According to comments in the other discussion here about this it might not IIS be only, because that kernel component is used for other HTTP services as well:
Nope. WinRM or Power shell seem to use it too. Enabled by default. (Just created a 2012R2 server last night.)
Plus if you have reservations created with HTTP.SYS, your app doesn't even have to be running. A friend tried turning off IIS, but port 80 would still respond.
Nor is every machine's port 80 publicly reachable. Everyone behind a NAT won't be, for example (unless they've explicitly forwarded the port for the purposes of running such a server.)
https://news.ycombinator.com/item?id=9378449