Reading the observatory store…
Reading the observatory store…
First seen 22 Sep 2026, last seen 22 Sep 2026 06:47 UTC (26m ago). 23 observations on record. Location is an estimate derived from registration data — the source and confidence are stated below.
| Port | Service | Product | Technologies | TLS | State | Banner | Last seen |
|---|---|---|---|---|---|---|---|
| 22 tcp / tcp | ssh | OpenSSH 9.9 |
| not negotiated | open | SSH-2.0-OpenSSH_9.9 | 22 Sep 2026 2h ago |
| 53 tcp / tcp | dns | not identified | none detected | not negotiated | open | no banner captured | 22 Sep 2026 2h ago |
| 80 tcp / tcp | http | LiteSpeed |
| not negotiated | open | no banner captured | 22 Sep 2026 2h ago |
| 110 tcp / tcp | pop3 | Dovecot |
| not negotiated | open | +OK Dovecot ready. | 22 Sep 2026 2h ago |
| 143 tcp / tcp | imap | Dovecot |
| not negotiated | open | * OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. | 22 Sep 2026 2h ago |
| 443 tcp / tcp | https | LiteSpeed |
| TLSv1.3certificate
| open | no banner captured | 22 Sep 2026 2h ago |
| 587 tcp / tcp | smtp-submission | Exim 4.100 |
| not negotiated | open | 220-access2.himalayan.host ESMTP Exim 4.100 #2 Tue, 22 Sep 2026 11:26:36 +0545 220-We do not authorize the use of this system to transport … | 22 Sep 2026 2h ago |
| 993 tcp / tcp | imaps | not identified | none detected | not negotiated | open | no banner captured | 22 Sep 2026 2h ago |
| 995 tcp / tcp | pop3s | not identified | none detected | not negotiated | open | no banner captured | 22 Sep 2026 2h ago |
| Observed at | Source | Collector | Confidence | Changed | State | Content hash |
|---|---|---|---|---|---|---|
| 22 Sep 2026 06:47 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"access2.himalayan.host"} | e072a00e08d4a5e0c5de6c10d90eb830324e029… |
| 22 Sep 2026 05:56 UTC | fingerprint | fingerprint-1 | high | changed | {"reverse_dns":"access2.himalayan.host"} | 44749eecaf1f7be7c242c7f6533c91d4665029e… |
| 22 Sep 2026 05:42 UTC | fingerprint | fingerprint-1 | high | changed | {"services":{"22/tcp":{"state":"open","product":"OpenSSH","version":"9.9","cert_sha256":"","tls_version":"","service_type":"ssh"},"53/tcp":{"state":"open","pro… | a58cdebdb95be3062f1b0d41bdbf32b6c09bc53… |
| 22 Sep 2026 05:31 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"access2.himalayan.host"} | 003dcbe30bd5dcdc65d9d65f4f24a36e75f810d… |
| 22 Sep 2026 05:13 UTC | fingerprint | fingerprint-1 | high | changed | {"reverse_dns":"access2.himalayan.host"} | 8ae99609671adff024f5e97bf9edfeb44a34e28… |
| Detected at | Type | Field | Previous | Current | Significance | Confidence |
|---|---|---|---|---|---|---|
| 22 Sep 2026 05:56 UTC | TECHNOLOGY CHANGED | — | dovecot, exim, lets-encrypt, litespeed, openssh | — | low | unknown |
| 22 Sep 2026 05:56 UTC | SERVICE DISAPPEARED | service:995/tcp | pop3s | — | medium | unknown |
| 22 Sep 2026 05:56 UTC | SERVICE DISAPPEARED | service:993/tcp | imaps | — | medium | unknown |
| 22 Sep 2026 05:56 UTC | SERVICE DISAPPEARED | service:80/tcp | LiteSpeed | — | medium | unknown |
| 22 Sep 2026 05:56 UTC | SERVICE DISAPPEARED | service:587/tcp | Exim 4.100 | — | medium | unknown |
| 22 Sep 2026 05:56 UTC | SERVICE DISAPPEARED | service:53/tcp | dns | — | medium | unknown |
| 22 Sep 2026 05:56 UTC | SERVICE DISAPPEARED | service:443/tcp | LiteSpeed / TLSv1.3 | — | medium | unknown |
| 22 Sep 2026 05:56 UTC | SERVICE DISAPPEARED | service:22/tcp | OpenSSH 9.9 | — | medium | unknown |
| 22 Sep 2026 05:56 UTC | SERVICE DISAPPEARED | service:143/tcp | Dovecot | — | medium | unknown |
| 22 Sep 2026 05:56 UTC | SERVICE DISAPPEARED | service:110/tcp | Dovecot | — | medium | unknown |
| 22 Sep 2026 05:42 UTC | TECHNOLOGY CHANGED | — | — | dovecot, exim, lets-encrypt, litespeed, openssh | low | unknown |
| 22 Sep 2026 05:42 UTC | NEW SERVICE | service:995/tcp | — | pop3s | low | unknown |
| 22 Sep 2026 05:42 UTC | NEW SERVICE | service:993/tcp | — | imaps | low | unknown |
| 22 Sep 2026 05:42 UTC | NEW SERVICE | service:80/tcp | — | LiteSpeed | low | unknown |
| 22 Sep 2026 05:42 UTC | NEW SERVICE | service:587/tcp | — | Exim 4.100 | low | unknown |
| 22 Sep 2026 05:42 UTC | NEW SERVICE | service:53/tcp | — | dns | low | unknown |
| 22 Sep 2026 05:42 UTC | NEW SERVICE | service:443/tcp | — | LiteSpeed / TLSv1.3 | low | unknown |
| 22 Sep 2026 05:42 UTC | NEW SERVICE | service:22/tcp | — | OpenSSH 9.9 | low | unknown |
| 22 Sep 2026 05:42 UTC | NEW SERVICE | service:143/tcp | — | Dovecot | low | unknown |
| 22 Sep 2026 05:42 UTC | NEW SERVICE | service:110/tcp | — | Dovecot | low | unknown |
| 22 Sep 2026 05:13 UTC | NEW ASSET | — | — | asset with no observed open endpoints | low | unknown |
4 matches on this asset, each one unverified. Treat these as leads for manual review, never as findings.
| Identifier | Severity | CVSS | Product / version | Status | Match confidence | Evidence | Detected |
|---|---|---|---|---|---|---|---|
CVE-2026-94057 Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing. | medium | 4.0 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2026-94056 Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory. | high | 7.5 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2026-94055 Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free. | low | 3.7 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2026-94054 Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write. | high | 7.0 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
| Field | Previous | Current | Reading |
|---|---|---|---|
| reverse_dns | access2.himalayan.host | access2.himalayan.host | unchanged |
{
"id": "c09d5e0d98eb79b7900b5d387d1a374f6",
"type": "ipv4",
"value": "103.233.58.13",
"hostname": "np3.himalayan.host",
"reverseDns": "access2.himalayan.host",
"asn": {
"number": 59370,
"name": "ACCESS-NP - Access World Tech Pvt. Ltd."
},
"organization": {
"id": "c4b6e309c615243e60f7da970121039cc",
"name": "ACCESS-NP - Access World Tech Pvt. Ltd."
},
"location": {
"country": "NP",
"city": "Kathmandu",
"province": "Bagmati Province",
"district": "",
"confidence": "low",
"source": "ip-api.com"
},
"scopeStatus": "in_scope",
"priority": "HIGH",
"firstSeen": "2026-09-22T05:10:32.847Z",
"lastSeen": "2026-09-22T06:47:45.864Z",
"observationCount": 23,
"openServices": 9,
"serviceCount": 9,
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"litespeed",
"openssh"
],
"vulnerabilityMatches": [
{
"id": "c1c6001ddf344bda7964da69baeba81aa",
"cve": "CVE-2026-94057",
"severity": "medium",
"cvssScore": 4,
"summary": "Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T05:44:46.803Z",
"assetValue": "103.233.58.13",
"serviceId": "cc45b20744603b5f2da5824ddd4e7238d",
"port": 587,
"technologySlug": "exim"
},
{
"id": "c85e9e975426a874109a314408b68ffe7",
"cve": "CVE-2026-94056",
"severity": "high",
"cvssScore": 7.5,
"summary": "Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T05:44:46.800Z",
"assetValue": "103.233.58.13",
"serviceId": "cc45b20744603b5f2da5824ddd4e7238d",
"port": 587,
"technologySlug": "exim"
},
{
"id": "c654f948c0bafe4feb5ef7752ef1c5fef",
"cve": "CVE-2026-94055",
"severity": "low",
"cvssScore": 3.7,
"summary": "Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T05:44:46.797Z",
"assetValue": "103.233.58.13",
"serviceId": "cc45b20744603b5f2da5824ddd4e7238d",
"port": 587,
"technologySlug": "exim"
},
{
"id": "c52243c1b2f59c206d6675a034e2223a9",
"cve": "CVE-2026-94054",
"severity": "high",
"cvssScore": 7,
"summary": "Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T05:44:46.795Z",
"assetValue": "103.233.58.13",
"serviceId": "cc45b20744603b5f2da5824ddd4e7238d",
"port": 587,
"technologySlug": "exim"
}
],
"network": {
"id": "c86748ca13ab7265a28be3002da7c2f6c",
"prefix": "103.233.58.0/23",
"ipVersion": 4
},
"services": [
{
"id": "c173aac4572437a7121ad3207427ea3d8",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"port": 22,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "ssh",
"product": "OpenSSH",
"productVersion": "9.9",
"tlsVersion": null,
"banner": "SSH-2.0-OpenSSH_9.9",
"state": "open",
"firstSeen": "2026-09-22T05:42:00.067Z",
"lastSeen": "2026-09-22T05:42:00.067Z",
"observationCount": 0,
"technologies": [
{
"slug": "openssh",
"name": "OpenSSH",
"category": "remote-access",
"vendor": "OpenBSD Project",
"version": "9.9",
"confidence": "high",
"evidence": "SSH banner: SSH-2.0-OpenSSH_9.9",
"detectedAt": "2026-09-22T05:42:00.070Z"
}
],
"certificate": null
},
{
"id": "c1812016fd1e6e42eb602f360ca80a50c",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"port": 53,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "dns",
"product": null,
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T05:42:00.074Z",
"lastSeen": "2026-09-22T05:42:00.074Z",
"observationCount": 0,
"technologies": [],
"certificate": null
},
{
"id": "cbaa9acad3f94e8d70b68f813a5e62b85",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"port": 80,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "http",
"product": "LiteSpeed",
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T05:42:00.077Z",
"lastSeen": "2026-09-22T05:42:00.077Z",
"observationCount": 0,
"technologies": [
{
"slug": "litespeed",
"name": "LiteSpeed",
"category": "web-server",
"vendor": "LiteSpeed Technologies",
"version": null,
"confidence": "high",
"evidence": "server: LiteSpeed",
"detectedAt": "2026-09-22T05:42:00.080Z"
}
],
"certificate": null
},
{
"id": "c9ff6f836c841674e7dc12573ef61c837",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"port": 110,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "pop3",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": null,
"banner": "+OK Dovecot ready.",
"state": "open",
"firstSeen": "2026-09-22T05:42:00.082Z",
"lastSeen": "2026-09-22T05:42:00.082Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: +OK Dovecot ready.",
"detectedAt": "2026-09-22T05:42:00.085Z"
}
],
"certificate": null
},
{
"id": "cf6f1346e7bab030485722599864c99b5",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"port": 143,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "imap",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": null,
"banner": "* OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.",
"state": "open",
"firstSeen": "2026-09-22T05:42:00.087Z",
"lastSeen": "2026-09-22T05:42:00.087Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: * OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready...",
"detectedAt": "2026-09-22T05:42:00.090Z"
}
],
"certificate": null
},
{
"id": "c44fa6d9d9d717c126a0d9150b9b81eca",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"port": 443,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "https",
"product": "LiteSpeed",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T05:42:00.093Z",
"lastSeen": "2026-09-22T05:42:00.093Z",
"observationCount": 0,
"technologies": [
{
"slug": "litespeed",
"name": "LiteSpeed",
"category": "web-server",
"vendor": "LiteSpeed Technologies",
"version": null,
"confidence": "high",
"evidence": "server: LiteSpeed",
"detectedAt": "2026-09-22T05:42:00.096Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR1,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T05:42:00.098Z"
}
],
"certificate": {
"id": "ca87fb8e09d8cad0a40a49def6bbaf295",
"sha256": "8c3ac23756865ac1c7e593a4d0c2302c0aa28471256956bc59e6a9ab98240207",
"subject": "CN=autoconfig.himalayanweb.com",
"issuer": "CN=YR1,O=Let's Encrypt,C=US",
"commonName": "autoconfig.himalayanweb.com",
"notBefore": "2026-09-09T00:12:13.000Z",
"notAfter": "2026-12-08T00:12:12.000Z",
"sans": [
"autoconfig.himalayanweb.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "cc45b20744603b5f2da5824ddd4e7238d",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"port": 587,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "smtp-submission",
"product": "Exim",
"productVersion": "4.100",
"tlsVersion": null,
"banner": "220-access2.himalayan.host ESMTP Exim 4.100 #2 Tue, 22 Sep 2026 11:26:36 +0545 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.",
"state": "open",
"firstSeen": "2026-09-22T05:42:00.101Z",
"lastSeen": "2026-09-22T05:42:00.101Z",
"observationCount": 0,
"technologies": [
{
"slug": "exim",
"name": "Exim",
"category": "mail-server",
"vendor": "Exim Project",
"version": "4.100",
"confidence": "high",
"evidence": "SMTP banner: 220-access2.himalayan.host ESMTP Exim 4.100 #2 Tue, 22 Sep 2026 11:26:36 +0545 220-We do not authorize the use of this...",
"detectedAt": "2026-09-22T05:42:00.103Z"
}
],
"certificate": null
},
{
"id": "c7327ef3803531dd8f56f717ed2889108",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"port": 993,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "imaps",
"product": null,
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T05:42:00.107Z",
"lastSeen": "2026-09-22T05:42:00.107Z",
"observationCount": 0,
"technologies": [],
"certificate": null
},
{
"id": "c032dc577917cf1ec3a4ca59a45bb451b",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"port": 995,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "pop3s",
"product": null,
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T05:42:00.109Z",
"lastSeen": "2026-09-22T05:42:00.109Z",
"observationCount": 0,
"technologies": [],
"certificate": null
}
],
"certificates": [
{
"id": "ca87fb8e09d8cad0a40a49def6bbaf295",
"sha256": "8c3ac23756865ac1c7e593a4d0c2302c0aa28471256956bc59e6a9ab98240207",
"subject": "CN=autoconfig.himalayanweb.com",
"issuer": "CN=YR1,O=Let's Encrypt,C=US",
"commonName": "autoconfig.himalayanweb.com",
"notBefore": "2026-09-09T00:12:13.000Z",
"notAfter": "2026-12-08T00:12:12.000Z",
"sans": [
"autoconfig.himalayanweb.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
],
"recentObservations": [
{
"id": "c1d07fd898ed479dca8ac6de1f62bc877",
"observedAt": "2026-09-22T06:47:45.790Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "access2.himalayan.host"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "access2.himalayan.host",
"ports_probed": 25,
"technologies": null,
"open_services": 9,
"probe_duration": 101
},
"contentHash": "e072a00e08d4a5e0c5de6c10d90eb830324e029392478c47113231eb3f82174b",
"changed": false
},
{
"id": "cc2e52dcdcdd1d972d089b86a4678eb33",
"observedAt": "2026-09-22T05:56:34.883Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "access2.himalayan.host"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "access2.himalayan.host",
"ports_probed": 25,
"technologies": null,
"open_services": 9,
"probe_duration": 34
},
"contentHash": "44749eecaf1f7be7c242c7f6533c91d4665029e3e501e0dc17e56d6a8aafdcbb",
"changed": true
},
{
"id": "c61ec34651d2307798021d9d1a8d3387b",
"observedAt": "2026-09-22T05:42:00.113Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"services": {
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.9",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "LiteSpeed",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "LiteSpeed",
"version": "",
"cert_sha256": "8c3ac23756865ac1c7e593a4d0c2302c0aa28471256956bc59e6a9ab98240207",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "",
"tls_version": "",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "pop3s"
}
},
"reverse_dns": "access2.himalayan.host",
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"litespeed",
"openssh"
]
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 9,
"reachable": true,
"reverse_dns": "access2.himalayan.host",
"ports_probed": 25,
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"litespeed",
"openssh"
],
"open_services": 9,
"probe_duration": 28034
},
"contentHash": "a58cdebdb95be3062f1b0d41bdbf32b6c09bc533a238d5a5f7e66b4a1ad86332",
"changed": true
},
{
"id": "c63cefe1b6ccc076c67e6b9a1f2a653a6",
"observedAt": "2026-09-22T05:31:09.079Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "access2.himalayan.host"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "access2.himalayan.host",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 1
},
"contentHash": "003dcbe30bd5dcdc65d9d65f4f24a36e75f810dc738113e0c9a899cf272c81c2",
"changed": false
},
{
"id": "ca4c5e84cae390c72cdb556573cdede1b",
"observedAt": "2026-09-22T05:13:46.249Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "access2.himalayan.host"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "access2.himalayan.host",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 79
},
"contentHash": "8ae99609671adff024f5e97bf9edfeb44a34e2814edc90dd0dbc9f2e439bd50d",
"changed": false
}
],
"recentChanges": [
{
"id": "c0fafedad18dc7cfde6a17a47367cfa72",
"changeType": "TECHNOLOGY_CHANGED",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"field": null,
"previousValue": "dovecot, exim, lets-encrypt, litespeed, openssh",
"currentValue": null,
"detectedAt": "2026-09-22T05:56:34.896Z",
"significance": "low",
"severity": "info",
"confidence": null,
"detail": "technology no longer detected: dovecot, exim, lets-encrypt, litespeed, openssh",
"serviceId": null
},
{
"id": "c9b04da2a4379ac7a79a2aa407e40bd9d",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"field": "service:995/tcp",
"previousValue": "pop3s",
"currentValue": null,
"detectedAt": "2026-09-22T05:56:34.895Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "c7f91418bac2e4c2fd9146def06ce2a7f",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"field": "service:993/tcp",
"previousValue": "imaps",
"currentValue": null,
"detectedAt": "2026-09-22T05:56:34.893Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "cc08ec13b066d825bd3fac6ce87e3af78",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"field": "service:80/tcp",
"previousValue": "LiteSpeed",
"currentValue": null,
"detectedAt": "2026-09-22T05:56:34.892Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "cc3ed3c0d34ee028ad72e5eeb47619992",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"field": "service:587/tcp",
"previousValue": "Exim 4.100",
"currentValue": null,
"detectedAt": "2026-09-22T05:56:34.891Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "c8345f468209967479f64e725ac75638d",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"field": "service:53/tcp",
"previousValue": "dns",
"currentValue": null,
"detectedAt": "2026-09-22T05:56:34.890Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "ce4fe8446016a2c033a61503c4844faa4",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"field": "service:443/tcp",
"previousValue": "LiteSpeed / TLSv1.3",
"currentValue": null,
"detectedAt": "2026-09-22T05:56:34.888Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "cb76c85507f0a50a84883bceb4902a695",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"field": "service:22/tcp",
"previousValue": "OpenSSH 9.9",
"currentValue": null,
"detectedAt": "2026-09-22T05:56:34.887Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "cea4c26d7c07d1d18a1858f424dcc0cb7",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"field": "service:143/tcp",
"previousValue": "Dovecot",
"currentValue": null,
"detectedAt": "2026-09-22T05:56:34.886Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "c0df669ceaa5a54d43d5505bca87ef223",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"field": "service:110/tcp",
"previousValue": "Dovecot",
"currentValue": null,
"detectedAt": "2026-09-22T05:56:34.884Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "c5386c7f12f30080ab708df68b44d320b",
"changeType": "TECHNOLOGY_CHANGED",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"field": null,
"previousValue": null,
"currentValue": "dovecot, exim, lets-encrypt, litespeed, openssh",
"detectedAt": "2026-09-22T05:42:00.157Z",
"significance": "low",
"severity": "info",
"confidence": null,
"detail": "technology detected: dovecot, exim, lets-encrypt, litespeed, openssh",
"serviceId": null
},
{
"id": "cdc45fa73d77e7e56c52a3667debb70db",
"changeType": "NEW_SERVICE",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"field": "service:995/tcp",
"previousValue": null,
"currentValue": "pop3s",
"detectedAt": "2026-09-22T05:42:00.155Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "cfc7ce7b94defa3b43a60931d91d27e58",
"changeType": "NEW_SERVICE",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"field": "service:993/tcp",
"previousValue": null,
"currentValue": "imaps",
"detectedAt": "2026-09-22T05:42:00.152Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "cb08182176667d2ef902ae5bcfa4f7e26",
"changeType": "NEW_SERVICE",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"field": "service:80/tcp",
"previousValue": null,
"currentValue": "LiteSpeed",
"detectedAt": "2026-09-22T05:42:00.150Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "cf3a49e29b5b956aa65201a80559b621b",
"changeType": "NEW_SERVICE",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"field": "service:587/tcp",
"previousValue": null,
"currentValue": "Exim 4.100",
"detectedAt": "2026-09-22T05:42:00.148Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "ce4425800d4051d4f65d85375dd67ac41",
"changeType": "NEW_SERVICE",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"field": "service:53/tcp",
"previousValue": null,
"currentValue": "dns",
"detectedAt": "2026-09-22T05:42:00.146Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "ca9e9dc72b6ef2e04c9661a32eb4beee8",
"changeType": "NEW_SERVICE",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"field": "service:443/tcp",
"previousValue": null,
"currentValue": "LiteSpeed / TLSv1.3",
"detectedAt": "2026-09-22T05:42:00.144Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c919bf7417b7802672279a70e919a7aa0",
"changeType": "NEW_SERVICE",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"field": "service:22/tcp",
"previousValue": null,
"currentValue": "OpenSSH 9.9",
"detectedAt": "2026-09-22T05:42:00.142Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "cb13f8ea05656783ee355027827f06dc2",
"changeType": "NEW_SERVICE",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"field": "service:143/tcp",
"previousValue": null,
"currentValue": "Dovecot",
"detectedAt": "2026-09-22T05:42:00.140Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c1334cf99077d4ca8586bad25f7008d46",
"changeType": "NEW_SERVICE",
"assetId": "c09d5e0d98eb79b7900b5d387d1a374f6",
"assetValue": null,
"field": "service:110/tcp",
"previousValue": null,
"currentValue": "Dovecot",
"detectedAt": "2026-09-22T05:42:00.116Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
}
],
"dnsRecords": [],
"state": {
"current": {
"reverse_dns": "access2.himalayan.host"
},
"previous": {
"reverse_dns": "access2.himalayan.host"
},
"comparable": true
}
}