Honeypot SSH Allegro RomSShell SSH RomSShell_4.62 HP Integrated Lights Out (iLO) usually bundled with HP servers mpSSH_0.0.1 Serv-U SSH Serv-U_7.4.0.1 WS_FTP Server with SSH WS_FTP-SSH_6.1.1 WS_FTP-SSH_7.0 OpenSSH running on FreeBSD OpenSSH running on NetBSD OpenSSH running on Ubuntu 5.10 OpenSSH_4.1p1 Debian-7ubuntu4 OpenSSH running on Ubuntu 6.04 OpenSSH_4.2p1 Debian-7ubuntu3.1 OpenSSH_4.2p1 Debian-7ubuntu3.2 OpenSSH running on Ubuntu 7.04 OpenSSH_4.3p2 Debian-8ubuntu1.4 OpenSSH running on Ubuntu 7.10 OpenSSH_4.6p1 Debian-5ubuntu0.2 OpenSSH_4.6p1 Debian-5ubuntu0.5 OpenSSH_4.6p1 Debian-5ubuntu0.6 OpenSSH running on Ubuntu 8.04 OpenSSH_4.7p1 Debian-8ubuntu1.2 OpenSSH running on Ubuntu 8.10 OpenSSH_5.1p1 Debian-3ubuntu1 OpenSSH running on Ubuntu 9.04 OpenSSH_5.1p1 Debian-5ubuntu1 OpenSSH running on Ubuntu 9.10 OpenSSH_5.1p1 Debian-6ubuntu2 OpenSSH running on Ubuntu 10.04 (lucid) OpenSSH_5.3p1 Debian-3ubuntu3 OpenSSH running on Ubuntu 10.04 (lucid) update 1 OpenSSH_5.3p1 Debian-3ubuntu4 OpenSSH running on Ubuntu 10.04 (lucid) update 2 OpenSSH_5.3p1 Debian-3ubuntu5 OpenSSH_5.3p1 Debian-3ubuntu6 OpenSSH running on Ubuntu 10.04 (lucid) update 3 or update 4 OpenSSH_5.3p1 Debian-3ubuntu7 OpenSSH running on Ubuntu 10.10 OpenSSH_5.5p1 Debian-4ubuntu4 OpenSSH_5.5p1 Debian-4ubuntu5 OpenSSH running on Ubuntu 11.04 OpenSSH_5.8p1 Debian-1ubuntu3 OpenSSH running on Ubuntu 11.10 OpenSSH_5.8p1 Debian-7ubuntu1 OpenSSH running on Ubuntu 12.04 OpenSSH_5.9p1 Debian-5ubuntu1 OpenSSH running on Ubuntu 12.10 OpenSSH_6.0p1 Debian-3ubuntu1 OpenSSH running on Ubuntu 13.04 OpenSSH_6.1p1 Debian-4 OpenSSH running on Ubuntu 14.04 OpenSSH_6.6p1 Ubuntu-2ubuntu1 OpenSSH running on Ubuntu OpenSSH running on Debian 4.0 (etch) OpenSSH running on Debian 3.1 (sarge) OpenSSH running on Debian 3.0 (woody) OpenSSH running on Debian (unknown version) OpenSSH with CVE patch, as seen in Mac OS X OpenSSH on MicroTik DesktopAuthority SSH Catch all for OpenSSH based SSH servers ******************** NOTE ******************** Be sure to put any specific OpenSSH derivative checks above this block. ******************** NOTE ******************** Cisco SSH banner (could be IOS or PIX). The version always seems to be 1.25 SSH banner from a Cisco Wireless LAN Controller (WLC) CISCO_WLC Sun SSH banner Netscreen Netscreen Huawei Versatile Routing Platform (VRP) HUAWEI-VRP-3.10 GlobalScape SSH (which uses Bitvise sshlib) Bitvise WinSSHD (which uses Bitvise sshlib) Bitvise WinSSHD (which uses Bitvise flowssh) 1.03 FlowSsh: WinSSHD 5.09 1.07 FlowSsh: WinSSHD 5.20: free only for personal non-commercial use MOVEit DMZ (which uses Bitvise sshlib) Pragma SecureShell VanDyke VShell VShell_3_6_2_446 VShell VanDyke VShell Attachmate Reflection (formerly WRQ Reflection for Secure IT) Attachmate Reflection (formerly F-Secure SSH) SSH Communications Security Tectia Server 3.2.9.1 SSH Secure Shell (non-commercial) 4.0.3 SSH Secure Shell 4.4.2.3 SSH Secure Shell SSH Communications Security Tectia Server Unknown Windows SSH server 4.0.3 SSH Secure Shell Windows NT Server ARRIS device (though not clear which) - www.arrisi.com Mocana Embedded SSH (note, there seem to be spaces at the end of the returned banner, thus the .* FreSSH RomCliSecure appears to be the Adtran NetVanta products Process Software MultiNet is a suite of network apps for OpenVMS Dropbear - http://matt.ucc.asn.au/dropbear/dropbear.html LANCOM Systems - http://www.lancom-systems.de/ MOVEit DMZ SSH on H3C Comware Comware-5.20.105 Comware-5.20