Overview of services running on Port 6600 TCP.
~25 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version InfoOSDevicetypeCount Percent
ircDancer ircd365514.509
httpSonicWALLfirewall347713.802
http320712.73
no match293511.651
ircUnreal ircd16046.367
chatAIM or ICQ server15986.343
telnetCisco telnetdIOSrouter15166.018
httpAIM1.06662.644
sshDropbear sshd0.52protocol 2.0Linux6082.413
vncVNCprotocol 3.85762.286
telnet5482.175
httplighttpd1.4.294411.751
httplighttpd1.4.193711.473
httpIndy9.00.102190.869
httpMicrosoft IIS httpd6.0Windows2150.853
vncVNCprotocol 3.61390.552
soapgSOAP soap2.71250.496
httpDrcomServer1.01220.484
httpApache Tomcat/Coyote JSP engine1.11220.484
sshprotocol 1.5860.341
httpGoAhead-Webs820.326
httpNetwave IP camera http configwebcam750.298
httpAvtech AVN801 network camera1.0UPnP 1.0webcam750.298
telnetthe MRV Communications' LX Series Server740.294
httpthttpd2.24 26oct2003730.29
httpMicrosoft IIS httpd7.5Windows700.278
httpMicrosoft IIS httpd7.0Windows590.234
httpBoa HTTPd0.94.14rc21550.218
httpPDR-M8001.0520.206
sslTLS1.0420.167
httpApache420.167
vncRealVNC Enterpriseprotocol 4.1390.155
httpthttpd2.25b 29dec2003380.151
vncprotocol 3360.143
httpmini_httpd1.19 19dec2003360.143
httpuc-httpd1.0.0330.131
httpGoAhead-Webs embedded httpd310.123
httpApacheSSL-only mode300.119
httpApache2.2.3(CentOS)270.107
ftpMicrosoft ftpdWindows260.103
sshOpenSSH4.3protocol 2.0240.095
http-proxySquid http proxy2.7.STABLE9240.095
vncRealVNC Personalprotocol 4.0230.091
xml220.087
http-proxySquid http proxy220.087
ftpvsftpd (before 2.0.8) or WU-FTPD220.087
httpGadspot/Avtech AV787 webcam http configwebcam210.083
httpDVR Systems webcam http interfacewebcam200.079