Overview of services running on Port 1109 TCP.
~15 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename	Product	Version	Info	OS	Devicetype	Count	Percent
irc	Dancer ircd					4046	26.761
no match						2565	16.965
http	WangWnagSimpleServer	1.0				2194	14.512
chat	AIM or ICQ server					1981	13.103
http						709	4.689
http	lighttpd	1.4.19				419	2.771
http	Microsoft IIS httpd					199	1.316
http	lighttpd	1.4.29				168	1.111
http	Microsoft HTTPAPI httpd	2.0	SSDP/UPnP	Windows		131	0.866
http	GoAhead-Webs httpd					115	0.761
xml						113	0.747
http	nginx	0.7.67				101	0.668
ssh			protocol 1.5			90	0.595
http	Boa HTTPd	0.94.14rc21				82	0.542
java-rmi	Java RMI					78	0.516
http	Apache Tomcat/Coyote JSP engine	1.1				75	0.496
http	thttpd	2.24				74	0.489
pop3	Dovecot pop3d					64	0.423
vnc	VNC		protocol 3.8			54	0.357
telnet						54	0.357
arcserve	ARCserve Discovery					49	0.324
ftp	Microsoft ftpd			Windows		46	0.304
http	Apache	2.2.16	DAV/2 SVN/1.6.12 PHP/5.2.17 mod_ssl/2.2.16 OpenSSL/0.9.8o			44	0.291
http	Apache	2.2.16	DAV/2 SVN/1.6.12 PHP/5.3.10			38	0.251
ovm-manager	Oracle VM Manager					36	0.238
socks5						35	0.231
remoting	MS .NET Remoting services					34	0.225
http	Apache	2.2.9	DAV/2 SVN/1.5.1 PHP/5.3.5 mod_ssl/2.2.9 OpenSSL/0.9.8g			32	0.212
http	Apache	2.2.16	DAV/2 SVN/1.6.12 PHP/5.3.13			31	0.205
nntp	INN nntpd		posting ok			28	0.185
http	Apache	2.2.16	DAV/2 SVN/1.6.12 PHP/5.2.17			27	0.179
http	Apache	2.2.16	DAV/2 SVN/1.6.12 PHP/5.3.10 mod_ssl/2.2.16 OpenSSL/0.9.8o			26	0.172
http	thttpd	2.25b				25	0.165
ftp						25	0.165
ssh	OpenSSH	4.3	protocol 2.0			24	0.159
http-proxy	Squid http proxy	2.7.STABLE9				24	0.159
http	thttpd					23	0.152
http	Apache	1.3.34				23	0.152
http	Hikvision-Webs					21	0.139
http	Boa HTTPd	0.94.13				21	0.139