Overview of services running on Port 666 TCP.
~203 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename	Product	Count	Percent
http	thttpd	190162	93.382
ssh	OpenSSH	2735	1.343
no match	-/-	1784	0.876
xml		1698	0.834
chat	AIM or ICQ server	1453	0.714
http	Microsoft IIS httpd	786	0.386
http	lighttpd	723	0.355
http		697	0.342
http	Microsoft HTTPAPI httpd	304	0.149
http	nginx	219	0.108
smtp		207	0.102
ssh	MikroTik RouterOS sshd	172	0.084
directconnect	Direct Connect P2P	170	0.083
ssh	Dropbear sshd	164	0.081
vnc	VNC	135	0.066
ftp		118	0.058
ftp	FileZilla ftpd	115	0.056
ssh		104	0.051
vtun	Vtun Virtual Tunnel	103	0.051
qds	QlikView Distribution Service	99	0.049
ftp	Microsoft ftpd	96	0.047
http	Boa HTTPd	92	0.045
ftp	ProFTPD	83	0.041
http-proxy	MikroTik http proxy	77	0.038
remoting	MS .NET Remoting services	66	0.032
telnet	Microsoft Windows 2000 telnetd	62	0.03
telnet		61	0.03
http	darkstat network analyzer httpd	49	0.024
rtsp		46	0.023
ftp	Serv-U ftpd	45	0.022
smtp	Microsoft Exchange smtpd	43	0.021
upnp	Microsoft Windows UPnP	39	0.019
smtp	Postfix smtpd	35	0.017
http	http server 1.0	33	0.016
arcserve	ARCserve Discovery	32	0.016
ftp	Pure-FTPd	29	0.014
vnc	RealVNC Enterprise	28	0.014
ftp	vsftpd (before 2.0.8) or WU-FTPD	23	0.011
http	GeoVision GeoHttpServer for webcams	21	0.01
mysql	MySQL	20	0.01
smtp	Microsoft ESMTP	19	0.009
http	Panasonic webcam http config	19	0.009
ftp	Gene6 ftpd	18	0.009
http	Boa httpd	17	0.008
http	Ubicom	16	0.008
ssl	TLS	14	0.007
http	World Client WDaemon httpd	14	0.007
http	Router Webserver	14	0.007
vnc	Apple remote desktop vnc	13	0.006
ssh	SCS sshd	13	0.006
ftp	Synology DiskStation NAS ftpd	13	0.006
vnc	RealVNC Personal	12	0.006
ssh	SunSSH	12	0.006
ssh	Bitvise WinSSHD	11	0.005
http	Router	11	0.005
ftp	vsftpd	11	0.005
smtp	Exim smtpd	10	0.005
openvpn	OpenVPN	10	0.005
ftp	glFTPd	10	0.005