New submissions to nmap-service-probes part 0

[doug () hcsw org]

Hi nmap-dev,

I just processed the new mbox for the last 6+ months of
submissions. In total there were 1746 submissions - wow,
should result in a big update. Thanks to everyone who
contributed!

For anyone who is curious, I'm appending the break-down
of services this time around (less one that put an IP
in the service field for some reason). Not too many
surprises except perhaps the quantity of SSH submissions.
Some popular new server or distro patch since the last
update? We'll soon find out.

Well, time to get down to work. :)

Doug

Service break-down for nmapsubmit-svfp-020309.mbx :

(("http" 354) ("ssh" 149) ("ftp" 99) ("telnet" 98) ("smtp" 60) ("ssl" 32) ("bittorrent" 31) ("unknown" 27) 
("http-proxy" 27) ("skype" 24) ("pop3" 20) ("privoxy" 20) ("domain" 20) ("irc" 19) ("imap" 19) ("https" 19) ("vmware" 
17) ("sip" 16) ("printer" 16) ("upnp" 11) ("svnserve" 9) ("rtsp" 9) ("afp" 9) ("kerio" 7) ("jabber" 7) ("vmware-auth" 
7) ("bittorrent-tracker" 7) ("kguard" 6) ("ibm" 6) ("postgresql" 6) ("vnc-http" 6) ("vnc" 6) ("telnets" 6) ("eggdrop" 
5) ("openvpn" 5) ("mysql" 5) ("broadband" 5) ("transmission" 5) ("sophos" 5) ("abc" 4) ("mtpchat" 4) 
("access-remote-pc" 4) ("ushare" 4) ("pop3s" 4) ("radmin" 4) ("approx" 4) ("rpcbind" 3) ("dreambox" 3) ("skype2" 3) 
("wavelink-server" 3) ("dont" 3) ("vmware-hostd" 3) ("ntp" 3) ("ezproxy" 3) ("pop3-proxy" 3) ("twonkyvision" 3) 
("gopher" 3) ("webmin" 3) ("landesk" 3) ("keriopfservice" 3) ("utorrent" 3) ("airport-admin" 3) ("tscm" 3) ("sftp" 3) 
("snmp" 3) ("finger" 3) ("epop" 2) ("unkown" 2) ("squirm" 2) ("bfagent" 2) ("crashplan" 2) ("airtunes" 2) ("hz" 2) 
("acp" 2) ("ipp" 2) ("netbios-ns" 2) ("adobe" 2) ("smtp-proxy" 2) ("rtorrent" 2) ("hp" 2) ("tcpmux" 2) ("teamviewer" 2) 
("admdog" 2) ("daap" 2) ("deluge" 2) ("hp-gsg" 2) ("https-alt" 2) ("man" 2) ("promise" 2) ("shoutcast" 2) ("vsftpd" 2) 
("vmwareinftrastructure" 2) ("cccam" 2) ("ziproxy" 2) ("nntp" 2) ("vdr" 2) ("gnutella" 2) ("proxy-agent" 2) ("django" 
2) ("mangos" 2) ("3cxtunnel.exe" 2) ("tor" 2) ("oracle-tns" 2) ("mediatomb" 2) ("squid" 2) ("backupexec" 2) ("l2j" 2) 
("landesk-rc" 2) ("tscm-server" 2) ("x11" 2) ("plesk" 2) ("no" 2) ("amanda" 2) ("lasso" 2) ("venti" 2) ("limewire" 2) 
("rlogin" 2) ("osiris" 2) ("ajp13" 2) ("steam" 2) ("chat" 2) ("azureus" 2) ("sbnc" 2) ("netstat" 2) ("apt-cacher" 2) 
("vonage" 2) ("microsoft-ds" 2) ("ssl/imap" 2) ("pipeline-pilot" 2) ("ntop-http" 2) ("samba-swat" 2) ("iax2" 1) 
("odsagent" 1) ("it" 1) ("realplayer" 1) ("apt-cacher-ng" 1) ("remoteanything" 1) ("jtagd" 1) ("dnsix" 1) ("osirisd" 1) 
("ppp" 1) ("openssh" 1) ("sl" 1) ("hotline" 1) ("sans" 1) ("axon" 1) ("tftp" 1) ("msgagt.exe" 1) ("asterisk" 1) 
("xiowebservices" 1) ("abyss?" 1) ("sap" 1) ("ident" 1) ("lastfm" 1) ("bmc" 1) ("maya2009" 1) ("zenworks" 1) 
("spry-safetyweb-server-nt/1.3a" 1) ("transmission-bittorrent" 1) ("last.fm" 1) ("ut2004_gameport" 1) ("unrecognized" 
1) ("web" 1) ("3dm-http" 1) ("sap-its" 1) ("thinprint" 1) ("optenet" 1) ("kvm" 1) ("moxa" 1) ("dns" 1) ("flash" 1) 
("msdtc" 1) ("oraclemtsrecoveryservice" 1) ("ms" 1) ("transmissionbt" 1) ("dragonfly" 1) ("whois" 1) ("dtlogin" 1) 
("unknown?" 1) ("oco" 1) ("avm-fritz-router" 1) ("kdc5" 1) ("znc" 1) ("ejabberd-webinterface" 1) ("db2" 1) ("psql" 1) 
("llink" 1) ("indigo" 1) ("iss-realsecure" 1) ("adp" 1) ("monalisa" 1) ("realwin" 1) ("damewaremr" 1) ("lmtp" 1) 
("zotero" 1) ("argus" 1) ("callback.?" 1) ("glassfishv3" 1) ("psybnc" 1) ("exceed" 1) ("freenet" 1) ("hauppauge" 1) 
("remotelyanywhere" 1) ("ktorrent" 1) ("zebra" 1) ("frostwire" 1) ("sqpsmtpd" 1) ("cherrypy" 1) ("gfi" 1) ("alcohol" 1) 
("rampancy" 1) ("yaws/1.73" 1) ("nginx" 1) ("socks5" 1) ("pdanet" 1) ("daytime" 1) ("openwbem" 1) ("btrieve" 1) 
("majestic-12" 1) ("ispcp" 1) ("nntps" 1) ("137" 1) ("ms-sql-s" 1) ("3proxy" 1) ("cim" 1) ("sphinxdaemon" 1) ("icmpd" 
1) ("videolan" 1) ("netsupport" 1) ("p910nd" 1) ("utcd" 1) ("splunkd" 1) ("mysql-im" 1) ("bmc-tuner" 1) ("msrv" 1) 
("xen-http" 1) ("honeypot" 1) ("voip" 1) ("deluged" 1) ("smtps" 1) ("exec" 1) ("time" 1) ("krb524" 1) ("dbmail" 1) 
("sauerbraten" 1) ("microworld" 1) ("hw" 1) ("splunk-web" 1) ("assp" 1) ("clms/ci/openssi" 1) ("nstx" 1) ("ipm" 1) 
("distccd" 1) ("eset_nod32_lan_update" 1) ("mail-admin" 1) ("nitroview" 1) ("lpd" 1) ("altiris" 1) ("avocentkvm" 1) 
("sgi" 1) ("xencenter" 1) ("raidmsvr" 1) ("rpm" 1) ("imaps" 1) ("lucene" 1) ("bittorent-tracker" 1) 
("ssh,telnet,rpcbind,rpc,oracle-tns,http-proxy" 1) ("realvnc" 1) ("service-monitor" 1) ("targa" 1) 
("hp-remote-serial-console" 1) ("ssl/pop3" 1) ("esxi" 1) ("i" 1) ("220" 1) ("grandstream" 1) ("megamek" 1) ("rtmp" 1) 
("mcafee" 1) ("msrpc," 1) ("finchsync" 1) ("intel" 1) ("bluecoat" 1) ("openfire" 1) ("ncp" 1) ("datalogger" 1) ("fms" 
1) ("ability" 1) ("ss/http" 1) ("tivo" 1) ("scpi" 1) ("apc" 1) ("nt40-telnet" 1) ("compaq" 1) ("dectalk?" 1) 
("invokator?" 1) ("bacula-fd" 1) ("http," 1) ("smpd" 1) ("speco" 1) ("websense-eim" 1) ("pcsync-https" 1) ("gsiftp" 1) 
("lotusnotes" 1) ("winrm" 1) ("bigfix" 1) ("nepenthes" 1) ("google-appengine" 1) ("p2p" 1) ("aplus" 1) ("webvpn" 1) 
("sbhttp.exe" 1) ("oracle" 1) ("ricohaficioservscann" 1) ("microsoft-rdp" 1) ("xfce-session" 1) ("file" 1) ("mon" 1) 
("dsf" 1) ("mythlcdserver" 1) ("iperf" 1) ("acmp-inventory" 1) ("vuze" 1) ("postfix" 1) ("opentracker" 1) ("sockso" 1) 
("efi-cws" 1) ("esmtp" 1) ("w0" 1) ("projectforum" 1) ("apple" 1) ("rchost.exe" 1) ("ser2net" 1) ("netbios-ssn" 1) 
("brother-scanner" 1) ("http-proxy-ctrl" 1) ("mohaa" 1) ("media" 1) ("veritasnetbackup" 1) ("zimbra-mailboxd-pop-ssl" 
1) ("zimbra-pop3" 1) ("zimbra-http" 1) ("qnap-admin-http" 1) ("kerberos-sec" 1) ("qnap-admin" 1) ("5002" 1) ("cisco" 1) 
("sony" 1) ("xport" 1) ("rcslistener" 1) ("remote" 1) ("mfc-httpsvr/1.0" 1) ("eathena" 1) ("micro-httpd" 1) ("http/80" 
1) ("1030" 1) ("conference" 1) ("ircd-ircu" 1) ("acmsoda" 1) ("netasq" 1) ("azuerus" 1) ("3cxivrserver.exe" 1) 
("3cxcp.exe" 1) ("3cxpo.exe" 1) ("3cx" 1) ("silverstream" 1) ("winstone" 1) ("navicimom" 1) ("sql(whatsup)" 1) 
("zenoss" 1) ("automate" 1) ("ultima" 1) ("partimage" 1) ("drweb" 1) ("xvnc" 1) ("dell" 1) ("cyrus" 1) ("btmux" 1) 
("qotd" 1) ("xmpp" 1) ("citrixaccessgateway" 1) ("gotomeeting" 1) ("backdoor" 1) ("paromed" 1) ("zftpserver" 1) 
("icecast" 1) ("gigavue-420" 1) ("font-service" 1) ("bittorrent-dht" 1) ("teamxchange" 1) ("micro_httpd" 1) ("atis" 1) 
("rpc" 1) ("digital" 1) ("fifo" 1) ("courier" 1) ("darkstat" 1) ("nameserver" 1) ("opensimulator" 1) ("proftpd" 1) 
("sawmill" 1) ("efi" 1) ("shell" 1) ("zabbix" 1) ("emc-snas" 1) ("titan" 1) ("kvmp" 1) ("syncast" 1) ("gadu" 1) 
("boinc" 1) ("ws/0.1" 1) ("hpjetadmin" 1) ("winfs" 1) ("the" 1) ("sip-proxy" 1) ("ui-view32" 1) ("mngsuite," 1) 
("https:443" 1) ("atrn" 1) ("gnump3" 1) ("bandwidth-test" 1) ("mldonkey-server" 1) ("antivir" 1) ("acme" 1) 
("pulseaudio" 1) ("xdmcp" 1) ("soho" 1) ("http-mgmt" 1) ("sonos" 1) ("sun" 1) ("32764" 1) ("cpanel-ssl" 1) 
("cpanel-nonssl" 1) ("cpanel-whm-nonssl" 1) ("cpanel-webmail" 1) ("cpanel-whm" 1) ("wins" 1) ("vmware-server-2-ssl" 1) 
("vmware-server-2" 1) ("pymsn-t" 1) ("kutinsoft" 1) ("apc-agent" 1) ("havp" 1) ("ftp-zope" 1) ("squid/2.6.stable7" 1) 
("jetdirect?" 1) ("rshd" 1) ("zeus-admin" 1) ("listserv" 1) ("projectwise" 1) ("discovery" 1) ("ir-alerts" 1) ("splunk" 
1) ("zeroconf" 1) ("lightspeed" 1) ("apt-proxy" 1) ("bgpd" 1))

Attachment: _bin
Description:

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org