ScanSSH - fast SSH server and open proxy scanner

ScanSSH supports scanning a list of addresses and networks for open proxies, SSH protocol servers, Web and SMTP servers. Where possible ScanSSH, displays the version number of the running services. ScanSSH protocol scanner supports random selection of IP addresses from large network ranges and is useful for gathering statistics on the deployment of SSH protocol servers in a company or the Internet as whole.

ScanSSH supports the following features:

• Variable scanning speed. Per default, ScanSSH sends out 100 probes per second. The -r flag can be used to change the number of probes sent per second.
• Open proxy detection. The -p flag initializes scan modules to detect open proxies on common ports.
• Random sampling. It is possible to randomly sample hosts on the Internet, for example, by specifying 'random(1000)/0.0.0.0/0' as address parameter.

Go there...
http://monkey.org/~provos/scanssh/

Don