Overview of services running on Port 1666 TCP.
~9 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Count Percent
ircDancer ircd359238.331
chatAIM or ICQ server148415.836
no match-/-105411.247
httplighttpd7908.43
http6577.011
httpWangWnagSimpleServer3673.916
httpMicrosoft IIS httpd1962.092
httpthttpd1301.387
httpMicrosoft HTTPAPI httpd1061.131
p4dPerforce configuration daemon1051.12
sshOpenSSH840.896
ssh830.886
httpBoa HTTPd580.619
vncVNC530.566
telnet460.491
arcserveARCserve Discovery350.373
nntpINN nntpd270.288
ftpMicrosoft ftpd220.235
directconnectDirect Connect P2P220.235
ftpFileZilla ftpd210.224
httpnginx190.203
mysqlMySQL180.192
httpGeoVision GeoHttpServer for webcams160.171
ftp160.171
smtpMicrosoft ESMTP150.16
ftpProFTPD150.16
backdoorPsychoPhobia backdoor150.16
ftpPure-FTPd130.139
sslTLS120.128
smtp110.117
httpWorld Client WDaemon httpd110.117
httpPanasonic webcam http config110.117
ftpServ-U ftpd110.117
ftpvsftpd (before 2.0.8) or WU-FTPD100.107