We have now finished our analysis and are pulling the final details together. We feel that we have some significant results to share – we were able to predict server types with a fairly high degree of accuracy based on responses to our queries, although our data was not fine-grained enough to distinguish between different versions of the same server. We are working on summarizing the various findings already mentioned in the blog and putting things together into a final document that we will share here when it is complete.
Or looking for known, fixed vulnerabilities on servers that should know better (and several that shouldn't)