Overview of services running on Port 1054 TCP.
~30 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version Count Percent
http1017333.274
ircDancer ircd403613.201
httpSonicWALL370212.109
eggdropEggdrop IRC bot console1.6.2122107.229
chatAIM or ICQ server21927.17
no match-/--/-15745.148
sslSSLv312774.177
httpAIM1.06071.985
httplighttpd1.4.194681.531
httplighttpd1.4.294341.42
httpWangWnagSimpleServer1.02550.834
flexlmFlexLM license manager1450.474
httpBoa HTTPd0.93.151430.468
httpMicrosoft IIS httpd6.01420.464
httpGoAhead-Webs httpd1110.363
httpBoa HTTPd0.94.14rc211110.363
httpMicrosoft HTTPAPI httpd2.01010.33
httpNetwave IP camera http config1000.327
ssh980.321
httpApache Tomcat/Coyote JSP engine1.1850.278
httpAvtech AVN801 network camera1.0820.268
httpthttpd2.24700.229
remotingMS .NET Remoting services670.219
giopCORBA naming service660.216
httpApache580.19
httpthttpd2.25b530.173
httpMicrosoft IIS httpd520.17
vncVNC500.164
httpPDR-M8001.0500.164
rtsp490.16
telnet480.157
httpApache2.2.3400.131
giopomniORB omniNames360.118
arcserveARCserve Discovery360.118
httpApache2.2.14320.105
nntpINN nntpd280.092
httpuTorrent WebUI280.092
httpmini_httpd1.19 19dec2003280.092
ftpMicrosoft ftpd280.092
httpthttpd260.085
httpGoAhead-Webs260.085
ftp260.085
landeskLANDesk Management Suite250.082
http-proxySquid http proxy2.7.STABLE9240.079
httpApache2.2.16230.075
httpApache2.2.22220.072
http-proxySquid http proxy2.6.STABLE12210.069
httpMS .NET Remoting httpd190.062
httpMbedthis-Appweb2.0.4190.062
directconnectDirect Connect P2P190.062
httpBoa HTTPd0.94.13180.059
upnpPortable SDK for UPnP devices1.3.1170.056
httpuc-httpd1.0.0160.052
httpthttpd2.25b 29dec2003160.052
httpthttpd2.24 26oct2003160.052
httpNginx160.052
httpApache1.3.28160.052
httplighttpd1.4.20150.049
httpGM Streaming Server httpd150.049
httpApache2.2.17150.049
ftpPure-FTPd150.049