It could also be used for IP reputation, running ssh can be a sign of a proxy or... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

mcwhy on Sept 25, 2021 | parent | context | favorite | on: AS13335 doing SSH scanning

It could also be used for IP reputation, running ssh can be a sign of a proxy or other server/service that website owners might want to block.

jimsi on Sept 25, 2021 | [–]

I think single SYN packet would be enough to know whether this port open or not, but they trying to gather full banner.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact