Overview of services running on Port 6009 TCP.
~19 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename	Product	Count	Percent
telnet	Cisco telnetd	4493	23.379
telnet		4138	21.532
irc	Dancer ircd	3489	18.155
chat	AIM or ICQ server	1505	7.831
X11		1480	7.701
no match	-/-	1195	6.218
ncacn_http	Microsoft Windows RPC over HTTP	411	2.139
irc-proxy	ShroudBNC irc-proxy	393	2.045
http	lighttpd	345	1.795
http		338	1.759
http	Microsoft IIS httpd	229	1.192
vnc	VNC	179	0.931
http	Microsoft HTTPAPI httpd	128	0.666
ssh	OpenSSH	118	0.614
ssh		79	0.411
telnet	Netopia ADSL router telnetd	45	0.234
http	Boa HTTPd	39	0.203
ftp	Microsoft ftpd	37	0.193
http	nginx	28	0.146
vnc		26	0.135
zebedee	Zebedee encrypted tunnel	25	0.13
X11	X.Org	24	0.125
telnet	the BCC terminal server	24	0.125
ftp		22	0.114
ssl	TLS	21	0.109
tandem-print	Sharp printer tandem printing	18	0.094
mysql	MySQL	18	0.094
arcserve	ARCserve Discovery	14	0.073
smtp		13	0.068
vnc	RealVNC Enterprise	11	0.057
smtp	Microsoft ESMTP	11	0.057
ftp	ProFTPD	11	0.057