HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

HASSH SSH client fingerprint

bc9e7273cde22b1209d6673b5fd10bd5

Seen 2026-07-06 to 2026-09-14 across the retained window.

Open in lookup → Addresses as a feed

The feed is a URL your firewall, MISP or SIEM polls; it needs a free account so it can be revoked. Or watch the top network: AS25369 sends an email when it next hits a sensor.

59

Source IPs

1

Networks

2

Countries

58

Ports hit

64

Events

59

IPs / network

This fingerprint is concentrated: many addresses on very few networks, which is what a single coordinated operation tends to look like.

Top networks

AS25369 Hydra Communications Ltd59 IPs64

Countries

GB 40DE 19

Ports targeted

9443/tcp 55001/tcp 29000/tcp 221/tcp 18082/tcp 188/tcp 1102/tcp 1110/tcp 1143/tcp 1179/tcp 1389/tcp 1548/tcp 1
Source IPCCNetwork Last seenEvents
194.88.98.86AS0 Hydra Communications Ltd2026-09-122
69.5.169.44AS0 Hydra Communications Ltd2026-09-122
195.206.182.221AS0 Hydra Communications Ltd2026-09-142
81.19.219.237AS0 Hydra Communications Ltd2026-09-142
69.5.169.251AS0 Hydra Communications Ltd2026-09-132
213.166.84.53AS0 Hydra Communications Ltd2026-09-131
213.166.84.52AS0 Hydra Communications Ltd2026-09-131
69.5.169.22AS0 Hydra Communications Ltd2026-09-121
193.124.20.232AS0 Hydra Communications Ltd2026-09-111
195.140.214.24AS0 Hydra Communications Ltd2026-09-111
89.37.172.152AS0 Hydra Communications Ltd2026-09-131
194.88.98.108AS0 Hydra Communications Ltd2026-09-121
69.5.169.157AS0 Hydra Communications Ltd2026-09-131
193.176.29.21AS0 Hydra Communications Ltd2026-09-141
69.5.169.55AS0 Hydra Communications Ltd2026-09-121
5.226.140.125AS0 Hydra Communications Ltd2026-09-111
195.140.214.21AS0 Hydra Communications Ltd2026-09-131
5.226.140.86AS0 Hydra Communications Ltd2026-09-111
188.240.59.48AS0 Hydra Communications Ltd2026-09-131
81.19.219.243AS0 Hydra Communications Ltd2026-09-111

About this fingerprint

HASSH is an MD5 over the ordered algorithm lists an SSH client offers during key exchange, before any authentication. It identifies the SSH implementation and version behind a connection at the handshake.