Overview of services running on Port 254 TCP.
~45 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version Count Percent
telnetConexant ATU-R ADSL router telnetd2350351.35
http941720.575
httpSonicWALL36758.029
chatAIM or ICQ server22014.809
no match-/--/-9192.008
sslSSLv37861.717
httpApache2.2.87191.571
httpAIM1.06031.317
httplighttpd1.4.294240.926
httplighttpd1.4.194170.911
httpa_633390.741
httpGoAhead-Webs httpd1300.284
httpMicrosoft IIS httpd6.01270.277
ssh1000.218
httpNetwave IP camera http config950.208
httpMicrosoft HTTPAPI httpd2.0940.205
httpApache Tomcat/Coyote JSP engine1.1810.177
httpthttpd2.24650.142
httpAvtech AVN801 network camera1.0630.138
httpApache620.135
telnet600.131
httpMicrosoft IIS httpd530.116
httpPDR-M8001.0460.101
vncVNC440.096
httpApache2.2.3390.085
httpmini_httpd1.19 19dec2003360.079
httpApache2.2.14360.079
http-proxySquid http proxy2.6.STABLE12310.068
httpthttpd300.066
arcserveARCserve Discovery300.066
httpBoa HTTPd0.94.14rc21270.059
httpHikvision-Webs250.055
httpGoAhead-Webs250.055
http-proxySquid http proxy2.7.STABLE9240.052
httpApache2.2.22230.05
httpApache2.2.16220.048
httpMbedthis-Appweb2.0.4210.046
httpnginx200.044
ftp190.042
httpthttpd2.25b180.039
httpuc-httpd1.0.0170.037
httpthttpd2.24 26oct2003170.037
ftpMicrosoft ftpd170.037
httpGeoVision GeoHttpServer for webcams160.035
httpApache2.2.9160.035
sshOpenSSH5.1p1 Debian 5150.033
socks5150.033
httplighttpd1.4.20150.033
httplighttpd150.033
httpCross Web Server150.033