Overview of services running on Port 1314 TCP.
~19 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version InfoOSDevicetypeCount Percent
ircDancer ircd374219.386
httpSonicWALLfirewall355618.422
http309616.039
chatAIM or ICQ server15708.133
no match13987.242
httpAIM1.06643.44
httpMicrosoft IIS httpd6.0Windows6173.196
httpWangWnagSimpleServer1.05212.699
httplighttpd1.4.294332.243
httplighttpd1.4.193671.901
httpMicrosoft IIS httpd1460.756
httpApache2.2.16(Debian) DAV/2 SVN/1.6.12 PHP/5.2.17 mod_ssl/2.2.16 OpenSSL/0.9.8o1390.72
httpDrcomServer1.01120.58
httpGoAhead-Webs870.451
httpApache Tomcat/Coyote JSP engine1.1860.446
sshprotocol 1.5840.435
httpNetwave IP camera http configwebcam810.42
httpthttpd2.24 26oct2003770.399
httpAvtech AVN801 network camera1.0UPnP 1.0webcam620.321
httpHTTPD 1.0WayOS570.295
httpPDR-M8001.0540.28
httpApache540.28
httpMicrosoft IIS httpd7.5Windows520.269
httpApache2.2.16(Debian) DAV/2 SVN/1.6.12520.269
httpApache2.2.16(Debian) DAV/2 SVN/1.6.12 PHP/5.2.17470.243
telnet450.233
httpBoa HTTPd0.94.14rc21410.212
httpMicrosoft IIS httpd7.0Windows390.202
vncVNCprotocol 3.8360.186
httpMikroTik router http configrouter360.186
httpuc-httpd1.0.0330.171
httpthttpd2.25b 29dec2003310.161
httpApache2.2.16(Debian) DAV/2 SVN/1.6.12 PHP/5.3.13310.161
ftpMicrosoft ftpdWindows310.161
httplighttpd280.145
nntpINN nntpdposting ok270.14
httpmini_httpd1.19 19dec2003270.14
httpApacheSSL-only mode250.13
httpApache2.2.16(Debian) DAV/2 SVN/1.6.12 PHP/5.3.10 mod_ssl/2.2.16 OpenSSL/0.9.8o250.13
httpApache2.2.3(CentOS)240.124
xml230.119
httpCross Web Server220.114
vncRealVNC Personalprotocol 4.0200.104
httpApache2.2.16(Debian) DAV/2 SVN/1.6.12 PHP/5.3.10200.104