# SSL scanners

DevFeed: [SSL scanners](<https://devfeed.tech/articles/ssl-scanners-38914.md>)

Original publisher: [Read original article](<https://idea.popcount.org/2012-11-12-ssl-scanners>)

Author: Marek

Published: 2012-11-11T23:00:00Z

Content type: opinion

Language: en

Sources: [Marek Majkowski](<https://devfeed.tech/sources/marek-majkowski.md>)

Topics: [SSL](<https://devfeed.tech/topics/ssl.md>), [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>), [client](<https://devfeed.tech/topics/client.md>), [browser](<https://devfeed.tech/topics/browser.md>)

Tags: [browser](<https://devfeed.tech/tags/browser.md>), [client](<https://devfeed.tech/tags/client.md>), [scanners](<https://devfeed.tech/tags/scanners.md>), [ssl](<https://devfeed.tech/tags/ssl.md>), [tls](<https://devfeed.tech/tags/tls.md>), [traffic](<https://devfeed.tech/tags/traffic.md>)

## AI overview

The author analyzes unusual SSL client requests observed while recording traffic on port 443 to build a database of SSL fingerprints. The article compares scans associated with SSL Labs, Netco Solutions, Johns Hopkins University, Amazon, and Opera, and discusses possible purposes and suspicious protocol probes.

## Source excerpt

SSL scanners In June I started playing with fingerprinting SSL client requests. For example, an SSL fingerprint of my browser is: Read the docs of fingerprint format, or even more detailed description. I wanted to prepare a database of popular fingerprints, so I started recording traffic on port 443. I quickly noticed that apart from normal traffic there are some hosts sending weird SSL requests that make no practical sense and look like scanning.