Overview of services running on Port 139 TCP.
~1.32 Million IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename	Product	Version	Count	Percent
netbios-ssn	Microsoft Windows 98 netbios-ssn		1157261	87.525
netbios-ssn	Samba smbd	3.X	117408	8.88
no match	-/-	-/-	16568	1.253
netbios-ssn	Samba smbd		13460	1.018
netbios-ssn	Nepenthes honeypot netbios-ssn		9996	0.756
netbios-ssn			1538	0.116
http			1311	0.099
chat	AIM or ICQ server		1117	0.084
netbios-ssn	Konica Minolta bizhub C452 printer smbd		846	0.064
http	SonicWALL		629	0.048
routersetup	Nortel/D-Link router instant setup		517	0.039
http	AIM	1.0	316	0.024
netbios-ssn	NetWare 6 SMB Services		171	0.013
ssh			56	0.004
microsoft-ds	Edimax PS-1206P print server smbd		43	0.003
http	Microsoft IIS httpd		41	0.003
http	Microsoft HTTPAPI httpd	2.0	37	0.003
http	GoAhead-Webs		32	0.002
http	Apache		32	0.002
http	thttpd	2.24	30	0.002
http	Microsoft IIS httpd	6.0	29	0.002
socks5			26	0.002
http	thttpd	2.24 26oct2003	26	0.002
telnet			25	0.002
http	Avtech AVN801 network camera	1.0	24	0.002
http	Netwave IP camera http config		21	0.002
http	Apache	2.2.3	20	0.002
http	Apache Tomcat/Coyote JSP engine	1.1	19	0.001
http	Apache	2.2.15	17	0.001
vnc	VNC		16	0.001
http	rhttpd		15	0.001
http	Boa HTTPd	0.94.14rc21	15	0.001