SSH version statistics in March 2013

Another interesting fact that came up with the processing of SSH banners which were captured in March 2013, is the amount of hosts using deprecated versions of SSH.

Out of 1900734 IPs, we have the following results:

SSH Version Number of Hosts
2.0 1678331
1.99 172907
1.5 21281
1.4 6
1.3 2
modified version 13
Diversity: 1.44

Modified versions included heavy alterations of the SSH banner, such as “SSH Secret” and “SSH 4.00”. Since the data are one years old, the amount of hosts using SSH version below 1.99 should be even lower; we can claim that 1.5 SSH version or worse, still exists.


Now read this

FTP and the idea of Diversity

Wouldn’t be nice, if we had a single number that represents the uniformity of a network? A number that shows if multiple hosts are using the same services or they try to be as diverse as possible from the norm. The idea is based on the... Continue →