HoneyLabs

HASSH SSH client fingerprint

98ddc5604ef6a1006a2b49a58759fbe6

Seen 2026-05-04 to 2026-07-19 across the retained window.

260

Source IPs

108

Networks

33

Countries

1

Ports hit

47.5K

Events

2

IPs / network

Top networks

AS4134 Chinanet29 IPs5.2K
AS0 3 IPs429

Countries

CN 166US 15RU 10IR 7IN 7DE 6VN 6ID 4FR 4BR 3

Ports targeted

Source IPCCNetworkEvents
27.155.92.28CNAS133774 Fuzhou1.4K
111.160.133.62CNAS4837 CHINA UNICOM China169 Backbone1.0K
188.254.76.32RUAS12389 Rostelecom854
218.28.78.67CNAS4837 CHINA UNICOM China169 Backbone849
220.205.123.57CNAS140726 UNICOM AnHui province network840
81.181.166.141ROAS48881 DataNode DC SRL836
14.18.114.170CNAS58466 CHINANET Guangdong province network717
115.231.236.150CNAS58461 CT-HangZhou-IDC685
158.51.96.38USAS397270 NetInformatik Inc.678
120.48.0.142CNAS38365 Beijing Baidu Netcom Science and Technology Co., Ltd.599
14.116.184.171CNAS4134 Chinanet594
220.168.118.133CNAS4134 Chinanet496
43.226.36.171CNAS134762 CHINANET Liaoning province Dalian MAN network476
41.140.126.65MAAS36903 MT-MPLS438
59.24.28.114KRAS4766 Korea Telecom438
117.50.211.254CNAS4808 China Unicom Beijing Province Network435
202.51.208.195IDAS55685 PT Jala Lintas Media432
95.38.176.121IRAS41881 Fanava Group432
89.238.165.139GBAS9009 M247 Europe SRL432
154.210.208.250INAS18229 CtrlS432

About this fingerprint

HASSH is an MD5 over the ordered algorithm lists an SSH client offers during key exchange, before any authentication. It identifies the SSH implementation and version behind a connection at the handshake.