HoneyLabs
LookupEnrichFeedsCVEsCampaignsASN IndexMCPBlogDocs
Dashboard

HASSH SSH client fingerprint

7216c7c473918b4f83d1139b3c70dbf9

Seen 2026-05-04 to 2026-06-04 across the retained window.

Open in lookup →

668

Source IPs

1

Networks

1

Countries

12

Ports hit

1.3K

Events

668

IPs / network

This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.

Top networks

AS6939 Hurricane Electric LLC668 IPs1.3K

Countries

US 668

Ports targeted

22522/tcp 1101337/tcp 1094118/tcp 10950000/tcp 10957722/tcp 10922122/tcp 108212/tcp 107830/tcp 10722222/tcp 10753282/tcp 1073389/tcp 10422/tcp 89
Source IPCCNetworkEvents
65.49.1.136USAS6939 Hurricane Electric LLC7
64.62.156.169USAS6939 Hurricane Electric LLC6
65.49.1.172USAS6939 Hurricane Electric LLC6
64.62.156.218USAS6939 Hurricane Electric LLC6
64.62.197.48USAS6939 Hurricane Electric LLC5
64.62.156.44USAS6939 Hurricane Electric LLC5
64.62.156.52USAS6939 Hurricane Electric LLC5
65.49.1.226USAS6939 Hurricane Electric LLC5
65.49.1.139USAS6939 Hurricane Electric LLC5
65.49.1.100USAS6939 Hurricane Electric LLC5
65.49.1.220USAS6939 Hurricane Electric LLC5
64.62.156.167USAS6939 Hurricane Electric LLC5
64.62.156.201USAS6939 Hurricane Electric LLC5
65.49.1.163USAS6939 Hurricane Electric LLC5
64.62.156.34USAS6939 Hurricane Electric LLC5
64.62.156.173USAS6939 Hurricane Electric LLC5
65.49.1.194USAS6939 Hurricane Electric LLC5
64.62.156.213USAS6939 Hurricane Electric LLC5
65.49.1.200USAS6939 Hurricane Electric LLC5
65.49.1.128USAS6939 Hurricane Electric LLC5

About this fingerprint

HASSH is an MD5 over the ordered algorithm lists an SSH client offers during key exchange, before any authentication. It identifies the SSH implementation and version behind a connection at the handshake.