Overview of services running on Port 1500 TCP.
~16 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version InfoOSDevicetypeCount Percent
ircDancer ircd370522.722
telnet263216.141
no match249415.295
chatAIM or ICQ server13017.979
http7804.784
httpBoa HTTPd0.94.14rc214722.895
httplighttpd1.4.193722.281
httpWangWnagSimpleServer1.03532.165
httpMicrosoft IIS httpd3031.858
httpBoa HTTPd0.94.132571.576
sshOpenSSH4.0protocol 2.02151.319
httpMicrosoft HTTPAPI httpd2.0SSDP/UPnPWindows1861.141
httpGoAhead-Webs httpd1560.957
xml1380.846
httpthttpd2.25b1200.736
httpBoa httpd1050.644
irc-proxypsyBNC2.3.2-71000.613
ovm-managerOracle VM Manager990.607
sslTLS1.0850.521
httpHikvision-Webs790.484
sshprotocol 1.5780.478
sshDropbear sshd0.51protocol 2.0Linux770.472
vncVNCprotocol 3.8750.46
httpthttpd2.24730.448
httpApache1.3.33690.423
sslmulti-vendor SSL620.38
socks5GSSAPI authentication required580.356
eggdropEggdrop IRC bot console1.6.19570.35
arcserveARCserve Discovery570.35
httpthttpd520.319
ftpMicrosoft ftpdWindows520.319
citrix-icaCitrix Metaframe XP ICAWindows520.319
httpVSYS-Webs460.282
telnetPrecidia serial2ethernet gateway telnetdmodel iPocket232450.276
vncVNCprotocol 3.6370.227
remotingMS .NET Remoting services340.209
httpApache2.2.16DAV/2 SVN/1.6.12340.209
httpApache Tomcat/Coyote JSP engine1.1320.196
httpApache2.2.16DAV/2 SVN/1.6.12 PHP/5.3.10 mod_ssl/2.2.16 OpenSSL/0.9.8o290.178
httphttp server 1.0280.172
sshOpenSSH4.3protocol 2.0250.153
directconnectDirect Connect P2PWindows250.153
nntpINN nntpdposting ok240.147
secure-socketCA Secure Socket Adapter230.141
tandem-printSharp printer tandem printingprinter220.135
httpVarnish220.135
http-proxySquid http proxy2.7.STABLE9220.135
httpApache1.3.27210.129
sshOpenSSH4.3protocol 1.99200.123
httpApache2.2.3200.123
ftpvsftpd2.0.8 or later200.123