An API for ssh_scan (https://github.com/mozilla/ssh_scan) and the backend API service for the Mozilla SSH Observatory (https://observatory.mozilla.org/)
Doing broad internet scanning to find SSH ports is time consuming and simply outside the scope of this project. However, using the tool against known SSH endpoints that are already known (like the sonar dataset) might be helpful from a research and progress tracking perspective that would also help inform decision making around policy creation. It's also helpful for finding and fixing bugs in the engine by giving it more examples to work against.
To do this, it likely depends on running a research instance of the infra or just having a low priority queue where we can dump large quantities of hosts to scan (https://github.com/mozilla/ssh_scan_api/issues/77)
claudijd
commented
7 years ago
Doing broad internet scanning to find SSH ports is time consuming and simply outside the scope of this project. However, using the tool against known SSH endpoints that are already known (like the sonar dataset) might be helpful from a research and progress tracking perspective that would also help inform decision making around policy creation. It's also helpful for finding and fixing bugs in the engine by giving it more examples to work against.
To do this, it likely depends on running a research instance of the infra or just having a low priority queue where we can dump large quantities of hosts to scan (https://github.com/mozilla/ssh_scan_api/issues/77)