Overview of services running on Port 139 TCP.
~1.32 Million IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.

Servicename	Product	Count	Percent
netbios-ssn	Microsoft Windows 98 netbios-ssn	1157261	87.525
netbios-ssn	Samba smbd	130868	9.898
no match	-/-	16568	1.253
netbios-ssn	Nepenthes honeypot netbios-ssn	9996	0.756
netbios-ssn		1538	0.116
http		1311	0.099
chat	AIM or ICQ server	1117	0.084
netbios-ssn	Konica Minolta bizhub C452 printer smbd	846	0.064
http	SonicWALL	629	0.048
routersetup	Nortel/D-Link router instant setup	517	0.039
http	AIM	316	0.024
netbios-ssn	NetWare 6 SMB Services	171	0.013
http	Apache	126	0.01
http	Microsoft IIS httpd	96	0.007
http	thttpd	87	0.007
ssh		56	0.004
ssh	OpenSSH	49	0.004
microsoft-ds	Edimax PS-1206P print server smbd	43	0.003
http	Microsoft HTTPAPI httpd	37	0.003
http	GoAhead-Webs	32	0.002
socks5		26	0.002
telnet		25	0.002
http	Avtech AVN801 network camera	24	0.002
http	Netwave IP camera http config	21	0.002
http	Apache Tomcat/Coyote JSP engine	19	0.001
http	Boa HTTPd	18	0.001
vnc	VNC	16	0.001
http	rhttpd	15	0.001
http-proxy	Squid http proxy	14	0.001
http	nginx	14	0.001
ftp		12	0.001
smtp	Microsoft ESMTP	11	0.001
http	Hikvision-Webs	10	0.001