HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunk ESMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog
Dashboard

HASSH SSH client fingerprint

f45fb203c31069bb280067b71ed92ccb

Seen 2026-05-04 to 2026-09-23 across the retained window.

Open in lookup → Addresses as a feed

The feed is a URL your firewall, MISP or SIEM polls; it needs a free account so it can be revoked. Or watch the top network: AS4766 sends an email when it next hits a sensor.

53

Source IPs

29

Networks

18

Countries

1

Ports hit

66

Events

2

IPs / network

This fingerprint is spread thinly across many networks, which is the shape of a common, widely-used client.

Top networks

AS4766 Korea Telecom10 IPs14
AS12714 PJSC MegaFon5 IPs5
AS4837 CHINA UNICOM China169 Backbone4 IPs5
AS1257 Tele2 SWIPnet3 IPs3
AS17858 LG POWERCOMM2 IPs3
AS211356 MyTv-Alb SH.P.K.2 IPs3
AS31898 Oracle Corporation2 IPs3
AS9304 HGC Global Communications Limited2 IPs3
AS42610 Rostelecom2 IPs2
AS211504 Studio An-tv Srl2 IPs2
AS12400 Partner Communications Ltd.1 IPs3
AS12552 GlobalConnect AB1 IPs2

Countries

KR 12RU 9SE 6CN 4HK 3MD 3AL 2US 2JP 2FR 2

Ports targeted

22/tcp 66
Source IPCCNetwork Last seenEvents
59.26.33.16AS0 Korea Telecom2026-09-173
87.68.46.172AS0 Partner Communications Ltd.2026-09-113
147.224.162.134AS0 Oracle Corporation2026-09-052
219.78.63.235AS0 HKT Limited2026-09-182
115.140.161.61AS0 LG POWERCOMM2026-09-192
193.163.187.123AS0 MyTv-Alb SH.P.K.2026-09-042
83.145.42.126AS0 GlobalConnect AB2026-09-042
59.24.222.224AS0 Korea Telecom2026-09-192
220.85.210.200AS0 Korea Telecom2026-09-222
61.182.67.242AS0 CHINA UNICOM China169 Backbone2026-09-042
223.19.66.178AS0 HGC Global Communications Limited2026-09-022
220.123.222.114AS0 Korea Telecom2026-09-031
112.166.41.154AS0 Korea Telecom2026-09-151
85.30.212.24AS0 Rostelecom2026-09-191
109.63.161.142AS0 PJSC MegaFon2026-09-111
223.18.201.43AS0 HGC Global Communications Limited2026-08-271
220.76.68.23AS0 Korea Telecom2026-09-051
78.107.236.6AS0 PVimpelCom2026-09-051
185.123.13.209AS0 Vidikon-K, CJSC2026-09-231
49.162.255.210AS0 LG POWERCOMM2026-09-211

About this fingerprint

HASSH is an MD5 over the ordered algorithm lists an SSH client offers during key exchange, before any authentication. It identifies the SSH implementation and version behind a connection at the handshake.