This will work unless IPv6 address is used to host any website with TLS - Censys and Onyphe AFAIK already use this heuristics to scan IPv6 addresses already

Reply to this note

Please Login to reply.

Discussion

You don't need to bind sshd to the same IP as a webserver or anything else. There are gazillions of IP6's, scanning them all isn't feasible.

On most servers you get a /64, which is 18,446,744,073,709,551,616 IP6s. That's 18 quintillion.

This is true, intention of my post was to raise awareness of others

Yup, and what you said is good info too. Just figured I'd add the IPv6 angle.

Btw we offer routed /56 IPv6 prefixes if asked for free if default /64 allocation is not enough