Overview of services running on Port 254 TCP.
~45 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename	Product	Version	Info	OS	Devicetype	Count	Percent
telnet	Conexant ATU-R ADSL router telnetd				router	23503	51.35
http						9390	20.516
http	SonicWALL				firewall	3675	8.029
chat	AIM or ICQ server					2201	4.809
no match						919	2.008
ssl	SSLv3					786	1.717
http	AIM	1.0				603	1.317
http	Apache	2.2.8	PHP/5.2.4-2ubuntu5.19 with Suhosin-Patch			554	1.21
http	lighttpd	1.4.29				424	0.926
http	lighttpd	1.4.19				416	0.909
http	a_63					339	0.741
http	Apache	2.2.8	(Ubuntu) PHP/5.2.4-2ubuntu5.19 with Suhosin-Patch			157	0.343
http	Microsoft IIS httpd	6.0		Windows		127	0.277
http	GoAhead-Webs httpd					118	0.258
ssh			protocol 1.5			98	0.214
http	Netwave IP camera http config				webcam	95	0.208
http	Microsoft HTTPAPI httpd	2.0	SSDP/UPnP	Windows		94	0.205
http	Apache Tomcat/Coyote JSP engine	1.1				77	0.168
http	thttpd	2.24				65	0.142
http	Avtech AVN801 network camera	1.0	UPnP 1.0		webcam	63	0.138
telnet						59	0.129
http	Microsoft IIS httpd					52	0.114
http	PDR-M800	1.0				46	0.101
http	Apache					42	0.092
http	mini_httpd	1.19 19dec2003				36	0.079
vnc	VNC		protocol 3.8			31	0.068
http-proxy	Squid http proxy	2.6.STABLE12				31	0.068
arcserve	ARCserve Discovery					30	0.066
http	Boa HTTPd	0.94.14rc21				27	0.059
http	Hikvision-Webs					25	0.055
http	GoAhead-Webs					25	0.055
http-proxy	Squid http proxy	2.7.STABLE9				24	0.052
http	Mbedthis-Appweb	2.0.4				21	0.046
http	nginx					20	0.044
http	Apache		SSL-only mode			20	0.044