Overview of services running on Port 5357 TCP.
~6.7 Million IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename Product Version InfoOSDevicetypeCount Percent
httpMicrosoft HTTPAPI httpd2.0SSDP/UPnPWindows665449599.381
http140200.209
telnetBusyBox telnetd1.046900.07
ircDancer ircd40910.061
httpSonicWALLfirewall36580.055
telnet28670.043
chatAIM or ICQ server23970.036
no match21810.033
sslSSLv313550.02
httpChipPC Extreme httpdWinCE 6.00Windows6620.01
httplighttpd1.4.194180.006
httplighttpd1.4.294120.006
httpAIM1.03980.006
httpApache2.2.8(Ubuntu) PHP/5.2.4-2ubuntu5.24 with Suhosin-Patch3190.005
httpMicrosoft IIS httpd1730.003
httpGoAhead-Webs httpd1380.002
sshprotocol 1.51010.002
httpthttpd2.241010.002
httpMicrosoft-HTTPAPI2.01000.001
httpApache Tomcat/Coyote JSP engine1.1920.001
httpMicrosoft IIS httpd6.0Windows780.001
httpNetwave IP camera http configwebcam700.001
httpBoa HTTPd0.94.14rc21670.001
httpAvtech AVN801 network camera1.0UPnP 1.0webcam670.001
httpMicrosoft-HTTPAPI/590.001
httpMicrosoft-HT590.001
http-proxySquid http proxy3.1.16560.001
httpMicroso550.001
vncVNCprotocol 3.8530.001
httpPDR-M8001.0510.001
httpMicrosoft-HTTPAPI/2510.001
httpMicrosoft-HTTPAPI500.001
httpMicro500.001
httpMicrosoft-HTTPAPI2.480.001
httpMicrosoft-HTTP480.001
httpMicrosoft480.001
httpMicrosoft-480.001
httpMicr480.001
httpMicrosoft-HTT450.001
httpMicros450.001
httpMicrosoft-H430.001
httpMicrosoft-HTTPAP410.001
httpMicrosoft-HTTPA400.001
httpMi400.001
httpHikvision-Webs400.001
httpthttpd2.25b390.001
httpMic380.001
httpMicrosof330.0
httpApache330.0
httpmini_httpd1.19 19dec2003320.0
http-proxySquid http proxy2.7.STABLE9310.0
ftpMicrosoft ftpdWindows310.0
http-proxyEZproxy web proxy250.0
arcserveARCserve Discovery250.0
jabberjit-transport jabber-ICQ transport210.0
httpApache2.2.3(CentOS)210.0