HoneyLabs
LookupEnrichFeedsCVEsCampaignsASN IndexMCPBlogDocs
Dashboard

HASSH SSH client fingerprint

98ddc5604ef6a1006a2b49a58759fbe6

Seen 2026-05-04 to 2026-06-04 across the retained window.

Open in lookup →

123

Source IPs

58

Networks

19

Countries

1

Ports hit

19.1K

Events

2

IPs / network

Top networks

AS137718 Beijing Volcano Engine Technology Co., Ltd.15 IPs886
AS38365 Beijing Baidu Netcom Science and Technology Co., Ltd.13 IPs365
AS4134 Chinanet12 IPs1.6K
AS4837 CHINA UNICOM China169 Backbone11 IPs2.3K
AS4808 China Unicom Beijing Province Network7 IPs178
AS202468 Noyan Abr Arvan Co. ( Private Joint Stock)4 IPs1.2K
AS12389 Rostelecom3 IPs445
AS58466 CHINANET Guangdong province network2 IPs786
AS140726 UNICOM AnHui province network2 IPs680
AS0 2 IPs427
AS4811 China Telecom Group2 IPs100
AS59019 Beijing Kingsoft Cloud Internet Technology Co., Ltd2 IPs49

Countries

CN 80US 8RU 7IR 6PK 3DE 3VN 2IN 2KR 2FI 1

Ports targeted

22/tcp 19.1K
Source IPCCNetworkEvents
111.160.133.62CNAS4837 CHINA UNICOM China169 Backbone825
14.18.114.170CNAS58466 CHINANET Guangdong province network717
158.51.96.38USAS397270 NetInformatik Inc.622
41.140.126.65MAAS36903 MT-MPLS438
59.24.28.114KRAS4766 Korea Telecom438
103.160.5.123VNAS140764 CSD Group Technology JSC.432
51.15.19.10NLAS12876 Scaleway S.a.s.432
95.38.176.121IRAS41881 Fanava Group432
170.150.255.26BRAS61663 INFOLINE BANDA LARGA432
5.161.81.130USAS213230 Hetzner Online GmbH432
144.31.152.46FIAS215590 DpkgSoft International Limited432
154.210.208.250INAS18229 CtrlS432
193.169.241.19UAAS3236 Server.ua LLC429
14.116.184.171CNAS4134 Chinanet428
152.53.186.30ATAS197540 netcup GmbH428
45.41.207.162USAS32181 GigeNET426
188.254.76.32RUAS12389 Rostelecom426
153.75.247.30USAS0 426
220.205.123.57CNAS140726 UNICOM AnHui province network423
125.39.93.232CNAS4837 CHINA UNICOM China169 Backbone418

About this fingerprint

HASSH is an MD5 over the ordered algorithm lists an SSH client offers during key exchange, before any authentication. It identifies the SSH implementation and version behind a connection at the handshake.