Overview of services running on Port 3986 TCP.
~27 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version InfoOSDevicetypeCount Percent
http1036338.174
ircDancer ircd404714.908
httpSonicWALLfirewall368413.571
chatAIM or ICQ server22108.141
no match12954.77
sslSSLv39523.507
httpAIM1.05882.166
httplighttpd1.4.195562.048
httplighttpd1.4.294361.606
httpMicrosoft IIS httpd6.0Windows1500.553
upnpPortable SDK for UPnP devices1.3.1Linux 2.6.21; UPnP 1.0Linux1440.53
httpGoAhead-Webs httpd1040.383
sshprotocol 1.5960.354
httpTBSR2 UPnP950.35
httpApache Tomcat/Coyote JSP engine1.1800.295
httpWangWnagSimpleServer1.0770.284
httpMicrosoft HTTPAPI httpd2.0SSDP/UPnPWindows770.284
httpthttpd2.24750.276
httpNetwave IP camera http configwebcam700.258
http-proxyEZproxy web proxy690.254
httpAvtech AVN801 network camera1.0UPnP 1.0webcam690.254
httpMicrosoft IIS httpd550.203
telnet530.195
httpPDR-M8001.0500.184
httpUbuntulucid UPnP480.177
httpApache390.144
vncVNCprotocol 3.8370.136
httpBoa HTTPd0.94.14rc21360.133
arcserveARCserve Discovery360.133
ftpMicrosoft ftpdWindows300.111
nntpINN nntpdposting ok280.103
http-proxySquid http proxy2.7.STABLE9270.099
httpGoAhead-Webs230.085