Overview of services running on Port 902 TCP.
~160 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename	Product	Version	Count	Percent
ssl/vmware-auth	VMware Authentication Daemon	1.10	136549	85.022
http			11127	6.928
http	SonicWALL		3717	2.314
chat	AIM or ICQ server		2221	1.383
no match	-/-	-/-	1264	0.787
ssl	SSLv3		1156	0.72
http	AIM	1.0	599	0.373
http	lighttpd	1.4.19	425	0.265
http	lighttpd	1.4.29	422	0.263
http	Microsoft IIS httpd	6.0	178	0.111
ftp	vsftpd (before 2.0.8) or WU-FTPD		116	0.072
http	Microsoft HTTPAPI httpd	2.0	113	0.07
http	GoAhead-Webs httpd		105	0.065
http	Netwave IP camera http config		101	0.063
ssh			96	0.06
vnc	VNC		93	0.058
http	Apache Tomcat/Coyote JSP engine	1.1	92	0.057
http	Microsoft IIS httpd		72	0.045
http	Avtech AVN801 network camera	1.0	71	0.044
http	thttpd	2.24	70	0.044
http	Apache		59	0.037
telnet			51	0.032
http	PDR-M800	1.0	48	0.03
pop3	qmail pop3d		44	0.027
http-proxy	Squid http proxy	2.6.STABLE12	39	0.024
vmware-auth	VMware Authentication Daemon	1.0	38	0.024
http	Apache	2.2.3	38	0.024
arcserve	ARCserve Discovery		37	0.023
http	Apache	2.2.14	30	0.019
http	Boa HTTPd	0.94.14rc21	29	0.018
http-proxy	Squid http proxy	2.7.STABLE9	25	0.016
ssh	OpenSSH	4.3	24	0.015
http	thttpd		23	0.014
http	mini_httpd	1.19 19dec2003	23	0.014
http	GoAhead-Webs		22	0.014
http	Apache	2.2.22	22	0.014
http	thttpd	2.25b	21	0.013
http	Mbedthis-Appweb	2.0.4	21	0.013
http	Hikvision-Webs		21	0.013
iss-realsecure	ISS RealSecure IDS ServerSensor	6.0 - 7.0	20	0.012
http	thttpd	2.24 26oct2003	20	0.012
http	Apache	2.2.16	20	0.012
ftp	Microsoft ftpd		19	0.012
http	uTorrent WebUI		17	0.011
http	Microsoft IIS httpd	7.5	16	0.01
http	uc-httpd	1.0.0	15	0.009
http	Samba SWAT administration server		15	0.009
http	Microsoft IIS httpd	5.1	15	0.009
http	lighttpd	1.4.20	15	0.009
ftp			15	0.009