Overview of services running on Port 6661 TCP.
~18 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Count Percent
ircDancer ircd403922.123
no match-/-297016.268
chatAIM or ICQ server215511.804
telnetCisco telnetd200510.982
ircUnreal ircd13827.57
ircInspIRCd8154.464
telnet7113.894
httplighttpd6433.522
http5392.952
httpMicrosoft IIS httpd2341.282
sshOpenSSH1600.876
httpMicrosoft HTTPAPI httpd1600.876
httpthttpd1280.701
httpGoAhead-Webs httpd1180.646
ssh980.537
httpBoa HTTPd880.482
vncVNC780.427
httpApache Tomcat/Coyote JSP engine660.362
httpApache660.362
http-proxySquid http proxy530.29
socks5510.279
irc470.257
ircircu ircd460.252
ircIRCnet ircd370.203
mysqlMySQL340.186
ftpMicrosoft ftpd290.159
ircratbox ircd240.131
ftpFileZilla ftpd230.126
arcserveARCserve Discovery230.126
httpnginx220.121
httpHikvision-Webs210.115
ftp190.104
vncRealVNC Enterprise180.099
ftpProFTPD180.099
vnc160.088
httphttp server 1.0160.088
ftpvsftpd160.088
upnpMicrosoft Windows UPnP150.082
smtpMicrosoft ESMTP150.082
ftpPure-FTPd150.082
http-proxyF5 BIG-IP load balancer http proxy130.071
sshDropbear sshd120.066
smtp120.066
shoutcast-publishingSHOUTcast publishing port120.066
httpJetty120.066
vncRealVNC Personal110.06
telnetAllied Telesis x900-series switch telnetd110.06
smtpMicrosoft Exchange smtpd110.06
httpWYM httpd110.06
telnetEPIX Your Worldwide Internet Access100.055
sslTLS100.055
openvpnOpenVPN100.055
irc-proxypsyBNC100.055
httpGeoVision GeoHttpServer for webcams100.055
ftpvsftpd (before 2.0.8) or WU-FTPD100.055
ftpServ-U ftpd100.055