Reading the observatory store…
Reading the observatory store…
First seen 22 Sep 2026, last seen 22 Sep 2026 04:43 UTC (4h ago). 1 observations on record. Location is an estimate derived from registration data — the source and confidence are stated below.
| Port | Service | Product | Technologies | TLS | State | Banner | Last seen |
|---|---|---|---|---|---|---|---|
| 3389 tcp / tcp | rdp | not identified | none detected | not negotiated | open | no banner captured | 22 Sep 2026 4h ago |
| Observed at | Source | Collector | Confidence | Changed | State | Content hash |
|---|---|---|---|---|---|---|
| 22 Sep 2026 04:43 UTC | fingerprint | fingerprint-1 | high | changed | {"services":{"3389/tcp":{"state":"open","product":"","version":"","cert_sha256":"","tls_version":"","service_type":"rdp"}}} | a42a7d451a3ac124c4daaf029ed399cce430978… |
| Detected at | Type | Field | Previous | Current | Significance | Confidence |
|---|---|---|---|---|---|---|
| 22 Sep 2026 04:43 UTC | NEW SERVICE | service:3389/tcp | — | rdp | low | unknown |
| 22 Sep 2026 04:43 UTC | NEW ASSET | — | — | asset with 1 observed open endpoint(s) | low | unknown |
No version-based matches recorded.
A match can only be produced once a product and version have been detected on a service, which requires a completed probe.
Only one state has been recorded. The current document is shown without a predecessor — no comparison is implied.
{
"id": "c2b90e26159f68a8e499e5fab88a000a0",
"type": "ipv4",
"value": "103.180.240.128",
"hostname": null,
"reverseDns": null,
"asn": {
"number": 139922,
"name": "DMNPL-AS-AP - DISH MEDIA NETWORK PUBLIC LIMITED"
},
"organization": {
"id": "c35431c1103a6cf65d5ab165e348b0e87",
"name": "DMNPL-AS-AP - DISH MEDIA NETWORK PUBLIC LIMITED"
},
"location": {
"country": "NP",
"city": "Kathmandu",
"province": "Bagmati Province",
"district": "",
"confidence": "low",
"source": "ip-api.com"
},
"scopeStatus": "in_scope",
"priority": "HIGH",
"firstSeen": "2026-09-22T03:45:54.677Z",
"lastSeen": "2026-09-22T04:43:15.587Z",
"observationCount": 1,
"openServices": 1,
"serviceCount": 1,
"technologies": [],
"vulnerabilityMatches": [],
"network": {
"id": "c48b844f2410085a02edfc25c6ab70b62",
"prefix": "103.180.240.0/24",
"ipVersion": 4
},
"services": [
{
"id": "c27dc9a4a7d8e689469577f7d75b908c6",
"assetId": "c2b90e26159f68a8e499e5fab88a000a0",
"assetValue": null,
"port": 3389,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "rdp",
"product": null,
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T04:43:15.580Z",
"lastSeen": "2026-09-22T04:43:15.580Z",
"observationCount": 0,
"technologies": [],
"certificate": null
}
],
"certificates": [],
"recentObservations": [
{
"id": "c6e46db42f1c805e0bb357e63297455ec",
"observedAt": "2026-09-22T04:43:15.583Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"services": {
"3389/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "rdp"
}
}
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 1,
"reachable": true,
"reverse_dns": "",
"ports_probed": 25,
"technologies": null,
"open_services": 1,
"probe_duration": 29052
},
"contentHash": "a42a7d451a3ac124c4daaf029ed399cce430978c6f9578d8963223cc2f070678",
"changed": true
}
],
"recentChanges": [
{
"id": "cbb02b5385884bdb8f79dee6e32907c2e",
"changeType": "NEW_SERVICE",
"assetId": "c2b90e26159f68a8e499e5fab88a000a0",
"assetValue": null,
"field": "service:3389/tcp",
"previousValue": null,
"currentValue": "rdp",
"detectedAt": "2026-09-22T04:43:15.586Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "endpoint responded on first observation",
"serviceId": null
},
{
"id": "cd47b0e1d398878fd8a54c9f9fd586b24",
"changeType": "NEW_ASSET",
"assetId": "c2b90e26159f68a8e499e5fab88a000a0",
"assetValue": null,
"field": null,
"previousValue": null,
"currentValue": "asset with 1 observed open endpoint(s)",
"detectedAt": "2026-09-22T04:43:15.585Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "asset observed for the first time",
"serviceId": null
}
],
"dnsRecords": [],
"state": {
"current": {
"services": {
"3389/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "rdp"
}
}
},
"previous": null,
"comparable": false
}
}