Overview of services running on Port 1611 TCP.
~18 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename	Product	Version	Count	Percent
irc	Dancer ircd		3696	20.021
http	SonicWALL		3500	18.959
http			3345	18.119
chat	AIM or ICQ server		1555	8.423
no match	-/-	-/-	977	5.292
http	AIM	1.0	656	3.553
http	lighttpd	1.4.29	431	2.335
http	Apache	2.2.8	411	2.226
http	lighttpd	1.4.19	374	2.026
http	Apache	2.2.16	281	1.522
http	Numara FootPrints Asset Core Agent 11.0.0.111110o		263	1.425
http	WangWnagSimpleServer	1.0	139	0.753
http	Microsoft IIS httpd	6.0	137	0.742
http	DrcomServer1.0		120	0.65
http	Numara Asset Management Platform Agent 10.1.0.110405r		113	0.612
http	Numara FootPrints Asset Core Agent 11.1.0.120420k		87	0.471
ssh			86	0.466
http	GoAhead-Webs		80	0.433
http	Apache Tomcat/Coyote JSP engine	1.1	80	0.433
http	Netwave IP camera http config		73	0.395
http	thttpd	2.24 26oct2003	72	0.39
http	Numara FootPrints Asset Core Agent 11.1.0.120614r_ONEOFF		67	0.363
http	Avtech AVN801 network camera	1.0	63	0.341
http	Apache		60	0.325
http	PDR-M800	1.0	54	0.293
telnet			51	0.276
http	Numara Asset Management Platform Agent 10.0.0.101004p		50	0.271
http	Microsoft IIS httpd	7.5	47	0.255
vnc	VNC		37	0.2
http	Microsoft IIS httpd	7.0	37	0.2
http	Apache	2.2.3	36	0.195
vnc			35	0.19
http	Apache	2.2.14	34	0.184
http	mini_httpd	1.19 19dec2003	30	0.163
http	Boa HTTPd	0.94.14rc21	30	0.163
nntp	INN nntpd		27	0.146
http	Apache	2.2.22	27	0.146
http	GoAhead-Webs embedded httpd		25	0.135
http	thttpd	2.25b 29dec2003	24	0.13
ftp	Microsoft ftpd		24	0.13
http	Numara FootPrints Asset Core Agent 11.1.0.120706r_ONEOFF		23	0.125
http	Apache	2.2.9	18	0.098
http	Hikvision-Webs		17	0.092
http	Gadspot/Avtech AV787 webcam http config		16	0.087
http	uc-httpd	1.0.0	15	0.081