ike-scan is a utility that discovers IKE hosts and can also fingerprint them using the retransmission backoff pattern.