Overview of services running on Port 666 TCP.
~203 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version Count Percent
httpthttpd2.25b19000893.306
no match-/--/-17840.876
xml16980.834
chatAIM or ICQ server14530.714
httpMicrosoft IIS httpd7410.364
http6970.342
sshOpenSSH5.4p14280.21
sshOpenSSH4.33900.192
httplighttpd1.4.193670.18
httpMicrosoft HTTPAPI httpd2.02930.144
httplighttpd1.4.292130.105
smtp2070.102
sshOpenSSH5.32060.101
sshOpenSSH5.8p2_hpn13v111860.091
sshMikroTik RouterOS sshd1720.084
directconnectDirect Connect P2P1700.083
sshOpenSSH5.5p1 Debian 6+squeeze21390.068
sshOpenSSH5.1p1 Debian 51390.068
vncVNC1350.066
sshOpenSSH5.8p1-hpn13v101350.066
httpnginx1250.061
ftp1180.058
ssh1040.051
qdsQlikView Distribution Service11990.049
sshOpenSSH5.1p1930.046
ftpMicrosoft ftpd870.043
sshOpenSSH5.3p1 Debian 3ubuntu7840.041
httplighttpd830.041
sshOpenSSH4.5p1810.04
sshOpenSSH6.0770.038
http-proxyMikroTik http proxy770.038
httpthttpd2.24720.035
sshDropbear sshd0.52710.035
remotingMS .NET Remoting services660.032
telnetMicrosoft Windows 2000 telnetd620.03
telnet610.03
sshOpenSSH5.5p1 Debian 6+squeeze1600.029
httpBoa HTTPd0.94.14rc21540.027
httpthttpd510.025
httpdarkstat network analyzer httpd490.024
rtsp460.023
smtpMicrosoft Exchange smtpd430.021
sshOpenSSH5.9p1 Debian 5ubuntu1420.021
sshDropbear sshd0.53.1400.02
upnpMicrosoft Windows UPnP390.019
sshOpenSSH5.2p1380.019
sshOpenSSH5.4p1_hpn13v11350.017
smtpPostfix smtpd350.017
ftpFileZilla ftpd0.9.41 beta350.017
sshOpenSSH5.2340.017
httphttp server 1.0330.016
arcserveARCserve Discovery320.016
vtunVtun Virtual Tunnel3.X 09/27/2010310.015
sshOpenSSH5.8300.015
sshOpenSSH4.3p2 Debian 9etch3300.015
sshOpenSSH3.9p1290.014
ftpPure-FTPd290.014
vncRealVNC Enterprise280.014
sshOpenSSH5.6260.013
httpMicrosoft IIS httpd5.1260.013
sshOpenSSH3.8.1p1250.012
sshDropbear sshd0.51250.012
ftpFileZilla ftpd0.9.40 beta250.012
sshOpenSSH5.9p1-hpn13v11240.012
sshOpenSSH5.0240.012
sshOpenSSH5.9230.011
sshOpenSSH5.8p1 Debian 7ubuntu1230.011
ftpvsftpd (before 2.0.8) or WU-FTPD230.011
sshOpenSSH5.8p1 Debian 1ubuntu3210.01
sshOpenSSH5.5p1 Debian 6210.01
httpGeoVision GeoHttpServer for webcams210.01
sshOpenSSH5.1200.01
httpBoa HTTPd0.94.13200.01
httpPanasonic webcam http config190.009
httpMicrosoft IIS httpd5.0190.009
sshOpenSSH6.0p1 Debian 2170.008
httpBoa httpd170.008
sshOpenSSH4.7p1 Debian 8ubuntu3160.008
httpUbicom1.1160.008
vtunVtun Virtual Tunnel3.X 10/17/2007150.007