ScanSSH - Scanning the Internet for SSH Servers
Niels Provos, Peter Honeyman · Deep Blue (University of Michigan) · 2001
SSH is a widely used application that provides secure remote login. It uses strong cryptography to provide authentication and condentiality. The IETF SecSH working group is developing SSH v2, an improved SSH protocol that xes cryptographic and design aws in the SSH v1 protocol. SSH v2 compatible server software is widespread. Recently discovered security aws make it critically important to nd vulnerable SSH servers and update them. In this paper, we describe a method to determine with good precision how many servers supporting the various protocol versions have been deployed on the net. We describe the design and implementation of ScanSSH, a scanner that probes SSH servers for their software version, and discuss the results of scanning the Internet and our local networks for several months. October 2, 2001 Center for Information Technology Integration University of Michigan 535 West William Street Ann Arbor, MI 48103-4943 . ScanSSH - Scanning the Internet for SSH Servers Niels Provos Peter Honeyman Center for Information Technology Integration University of Michigan 1