ScanSSH - fast SSH server and open proxy scanner
ScanSSH supports scanning a list of addresses and networks for open proxies, SSH protocol servers, Web and SMTP servers. Where possible ScanSSH, displays the version number of the running services. ScanSSH protocol scanner supports random selection of IP addresses from large network ranges and is useful for gathering statistics on the deployment of SSH protocol servers in a company or the Internet as whole.

The first version of the ScanSSH protocol scanner was released in September 2000. You can download the current version below.


To build ScanSSH, you need to install libevent and libdnet.

The ScanSSH protocol scanner is distributed under a 4-clause BSD-license and completely free for any use including commercial.


$ scanssh -p -e excludes
[...] <refused> <refused> SOCKS v5 http proxy <timeout> <timeout> <timeout> SSH-1.99-OpenSSH_3.8 Apache/2.0.30 (Unix) mod_ssl/2.2 SSH-1.99-OpenSSH_3.6.1

 Happpy Hacking 
 Keep me happy while
 hacking on ScanSSH. 
 Reduce my wishlist! 

 Support ScanSSH 
 Search Amazon  


ScanSSH supports the following features:
  • Variable scanning speed. Per default, ScanSSH sends out 100 probes per second. The -r flag can be used to change the number of probes sent per second.
  • Open proxy detection. The -p flag initializes scan modules to detect open proxies on common ports.
  • Random sampling. It is possible to randomly sample hosts on the Internet, for example, by specifying 'random(1000)/' as address parameter.
For more features, please check the man page.



If you are inclined, you can
 send me books or,
 send me music or,
 leave a tip for me with PayPal. Sign up for it.

Niels Provos
Last modified: Wed Apr 7 23:29:34 EDT 2004
  You can keep me happy while hacking by reducing my Wishlists: Books, Music