HoneyLabs

HASSH SSH client fingerprint

fda360b1b4f4d3455cb75c6e7edb1d11

Seen 2026-05-04 to 2026-08-28 across the retained window.

130

Source IPs

2

Networks

1

Countries

1

Ports hit

1.1K

Events

65

IPs / network

This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.

Top networks

Countries

VN 130

Ports targeted

Source IPCCNetwork Last seenEvents
171.243.150.99VNAS7552 Viettel Group2026-08-0728
171.231.183.72VNAS7552 Viettel Group2026-08-1526
171.231.178.70VNAS7552 Viettel Group2026-08-2225
116.99.172.41VNAS24086 Viettel Corporation2026-08-1423
116.99.171.175VNAS24086 Viettel Corporation2026-08-0922
27.79.43.66VNAS7552 Viettel Group2026-08-1721
27.79.45.52VNAS7552 Viettel Group2026-08-0920
171.231.185.170VNAS7552 Viettel Group2026-08-1318
116.110.150.29VNAS24086 Viettel Corporation2026-08-0517
27.79.5.184VNAS7552 Viettel Group2026-08-0117
116.99.170.187VNAS24086 Viettel Corporation2026-08-1717
116.110.144.148VNAS24086 Viettel Corporation2026-08-0117
116.99.171.180VNAS24086 Viettel Corporation2026-07-3017
116.99.170.82VNAS24086 Viettel Corporation2026-08-0916
171.231.194.150VNAS7552 Viettel Group2026-08-0616
27.79.41.44VNAS7552 Viettel Group2026-08-0715
27.79.43.196VNAS7552 Viettel Group2026-08-0315
27.79.2.163VNAS7552 Viettel Group2026-08-1915
27.79.46.246VNAS7552 Viettel Group2026-08-1714
116.110.151.218VNAS24086 Viettel Corporation2026-08-0414

About this fingerprint

HASSH is an MD5 over the ordered algorithm lists an SSH client offers during key exchange, before any authentication. It identifies the SSH implementation and version behind a connection at the handshake.