{
  "port": 8022,
  "protocol": "tcp",
  "service": "SSH alternate; Termux sshd",
  "oneLiner": "SSH moved off 22 — and specifically the default for Termux's sshd on Android.",
  "whatItIs": "IANA registers 8022 as oa-system, which you will rarely encounter. The number's practical life is as an SSH alternate: Termux patches OpenSSH so its `sshd` defaults to 8022, since an unprivileged Android app cannot bind 22, and plenty of appliances and containers do the same thing for the same reason. An open 8022 that answers with an `SSH-2.0-` banner is exactly that, and moving the port changes nothing about the protocol's security.",
  "exposure": {
    "verdict": "careful",
    "note": "SSH itself is fine to expose when it is key-only with passwords disabled. The caveat is what tends to sit here — phones and small devices running sshd with a weak or default password — and that a non-standard port is obscurity, not defence."
  },
  "checkCommand": "nc -w 3 TARGET 8022 | head -1",
  "links": [
    {
      "title": "termux/termux-packages — openssh servconf.c.patch (default port 8022)",
      "url": "https://github.com/termux/termux-packages/blob/master/packages/openssh/servconf.c.patch",
      "kind": "github"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 8022 (oa-system)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=8022",
      "kind": "iana"
    }
  ],
  "ianaName": "oa-system"
}