Overview of services running on Port 3872 TCP.
~19 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename	Product	Version	Info	OS	Devicetype	Count	Percent
http						4376	22.989
irc	Dancer ircd					3736	19.627
http	SonicWALL				firewall	3555	18.676
chat	AIM or ICQ server					1627	8.547
no match						1040	5.464
http	AIM	1.0				657	3.452
http	lighttpd	1.4.29				443	2.327
ssl	TLS	1.0				439	2.306
http	lighttpd	1.4.19				370	1.944
http	Microsoft IIS httpd	6.0		Windows		140	0.735
http	TBS	R2 UPnP				111	0.583
http	DrcomServer1.0					107	0.562
ssh			protocol 1.5			86	0.452
http	GoAhead-Webs					84	0.441
http-proxy	EZproxy web proxy					81	0.426
http	thttpd	2.24 26oct2003				80	0.42
http	Apache Tomcat/Coyote JSP engine	1.1				73	0.384
http	Avtech AVN801 network camera	1.0	UPnP 1.0		webcam	68	0.357
upnp	Portable SDK for UPnP devices	1.3.1	Linux 2.6.21; UPnP 1.0	Linux		67	0.352
http	Netwave IP camera http config				webcam	63	0.331
http	Ubuntu	lucid UPnP				59	0.31
http	PDR-M800	1.0				56	0.294
http	Microsoft IIS httpd	7.5		Windows		54	0.284
telnet						50	0.263
http	Apache					40	0.21
http	mini_httpd	1.19 19dec2003				32	0.168
http	Microsoft IIS httpd	7.0		Windows		32	0.168
vnc	VNC		protocol 3.8			31	0.163
http	Boa HTTPd	0.94.14rc21				30	0.158
http	Apache	2.2.3	(CentOS)			25	0.131
nntp	INN nntpd		posting ok			24	0.126
http	thttpd	2.25b 29dec2003				24	0.126
http	Apache		SSL-only mode			24	0.126
ftp	Microsoft ftpd			Windows		23	0.121
oem-agent	Oracle Enterprise Manager Agent httpd	10.2.0.5.0				20	0.105
http	uc-httpd	1.0.0				20	0.105
http	Hikvision-Webs					20	0.105