1.19 19dec2003				23	0.014
http	GoAhead-Webs					22	0.014
http	thttpd	2.25b				21	0.013
http	Mbedthis-Appweb	2.0.4				21	0.013
http	Hikvision-Webs					21	0.013
iss-realsecure	ISS RealSecure IDS ServerSensor	6.0 - 7.0		Windows		20	0.012
http	thttpd	2.24 26oct2003				20	0.012