What it checks
Whether port 22 accepts a connection and answers as an SSH service.
A pass means: SSH is not reachable from the internet.
Possible findings
SSH reachable from the internet
Severity: InformationConfidence: High confidenceKind: Informational
What we found
An SSH service accepted a connection from the internet.
Why it matters
This is common and not a problem in itself, but SSH should use key-based authentication only, be kept patched, and ideally be limited to known source addresses.
How to fix it
Review whether SSH needs to be public. If so, disable password logins (PasswordAuthentication no), keep OpenSSH updated, and consider restricting source addresses.