HASSH SSH client fingerprint

9052c4ab4164c78256e71143dcfc7eac

Seen 2026-05-04 to 2026-09-24 across the retained window.

The feed is a URL your firewall, MISP or SIEM polls; it needs a free account so it can be revoked. Or watch the top network: AS14618 sends an email when it next hits a sensor.

Source IPs

Networks

Countries

Ports hit

664

Events

IPs / network

Top networks

AS14618 Amazon.com, Inc.50 IPs84

AS10439 CariNet, Inc.11 IPs252

AS50219 Valence Technology Co.9 IPs257

AS32475 Internap Holding LLC3 IPs67

AS47890 Unmanaged Ltd1 IPs4

Countries

US 73RO 1

Ports targeted

22/tcp 97 8822/tcp 19 2122/tcp 18 9022/tcp 18 2376/tcp 18 1024/tcp 18 5656/tcp 17 22022/tcp 17 9222/tcp 17 4321/tcp 17 6000/tcp 16 2022/tcp 16

Source IPCCNetwork Last seenEvents

216.226.76.30AS0 Valence Technology Co.2026-09-2440

216.226.77.10AS0 Valence Technology Co.2026-09-2338

203.55.131.5AS0 Internap Holding LLC2026-09-2334

216.226.76.20AS0 Valence Technology Co.2026-09-2332

216.226.76.10AS0 Valence Technology Co.2026-09-2430

71.6.134.232AS0 CariNet, Inc.2026-09-2430

71.6.134.233AS0 CariNet, Inc.2026-09-2229

71.6.134.237AS0 CariNet, Inc.2026-09-2228

71.6.134.236AS0 CariNet, Inc.2026-09-2327

194.164.107.5AS0 Valence Technology Co.2026-09-2226

194.164.107.6AS0 Valence Technology Co.2026-09-1826

71.6.134.204AS0 CariNet, Inc.2026-09-2423

194.164.107.4AS0 Valence Technology Co.2026-09-2323

71.6.134.228AS0 CariNet, Inc.2026-09-2423

71.6.134.231AS0 CariNet, Inc.2026-09-2323

216.226.77.20AS0 Valence Technology Co.2026-09-2422

203.55.131.3AS0 Internap Holding LLC2026-09-2422

216.226.77.30AS0 Valence Technology Co.2026-09-2220

71.6.134.229AS0 CariNet, Inc.2026-09-2220

71.6.134.234AS0 CariNet, Inc.2026-09-2320

About this fingerprint

HASSH is an MD5 over the ordered algorithm lists an SSH client offers during key exchange, before any authentication. It identifies the SSH implementation and version behind a connection at the handshake.