Live stats
What everyone else's SSH client looks like. The one thing a single connection cannot tell you is whether you are normal.
3 sessions
100%
support strict key exchange — the Terrapin fix. OpenSSH has shipped it since 9.6, so this number is really "how current is everyone".
100%
offer a post-quantum hybrid key exchange. The one axis where upgrading protects traffic already sent, because a recorded session can be decrypted later.
100%
offered a public key. The rest connected without one, which this server allows on purpose.
0%
arrived with agent forwarding enabled — to a server they had never connected to before.
Distributions
Client software
OpenSSH_10.2 |
67% | |
OpenSSH_10.2p1 |
33% |
Key types offered
ssh-ed25519 |
100% |
Negotiated key exchange
mlkem768x25519-sha256 |
100% |
Negotiated cipher
aes256-gcm@openssh.com |
67% | |
chacha20-poly1305@openssh.com |
33% |
Negotiated MAC
hmac-sha2-256-etm@openssh.com |
100% |
HASSH — client software fingerprints
180227e220ec6ba7d6499ab778782040 |
67% | |
eeca2460550b9ded084ecf2f70a75356 |
33% |
What is and is not counted
Counters only. No addresses, no keys, no fingerprints of individuals, no per-connection records, nothing on disk. Everything here lives in memory and disappears when the process restarts — which it does on every deploy, so these numbers are a recent sample rather than a history.
The HASSH values are fingerprints of software, not of people: two machines running the same OpenSSH build with stock settings produce the same one. That is exactly why the distribution is short.
Every distribution is capped at 200 distinct labels. Past that, new labels still count toward the total but are not tracked individually — otherwise anyone could make this server allocate memory forever by inventing version strings.
As JSON: curl ssh.rocks/api/stats