Overview of services running on Port 1039 TCP.
~28 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version InfoOSDevicetypeCount Percent
http1012935.599
ircDancer ircd394613.868
httpSonicWALLfirewall369812.997
chatAIM or ICQ server20547.219
no match18786.6
sslSSLv39383.297
httpAIM1.06342.228
httplighttpd1.4.294341.525
httplighttpd1.4.194181.469
flexlmFlexLM license manager3711.304
httpMicrosoft IIS httpd6.0Windows1700.597
httpUbicomUbicom(EchoPark3)1450.51
remotingMS .NET Remoting services1270.446
eggdropEggdrop IRC bot console1.6.211140.401
http-proxySquid http proxy1110.39
httpNetwave IP camera http configwebcam1050.369
sshprotocol 1.5960.337
httpBoa HTTPd0.94.14rc21960.337
httpMicrosoft HTTPAPI httpd2.0SSDP/UPnPWindows850.299
httpGoAhead-Webs httpd800.281
httpAvtech AVN801 network camera1.0UPnP 1.0webcam760.267
landeskLANDesk Management SuiteTargeted Multicast Service720.253
httpApache Tomcat/Coyote JSP engine1.1720.253
ncacn_httpMicrosoft Windows RPC over HTTP1.0Windows620.218
telnet550.193
httpWangWnagSimpleServer1.0540.19
rtsp510.179
httpPDR-M8001.0500.176
httpthttpd2.24490.172
httpMicrosoft IIS httpd450.158
httpApache400.141
httpGoAhead-Webs370.13
vncVNCprotocol 3.8350.123
sslTLSv1340.119
httpthttpd2.24 26oct2003330.116
ftpMicrosoft ftpdWindows320.112
giopomniORB omniNamesCorba naming service310.109
achatAChat chat system310.109
httpthttpd2.25b280.098
nntpINN nntpdposting ok260.091
arcserveARCserve Discovery260.091
httpmini_httpd1.19 19dec2003250.088
smtp240.084
httpthttpd2.25b 29dec2003240.084
http-proxySquid http proxy2.7.STABLE9240.084
giopCORBA naming service240.084
ftpCheck Point Firewall-1 ftpdfirewall230.081
ftp230.081
httpuTorrent WebUIWindows220.077
httpuc-httpd1.0.0210.074
netbios-ssn200.07
httpMicrosoft IIS httpd7.5Windows200.07
httpApacheSSL-only mode200.07