Overview of services running on Port 6000 TCP.
~125 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename	Product	Version	Count	Percent
X11			45900	36.648
telnet			21518	17.181
no match	-/-	-/-	13211	10.548
telnet	NASLite-SMB/Sveasoft Alchemy firmware telnetd		6613	5.28
http			4704	3.756
irc	Dancer ircd		3899	3.113
http	SonicWALL		3544	2.83
vnc	VNC		2265	1.808
chat	AIM or ICQ server		1979	1.58
telnet	BusyBox telnetd		1148	0.917
http	Microsoft IIS httpd	6.0	651	0.52
telnet	Pocket CMD telnetd		628	0.501
X11	NetSarang XManager		599	0.478
telnet	LG-Ericsson LIP-8002 (SIP IP Phone)		596	0.476
http	POSIX		573	0.457
vnc			570	0.455
telnet	Enterasys XSR Security Router telnetd		502	0.401
http	lighttpd	1.4.19	397	0.317
http	lighttpd	1.4.29	393	0.314
vnc	RealVNC Enterprise		355	0.283
mysql	MySQL	5.0.51a-24+lenny4	346	0.276
telnet	Nortel-LG VoIP IAD telnetd		336	0.268
vnc	RealVNC Personal		335	0.267
http	GoAhead-Webs httpd		306	0.244
http	Apache	2.2.22	301	0.24
http-proxy	Squid http proxy	3.0.STABLE24	288	0.23
http	Boa HTTPd	0.94.13	278	0.222
http	Microsoft IIS httpd		263	0.21
X11	X.Org		262	0.209
http	GeoVision GeoHttpServer for webcams		259	0.207
http	Apache Tomcat/Coyote JSP engine	1.1	253	0.202
http	Avtech AVN801 network camera	1.0	248	0.198
http	Microsoft HTTPAPI httpd	2.0	246	0.196
http	Boa HTTPd	0.94.14rc21	212	0.169
soap	gSOAP soap	2.7	202	0.161
http	Boa httpd		200	0.16
http	mini_httpd	1.19 19dec2003	188	0.15
telnet	Net2Phone MAX		180	0.144
http	Hikvision-Webs		170	0.136
ssh	OpenSSH	3.8p1	166	0.133
X11	XFree86		164	0.131
telnet	LG-Nortel LIP-6812D (MGCP IP Phone)		162	0.129
irc-proxy	ShroudBNC irc-proxy	1.2 revision 1080	159	0.127
http	http server 1.0		152	0.121
http	thttpd	2.25b 29dec2003	148	0.118
ftp	Microsoft ftpd		141	0.113
http	Microsoft IIS httpd	7.5	139	0.111
http	uc-httpd	1.0.0	137	0.109
ssh	OpenSSH	4.3	136	0.109
ftp	Pure-FTPd		135	0.108
http	RealVNC	4.0	125	0.1
http	Allegro RomPager	4.51 UPnP/1.0	117	0.093
http	Apache		115	0.092
irc-proxy	psyBNC	2.3.1	111	0.089
ssh			106	0.085
arcserve	ARCserve Discovery		104	0.083
ftp			101	0.081
http-proxy	3proxy http proxy		99	0.079
telnet	LG-Nortel LIP-6830D (MGCP IP Phone)		95	0.076
smtp	Microsoft ESMTP	6.0.3790.4675	88	0.07
http	Gateway Controller 3550		88	0.07
X11	StarNet X-Win32		85	0.068
http	Microsoft IIS httpd	7.0	83	0.066
X11	Xming X server		82	0.065
http	Apache	2.2.16	77	0.061
http	thttpd	2.24 26oct2003	76	0.061
http	Mbedthis-Appweb	2.0.4	72	0.057
http	Gateway Controller 3560		72	0.057
http	DrayTek Vigor 2800-series ADSL router httpd		71	0.057
http	Apache	2.2.3	71	0.057
telnet	LG-Ericsson IP8830 (SIP IP Phone)		70	0.056
X11	Hummingbird Exceed X server		69	0.055
http	Allegro RomPager	4.07 UPnP/1.0	68	0.054
http	DVR Systems webcam http interface		66	0.053
websocket	websockify		61	0.049
http	BusyBox httpd		61	0.049
http	Apache	2.2.14	61	0.049
http	Microsoft IIS httpd	5.0	60	0.048
ovm-manager	Oracle VM Manager		59	0.047
http	Microsoft IIS httpd	5.1	59	0.047
http	Gordano Web Server v5.06.0016		57	0.046
X11	Hummingbird Exceed X server	8.X, 9.X, or 10.X	56	0.045
ssh	OpenSSH	5.3	55	0.044
http	OwnServer1.0		53	0.042
telnet	LG-Ericsson IP8802 (SIP IP Phone)		51	0.041
smtp	Microsoft Exchange smtpd		51	0.041
http	Apache	2.2.21	51	0.041
vnc	Apple remote desktop vnc		48	0.038
ssh	OpenSSH	3.6.1p2	48	0.038
http	dcs-lig-httpd		47	0.038
telnet	LGE XS-GATE/AX-2100 (Internet Phone Gateway)		46	0.037
rtsp			45	0.036
rifa-dvr	Rifatron DVR		45	0.036
http	Apache	2.2.17	45	0.036
X11	XSun Solaris X11 server		44	0.035
telnet	LGIC ITGC(Internet Telephony Gateway Circuit)		43	0.034
smtp			42	0.034
directconnect	Direct Connect P2P		42	0.034
vtun	Vtun Virtual Tunnel	3.X 11/05/2007	41	0.033
telnet	LG-Nortel TS-350i (SIP IP Phone)		41	0.033
oracle-tns	Oracle TNS Listener		41	0.033
http	Network Camera		41	0.033
http	Techno Vision Security System http config	2.0	40	0.032
ssh	OpenSSH	5.9p1 Debian 5ubuntu1	38	0.03
ssh	OpenSSH	5.3p1 Debian 3ubuntu7	37	0.03
ssh	OpenSSH	3.9p1	37	0.03
ssh	OpenSSH	2.3.0 mikrotik 2.9	37	0.03
http	TP-LINK Router		37	0.03
http	Airlink 101 or TRENDnet TVIP-422w webcam http config		37	0.03
zebedee	Zebedee encrypted tunnel		36	0.029
vnc	Ultr@VNC Repeater		36	0.029
telnet	SMC SMC2870W Wireless Ethernet Bridge		36	0.029
http	Vivotek Network Camera		36	0.029
http	Apache	2.2.9	36	0.029
telnet	LG-Ericsson LIP-8008E (IPKTS Phone)		35	0.028
ssh	OpenSSH	6.0	35	0.028
irc	Unreal ircd		35	0.028
http	Apache	1.3.33	35	0.028
http	TRENDnet TV-IP110w or TV-IP422W webcam display httpd		34	0.027
X11	Cygwin X Server Project		33	0.026
http	Transmission BitTorrent management httpd		33	0.026
http	Apache	2.2.8	33	0.026
ssl	TLS	1.0	32	0.026
telnet	LGE AX1100S (Internet Phone Gateway)		31	0.025
http	Apache	2.2.19	31	0.025
http	Ubicom	1.1	30	0.024
X11	Hummingbird Exceed X server	6.X	29	0.023
irc	InspIRCd		29	0.023
http	lighttpd		29	0.023
ftp	FileZilla ftpd	0.9.41 beta	29	0.023
X11	SCO X server		28	0.022
telnet	LG-Ericsson IP8815 (SIP IP Phone)		28	0.022
http	Virata-EmWeb	6.0.1	28	0.022
http	nginx		28	0.022
http	FlashCom	3.5.5	28	0.022
telnet	LG-Nortel LIP-6830D (SIP IP Phone)		27	0.022
telnet	LG-Nortel LIP-6812D (SIP IP Phone)		27	0.022
http	SEEnergy SVR-116		27	0.022
remoting	MS .NET Remoting services		26	0.021
http	wg_httpd	1.0(based Boa	26	0.021
http	TwistedWeb httpd	8.2.0	26	0.021
http	NetBox httpd	2.7 Build 4126	26	0.021
ftp	Synology DiskStation NAS ftpd		26	0.021
ftp	Serv-U ftpd		26	0.021
X11	Hummingbird Exceed X server	7.X	25	0.02
ssh	OpenSSH	5.5p1 Debian 6+squeeze2	25	0.02
ssh	OpenSSH	5.1p1 Debian 5	25	0.02
http-proxy	Squid http proxy		25	0.02
http	Apache	2.2.11	25	0.02
http	Apache	1.3.28	25	0.02
ssl	OpenSSL		24	0.019
rtsp	Vivotek IP7131 or IP7138 webcam rtspd		24	0.019
openvpn	OpenVPN		24	0.019
http	Rex	10.0.0.4007	24	0.019
http	RemotelyAnywhere remote PC management httpd	8.0.668	24	0.019
http	lighttpd	1.4.26	24	0.019
ssh	MikroTik RouterOS sshd		23	0.018
http	RealVNC	E4	23	0.018
http	Linksys router http config		23	0.018
http	httpd 1.1		23	0.018
http	D-Link Internet Camera		23	0.018
http	httpd		22	0.018
telnet	the MRV Communications' LX Series Server		21	0.017
telnet	Linux telnetd		21	0.017
socks5			21	0.017
http	Apache	2.0.53	21	0.017
xml			20	0.016
ssh	OpenSSH	5.5	20	0.016
ssh	OpenSSH	5.4p1_hpn13v11	20	0.016
smtp	Postfix smtpd		20	0.016
secure-socket	CA Secure Socket Adapter		20	0.016
http	Router		20	0.016
ftp	FileZilla ftpd	0.9.40 beta	20	0.016
ssh	Dropbear sshd	0.52	19	0.015
nntp	INN nntpd		19	0.015
http	WindWeb	2.0	19	0.015
http-proxy	F5 BIG-IP load balancer http proxy		19	0.015
remote-control	Alchemy Lab Remote Control PRO remote management		18	0.014
http	Wireless Network Camera		18	0.014
http	lighttpd	1.4.20	18	0.014
http	BusyBox httpd	1.13	18	0.014
http	Aviosys		18	0.014
http	Apache	2.2.15	18	0.014
ftp	Serv-U ftpd	6.4	18	0.014
ftp	FileZilla ftpd	0.9.37 beta	18	0.014
ssh	OpenSSH	4.6	17	0.014
smtp	Microsoft ESMTP	6.0.3790.3959	17	0.014
rtsp	Avtech MPEG4 DVR control rtspd		17	0.014
ftp	Serv-U ftpd	6.0	17	0.014
telnet	Internet Phone Gateway (H323)		16	0.013
napster	WinMX or Lopster Napster P2P client		16	0.013
http	HP StorageWorks AG118A tape autoloader http config		16	0.013
X11	ReflectionX		15	0.012
telnet	the MRV Communications' LX Series Console Server		15	0.012
telnet	Net2Phone MAX8		15	0.012
http	WYM httpd	1.0	15	0.012
http	Mongrel httpd	1.1.5	15	0.012
ftp	vsftpd (before 2.0.8) or WU-FTPD		15	0.012
damewaremr	DameWare Mini Remote Control		15	0.012