Overview of services running on Port 5101 TCP.
~30 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version InfoOSDevicetypeCount Percent
http1066935.429
ircDancer ircd405213.456
httpSonicWALLfirewall370012.287
no match27429.105
chatAIM or ICQ server21957.289
sslSSLv39343.102
httpAIM1.05831.936
httpApache1.3.27(Unix) Sun-ONE-ASP/4.0.04501.494
httplighttpd1.4.294291.425
httplighttpd1.4.194131.371
httpMicrosoft IIS httpd6.0Windows1350.448
ovm-managerOracle VM Manager1200.398
vncVNCprotocol 3.81090.362
httpMicrosoft HTTPAPI httpd2.0SSDP/UPnPWindows1090.362
httpAvtech AVN801 network camera1.0UPnP 1.0webcam1020.339
httpGoAhead-Webs httpd990.329
sshprotocol 1.5940.312
httpApache Tomcat/Coyote JSP engine1.1940.312
ftpMicrosoft ftpdWindows930.309
httpNetwave IP camera http configwebcam890.296
httpMicrosoft IIS httpd880.292
httpthttpd2.24690.229
httpSlingbox remote streaming httpd680.226
telnet570.189
httpMS .NET Remoting httpd.NET CLR 1.1.4322.2032Windows530.176
httpPDR-M8001.0520.173
httpBoa HTTPd0.94.14rc21500.166
httpMS .NET Remoting httpd.NET CLR 1.1.4322.2494Windows480.159
httpSecure Computing Sidewinder firewall http adminfirewall400.133
httpmini_httpd1.19 19dec2003380.126
httpApache380.126
httpApache2.2.22(Unix) mod_ssl/2.2.22 OpenSSL/1.0.0h; SSL-only mode370.123
httphttpd330.11
http-proxyEZproxy web proxy320.106
vncVNCprotocol 3.4290.096
vncprotocol 3290.096
httpGoAhead-Webs290.096
http-proxySquid http proxy2.7.STABLE9270.09
sshOpenSSH2.9p2protocol 2.0260.086
httpHikvision-Webs260.086
httpApache2.2.3(CentOS)260.086
httpGeoVision GeoHttpServer for webcamswebcam240.08
httpthttpd2.25b220.073
httpMicrosoft IIS httpd7.5Windows220.073
http-proxySquid http proxy2.6.STABLE12210.07
vncRealVNC Enterpriseprotocol 4.1200.066
remotingMS .NET Remoting services200.066
httpthttpdPanasonic BB-HCM511 IP camera http config200.066
httpApacheSSL-only mode200.066