Overview of services running on Port 1109 TCP.
~15 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version InfoOSDevicetypeCount Percent
ircDancer ircd404626.761
no match256516.965
httpWangWnagSimpleServer1.0219414.512
chatAIM or ICQ server198113.103
http7094.689
httplighttpd1.4.194192.771
httpMicrosoft IIS httpd1991.316
httplighttpd1.4.291681.111
httpMicrosoft HTTPAPI httpd2.0SSDP/UPnPWindows1310.866
httpGoAhead-Webs httpd1150.761
xml1130.747
httpnginx0.7.671010.668
sshprotocol 1.5900.595
httpBoa HTTPd0.94.14rc21820.542
java-rmiJava RMI780.516
httpApache Tomcat/Coyote JSP engine1.1750.496
httpthttpd2.24740.489
pop3Dovecot pop3d640.423
vncVNCprotocol 3.8540.357
telnet540.357
arcserveARCserve Discovery490.324
ftpMicrosoft ftpdWindows460.304
httpApache2.2.16DAV/2 SVN/1.6.12 PHP/5.2.17 mod_ssl/2.2.16 OpenSSL/0.9.8o440.291
httpApache2.2.16DAV/2 SVN/1.6.12 PHP/5.3.10380.251
ovm-managerOracle VM Manager360.238
socks5350.231
remotingMS .NET Remoting services340.225
httpApache2.2.9DAV/2 SVN/1.5.1 PHP/5.3.5 mod_ssl/2.2.9 OpenSSL/0.9.8g320.212
httpApache2.2.16DAV/2 SVN/1.6.12 PHP/5.3.13310.205
nntpINN nntpdposting ok280.185
httpApache2.2.16DAV/2 SVN/1.6.12 PHP/5.2.17270.179
httpApache2.2.16DAV/2 SVN/1.6.12 PHP/5.3.10 mod_ssl/2.2.16 OpenSSL/0.9.8o260.172
httpthttpd2.25b250.165
ftp250.165
sshOpenSSH4.3protocol 2.0240.159
http-proxySquid http proxy2.7.STABLE9240.159
httpthttpd230.152
httpApache1.3.34230.152
httpHikvision-Webs210.139
httpBoa HTTPd0.94.13210.139