Reading the observatory store…
Reading the observatory store…
First seen 22 Sep 2026, last seen 22 Sep 2026 06:47 UTC (24m ago). 24 observations on record. Location is an estimate derived from registration data — the source and confidence are stated below.
| Port | Service | Product | Technologies | TLS | State | Banner | Last seen |
|---|---|---|---|---|---|---|---|
| 21 tcp / tcp | ftp | Pure-FTPd |
| not negotiated | open | 220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time is now 11:27. Server … | 22 Sep 2026 1h ago |
| 22 tcp / tcp | ssh | OpenSSH 9.9 |
| not negotiated | open | SSH-2.0-OpenSSH_9.9 | 22 Sep 2026 1h ago |
| 53 tcp / tcp | dns | not identified | none detected | not negotiated | open | no banner captured | 22 Sep 2026 1h ago |
| 80 tcp / tcp | http | LiteSpeed |
| not negotiated | open | no banner captured | 22 Sep 2026 1h ago |
| 110 tcp / tcp | pop3 | Dovecot |
| not negotiated | open | +OK Dovecot DA ready. | 22 Sep 2026 1h ago |
| 143 tcp / tcp | imap | Dovecot |
| not negotiated | open | * OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ STARTTLS LOGINDISABLED] Dovecot DA ready. | 22 Sep 2026 1h ago |
| 443 tcp / tcp | https | LiteSpeed |
| TLSv1.3certificate
| open | no banner captured | 22 Sep 2026 1h ago |
| 587 tcp / tcp | smtp-submission | Exim 4.100 |
| not negotiated | open | 220 dacloud.himalayan.host ESMTP Exim 4.100 Tue, 22 Sep 2026 11:27:03 +0545 | 22 Sep 2026 1h ago |
| 993 tcp / tcp | imaps | not identified | none detected | not negotiated | open | no banner captured | 22 Sep 2026 1h ago |
| 995 tcp / tcp | pop3s | not identified | none detected | not negotiated | open | no banner captured | 22 Sep 2026 1h ago |
| Observed at | Source | Collector | Confidence | Changed | State | Content hash |
|---|---|---|---|---|---|---|
| 22 Sep 2026 06:39 UTC | fingerprint | fingerprint-1 | high | changed | {"reverse_dns":"dacloud.himalayan.host"} | 5d8ddf56d3573127959a8705aa282d21721dc88… |
| 22 Sep 2026 05:42 UTC | fingerprint | fingerprint-1 | high | changed | {"services":{"21/tcp":{"state":"open","product":"Pure-FTPd","version":"","cert_sha256":"","tls_version":"","service_type":"ftp"},"22/tcp":{"state":"open","prod… | 1d517e062376bfd02a959760c266f3a8a9dbb5c… |
| 22 Sep 2026 05:27 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"dacloud.himalayan.host"} | 568c23e9e4583c0b67c63b6f7269f3618e58b0b… |
| 22 Sep 2026 05:12 UTC | fingerprint | fingerprint-1 | high | changed | {"reverse_dns":"dacloud.himalayan.host"} | 177529204f8e4b5e5a4748caf7acfa619217414… |
| Detected at | Type | Field | Previous | Current | Significance | Confidence |
|---|---|---|---|---|---|---|
| 22 Sep 2026 06:39 UTC | TECHNOLOGY CHANGED | — | dovecot, exim, lets-encrypt, litespeed, openssh, pure-ftpd | — | low | unknown |
| 22 Sep 2026 06:39 UTC | SERVICE DISAPPEARED | service:995/tcp | pop3s | — | medium | unknown |
| 22 Sep 2026 06:39 UTC | SERVICE DISAPPEARED | service:993/tcp | imaps | — | medium | unknown |
| 22 Sep 2026 06:39 UTC | SERVICE DISAPPEARED | service:80/tcp | LiteSpeed | — | medium | unknown |
| 22 Sep 2026 06:39 UTC | SERVICE DISAPPEARED | service:587/tcp | Exim 4.100 | — | medium | unknown |
| 22 Sep 2026 06:39 UTC | SERVICE DISAPPEARED | service:53/tcp | dns | — | medium | unknown |
| 22 Sep 2026 06:39 UTC | SERVICE DISAPPEARED | service:443/tcp | LiteSpeed / TLSv1.3 | — | medium | unknown |
| 22 Sep 2026 06:39 UTC | SERVICE DISAPPEARED | service:22/tcp | OpenSSH 9.9 | — | medium | unknown |
| 22 Sep 2026 06:39 UTC | SERVICE DISAPPEARED | service:21/tcp | Pure-FTPd | — | medium | unknown |
| 22 Sep 2026 06:39 UTC | SERVICE DISAPPEARED | service:143/tcp | Dovecot | — | medium | unknown |
| 22 Sep 2026 06:39 UTC | SERVICE DISAPPEARED | service:110/tcp | Dovecot | — | medium | unknown |
| 22 Sep 2026 05:42 UTC | TECHNOLOGY CHANGED | — | — | dovecot, exim, lets-encrypt, litespeed, openssh, pure-ftpd | low | unknown |
| 22 Sep 2026 05:42 UTC | NEW SERVICE | service:995/tcp | — | pop3s | low | unknown |
| 22 Sep 2026 05:42 UTC | NEW SERVICE | service:993/tcp | — | imaps | low | unknown |
| 22 Sep 2026 05:42 UTC | NEW SERVICE | service:80/tcp | — | LiteSpeed | low | unknown |
| 22 Sep 2026 05:42 UTC | NEW SERVICE | service:587/tcp | — | Exim 4.100 | low | unknown |
| 22 Sep 2026 05:42 UTC | NEW SERVICE | service:53/tcp | — | dns | low | unknown |
| 22 Sep 2026 05:42 UTC | NEW SERVICE | service:443/tcp | — | LiteSpeed / TLSv1.3 | low | unknown |
| 22 Sep 2026 05:42 UTC | NEW SERVICE | service:22/tcp | — | OpenSSH 9.9 | low | unknown |
| 22 Sep 2026 05:42 UTC | NEW SERVICE | service:21/tcp | — | Pure-FTPd | low | unknown |
| 22 Sep 2026 05:42 UTC | NEW SERVICE | service:143/tcp | — | Dovecot | low | unknown |
| 22 Sep 2026 05:42 UTC | NEW SERVICE | service:110/tcp | — | Dovecot | low | unknown |
| 22 Sep 2026 05:12 UTC | NEW ASSET | — | — | asset with no observed open endpoints | low | unknown |
4 matches on this asset, each one unverified. Treat these as leads for manual review, never as findings.
| Identifier | Severity | CVSS | Product / version | Status | Match confidence | Evidence | Detected |
|---|---|---|---|---|---|---|---|
CVE-2026-94057 Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing. | medium | 4.0 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2026-94056 Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory. | high | 7.5 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2026-94055 Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free. | low | 3.7 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2026-94054 Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write. | high | 7.0 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
| Field | Previous | Current | Reading |
|---|---|---|---|
| reverse_dns | dacloud.himalayan.host | dacloud.himalayan.host | unchanged |
| services.110/tcp.cert_sha256 | — | — | disappeared |
| services.110/tcp.product | Dovecot | — | disappeared |
| services.110/tcp.service_type | pop3 | — | disappeared |
| services.110/tcp.state | open | — | disappeared |
| services.110/tcp.tls_version | — | — | disappeared |
| services.110/tcp.version | — | — | disappeared |
| services.143/tcp.cert_sha256 | — | — | disappeared |
| services.143/tcp.product | Dovecot | — | disappeared |
| services.143/tcp.service_type | imap | — | disappeared |
| services.143/tcp.state | open | — | disappeared |
| services.143/tcp.tls_version | — | — | disappeared |
| services.143/tcp.version | — | — | disappeared |
| services.21/tcp.cert_sha256 | — | — | disappeared |
| services.21/tcp.product | Pure-FTPd | — | disappeared |
| services.21/tcp.service_type | ftp | — | disappeared |
| services.21/tcp.state | open | — | disappeared |
| services.21/tcp.tls_version | — | — | disappeared |
| services.21/tcp.version | — | — | disappeared |
| services.22/tcp.cert_sha256 | — | — | disappeared |
| services.22/tcp.product | OpenSSH | — | disappeared |
| services.22/tcp.service_type | ssh | — | disappeared |
| services.22/tcp.state | open | — | disappeared |
| services.22/tcp.tls_version | — | — | disappeared |
| services.22/tcp.version | 9.9 | — | disappeared |
| services.443/tcp.cert_sha256 | 6fe9a993e5fdc8d08b6ee31a3fa29bbae019f68433b9df6a1e3d9f5cbf6fb714 | — | disappeared |
| services.443/tcp.product | LiteSpeed | — | disappeared |
| services.443/tcp.service_type | https | — | disappeared |
| services.443/tcp.state | open | — | disappeared |
| services.443/tcp.tls_version | TLSv1.3 | — | disappeared |
| services.443/tcp.version | — | — | disappeared |
| services.53/tcp.cert_sha256 | — | — | disappeared |
| services.53/tcp.product | — | — | disappeared |
| services.53/tcp.service_type | dns | — | disappeared |
| services.53/tcp.state | open | — | disappeared |
| services.53/tcp.tls_version | — | — | disappeared |
| services.53/tcp.version | — | — | disappeared |
| services.587/tcp.cert_sha256 | — | — | disappeared |
| services.587/tcp.product | Exim | — | disappeared |
| services.587/tcp.service_type | smtp-submission | — | disappeared |
| services.587/tcp.state | open | — | disappeared |
| services.587/tcp.tls_version | — | — | disappeared |
| services.587/tcp.version | 4.100 | — | disappeared |
| services.80/tcp.cert_sha256 | — | — | disappeared |
| services.80/tcp.product | LiteSpeed | — | disappeared |
| services.80/tcp.service_type | http | — | disappeared |
| services.80/tcp.state | open | — | disappeared |
| services.80/tcp.tls_version | — | — | disappeared |
| services.80/tcp.version | — | — | disappeared |
| services.993/tcp.cert_sha256 | — | — | disappeared |
| services.993/tcp.product | — | — | disappeared |
| services.993/tcp.service_type | imaps | — | disappeared |
| services.993/tcp.state | open | — | disappeared |
| services.993/tcp.tls_version | — | — | disappeared |
| services.993/tcp.version | — | — | disappeared |
| services.995/tcp.cert_sha256 | — | — | disappeared |
| services.995/tcp.product | — | — | disappeared |
| services.995/tcp.service_type | pop3s | — | disappeared |
| services.995/tcp.state | open | — | disappeared |
| services.995/tcp.tls_version | — | — | disappeared |
| services.995/tcp.version | — | — | disappeared |
| technologies | ["dovecot","exim","lets-encrypt","litespeed","openssh","pure-ftpd"] | — | disappeared |
{
"id": "c7d01fe4324b219a4cadccbb7ea92bf84",
"type": "ipv4",
"value": "36.253.137.4",
"hostname": "dnp1.himalayan.host",
"reverseDns": "dacloud.himalayan.host",
"asn": {
"number": 38565,
"name": "NCELL-AS-NP - Ncell Pvt. Ltd."
},
"organization": {
"id": "c145c60b9c3a307935c6b1f011466adb8",
"name": "NCELL-AS-NP - Ncell Pvt. Ltd."
},
"location": {
"country": "NP",
"city": "Patan",
"province": "Bagmati Province",
"district": "",
"confidence": "low",
"source": "ip-api.com"
},
"scopeStatus": "in_scope",
"priority": "HIGH",
"firstSeen": "2026-09-22T05:12:23.700Z",
"lastSeen": "2026-09-22T06:47:46.121Z",
"observationCount": 24,
"openServices": 10,
"serviceCount": 10,
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"litespeed",
"openssh",
"pure-ftpd"
],
"vulnerabilityMatches": [
{
"id": "c05465a46860a2d2fe1f598faca7f9c4a",
"cve": "CVE-2026-94057",
"severity": "medium",
"cvssScore": 4,
"summary": "Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T05:44:43.298Z",
"assetValue": "36.253.137.4",
"serviceId": "c95c0e73b874e73180a787f84ceddaf3b",
"port": 587,
"technologySlug": "exim"
},
{
"id": "c9f40fbd38120e33e6a372f672272f9b1",
"cve": "CVE-2026-94056",
"severity": "high",
"cvssScore": 7.5,
"summary": "Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T05:44:43.295Z",
"assetValue": "36.253.137.4",
"serviceId": "c95c0e73b874e73180a787f84ceddaf3b",
"port": 587,
"technologySlug": "exim"
},
{
"id": "c73aa5104ec87109b07d95ffc031f8f04",
"cve": "CVE-2026-94055",
"severity": "low",
"cvssScore": 3.7,
"summary": "Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T05:44:43.292Z",
"assetValue": "36.253.137.4",
"serviceId": "c95c0e73b874e73180a787f84ceddaf3b",
"port": 587,
"technologySlug": "exim"
},
{
"id": "c0424653faa54a583f201108d3388ad98",
"cve": "CVE-2026-94054",
"severity": "high",
"cvssScore": 7,
"summary": "Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T05:44:43.286Z",
"assetValue": "36.253.137.4",
"serviceId": "c95c0e73b874e73180a787f84ceddaf3b",
"port": 587,
"technologySlug": "exim"
}
],
"network": {
"id": "cc14322c468f82ceb78a886c4363b65b2",
"prefix": "36.253.136.0/23",
"ipVersion": 4
},
"services": [
{
"id": "ccbc84c0eed0c5c704a57d729445b8bef",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"port": 21,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "ftp",
"product": "Pure-FTPd",
"productVersion": null,
"tlsVersion": null,
"banner": "220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time is now 11:27. Server port: 21. 220-This is a private system - No anonymous login 220-IPv6 connections are also welcome on this server. 220 You will be disconnected after 15 minutes of inactivity.",
"state": "open",
"firstSeen": "2026-09-22T05:42:27.393Z",
"lastSeen": "2026-09-22T05:42:27.393Z",
"observationCount": 0,
"technologies": [
{
"slug": "pure-ftpd",
"name": "Pure-FTPd",
"category": "ftp-server",
"vendor": "Pure-FTPd",
"version": null,
"confidence": "high",
"evidence": "FTP banner: 220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time ...",
"detectedAt": "2026-09-22T05:42:27.395Z"
}
],
"certificate": null
},
{
"id": "cddae5f8d5e9506dec26c86af06d544a1",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"port": 22,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "ssh",
"product": "OpenSSH",
"productVersion": "9.9",
"tlsVersion": null,
"banner": "SSH-2.0-OpenSSH_9.9",
"state": "open",
"firstSeen": "2026-09-22T05:42:27.398Z",
"lastSeen": "2026-09-22T05:42:27.398Z",
"observationCount": 0,
"technologies": [
{
"slug": "openssh",
"name": "OpenSSH",
"category": "remote-access",
"vendor": "OpenBSD Project",
"version": "9.9",
"confidence": "high",
"evidence": "SSH banner: SSH-2.0-OpenSSH_9.9",
"detectedAt": "2026-09-22T05:42:27.400Z"
}
],
"certificate": null
},
{
"id": "c2a02f59c92ed9d522ed87f6ca014e29b",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"port": 53,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "dns",
"product": null,
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T05:42:27.404Z",
"lastSeen": "2026-09-22T05:42:27.404Z",
"observationCount": 0,
"technologies": [],
"certificate": null
},
{
"id": "cc12d55531499700ed4cd34891dc05620",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"port": 80,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "http",
"product": "LiteSpeed",
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T05:42:27.406Z",
"lastSeen": "2026-09-22T05:42:27.406Z",
"observationCount": 0,
"technologies": [
{
"slug": "litespeed",
"name": "LiteSpeed",
"category": "web-server",
"vendor": "LiteSpeed Technologies",
"version": null,
"confidence": "high",
"evidence": "server: LiteSpeed",
"detectedAt": "2026-09-22T05:42:27.409Z"
}
],
"certificate": null
},
{
"id": "c868ae34b188bc86c3c83f1656d7a5d98",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"port": 110,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "pop3",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": null,
"banner": "+OK Dovecot DA ready.",
"state": "open",
"firstSeen": "2026-09-22T05:42:27.411Z",
"lastSeen": "2026-09-22T05:42:27.411Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: +OK Dovecot DA ready.",
"detectedAt": "2026-09-22T05:42:27.413Z"
}
],
"certificate": null
},
{
"id": "c8bdb420b30ad2ac3f98c2f8aa74115b3",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"port": 143,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "imap",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": null,
"banner": "* OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ STARTTLS LOGINDISABLED] Dovecot DA ready.",
"state": "open",
"firstSeen": "2026-09-22T05:42:27.416Z",
"lastSeen": "2026-09-22T05:42:27.416Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: * OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ STARTTLS LOGINDISABLED] Dovecot DA ready.",
"detectedAt": "2026-09-22T05:42:27.418Z"
}
],
"certificate": null
},
{
"id": "c78ed61709f5b2c1a8c5b5e7b1154c4f2",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"port": 443,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "https",
"product": "LiteSpeed",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T05:42:27.422Z",
"lastSeen": "2026-09-22T05:42:27.422Z",
"observationCount": 0,
"technologies": [
{
"slug": "litespeed",
"name": "LiteSpeed",
"category": "web-server",
"vendor": "LiteSpeed Technologies",
"version": null,
"confidence": "high",
"evidence": "server: LiteSpeed",
"detectedAt": "2026-09-22T05:42:27.424Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YE2,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T05:42:27.426Z"
}
],
"certificate": {
"id": "ca0aadfb4aaf5091d279531d2e1129b8f",
"sha256": "6fe9a993e5fdc8d08b6ee31a3fa29bbae019f68433b9df6a1e3d9f5cbf6fb714",
"subject": "CN=dacloud.himalayan.host",
"issuer": "CN=YE2,O=Let's Encrypt,C=US",
"commonName": "dacloud.himalayan.host",
"notBefore": "2026-07-16T15:34:58.000Z",
"notAfter": "2026-10-14T15:34:57.000Z",
"sans": [
"dacloud.himalayan.host"
],
"keyAlgo": "ECDSA",
"sigAlgo": "ECDSA-SHA384"
}
},
{
"id": "c95c0e73b874e73180a787f84ceddaf3b",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"port": 587,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "smtp-submission",
"product": "Exim",
"productVersion": "4.100",
"tlsVersion": null,
"banner": "220 dacloud.himalayan.host ESMTP Exim 4.100 Tue, 22 Sep 2026 11:27:03 +0545",
"state": "open",
"firstSeen": "2026-09-22T05:42:27.429Z",
"lastSeen": "2026-09-22T05:42:27.429Z",
"observationCount": 0,
"technologies": [
{
"slug": "exim",
"name": "Exim",
"category": "mail-server",
"vendor": "Exim Project",
"version": "4.100",
"confidence": "high",
"evidence": "SMTP banner: 220 dacloud.himalayan.host ESMTP Exim 4.100 Tue, 22 Sep 2026 11:27:03 +0545",
"detectedAt": "2026-09-22T05:42:27.431Z"
}
],
"certificate": null
},
{
"id": "c28cf7be6496df77008b001710e94fc6e",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"port": 993,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "imaps",
"product": null,
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T05:42:27.435Z",
"lastSeen": "2026-09-22T05:42:27.435Z",
"observationCount": 0,
"technologies": [],
"certificate": null
},
{
"id": "cd02873f9c2c16a73bcf6367aca022577",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"port": 995,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "pop3s",
"product": null,
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T05:42:27.437Z",
"lastSeen": "2026-09-22T05:42:27.437Z",
"observationCount": 0,
"technologies": [],
"certificate": null
}
],
"certificates": [
{
"id": "ca0aadfb4aaf5091d279531d2e1129b8f",
"sha256": "6fe9a993e5fdc8d08b6ee31a3fa29bbae019f68433b9df6a1e3d9f5cbf6fb714",
"subject": "CN=dacloud.himalayan.host",
"issuer": "CN=YE2,O=Let's Encrypt,C=US",
"commonName": "dacloud.himalayan.host",
"notBefore": "2026-07-16T15:34:58.000Z",
"notAfter": "2026-10-14T15:34:57.000Z",
"sans": [
"dacloud.himalayan.host"
],
"keyAlgo": "ECDSA",
"sigAlgo": "ECDSA-SHA384"
}
],
"recentObservations": [
{
"id": "c94d9f496e131574df5e8fdb69e45bb29",
"observedAt": "2026-09-22T06:39:40.265Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "dacloud.himalayan.host"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "dacloud.himalayan.host",
"ports_probed": 25,
"technologies": null,
"open_services": 10,
"probe_duration": 50
},
"contentHash": "5d8ddf56d3573127959a8705aa282d21721dc88741d5e9c4ad80b2e63b4d2bc0",
"changed": true
},
{
"id": "c57e516e5841d0b3c728de1ab2e21f58f",
"observedAt": "2026-09-22T05:42:27.441Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.9",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "LiteSpeed",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "LiteSpeed",
"version": "",
"cert_sha256": "6fe9a993e5fdc8d08b6ee31a3fa29bbae019f68433b9df6a1e3d9f5cbf6fb714",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "",
"tls_version": "",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "pop3s"
}
},
"reverse_dns": "dacloud.himalayan.host",
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"litespeed",
"openssh",
"pure-ftpd"
]
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 10,
"reachable": true,
"reverse_dns": "dacloud.himalayan.host",
"ports_probed": 25,
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"litespeed",
"openssh",
"pure-ftpd"
],
"open_services": 10,
"probe_duration": 27088
},
"contentHash": "1d517e062376bfd02a959760c266f3a8a9dbb5cfaf65ece2840354bd5fa4a1a1",
"changed": true
},
{
"id": "c4b17633d1ce408970e4e940a1ad48eb6",
"observedAt": "2026-09-22T05:27:25.604Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "dacloud.himalayan.host"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "dacloud.himalayan.host",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 0
},
"contentHash": "568c23e9e4583c0b67c63b6f7269f3618e58b0b6f3890a8ca6078725560e1834",
"changed": false
},
{
"id": "c0d052ac68ad23866457d9f5e46242b5b",
"observedAt": "2026-09-22T05:12:23.702Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "dacloud.himalayan.host"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "dacloud.himalayan.host",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 45
},
"contentHash": "177529204f8e4b5e5a4748caf7acfa619217414eb14699a8ab494fb79ee5ca49",
"changed": false
}
],
"recentChanges": [
{
"id": "c0351fd2dd6c428cb3e23c9000c9c7725",
"changeType": "TECHNOLOGY_CHANGED",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"field": null,
"previousValue": "dovecot, exim, lets-encrypt, litespeed, openssh, pure-ftpd",
"currentValue": null,
"detectedAt": "2026-09-22T06:39:40.279Z",
"significance": "low",
"severity": "info",
"confidence": null,
"detail": "technology no longer detected: dovecot, exim, lets-encrypt, litespeed, openssh, pure-ftpd",
"serviceId": null
},
{
"id": "c072e703b9f72a26cead59994f2e1eef8",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"field": "service:995/tcp",
"previousValue": "pop3s",
"currentValue": null,
"detectedAt": "2026-09-22T06:39:40.278Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "c8999c1ac8ea58cc5bdd1465982e014cc",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"field": "service:993/tcp",
"previousValue": "imaps",
"currentValue": null,
"detectedAt": "2026-09-22T06:39:40.276Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "cc5ba60ae39a9bc675f1fc5f46c7cd758",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"field": "service:80/tcp",
"previousValue": "LiteSpeed",
"currentValue": null,
"detectedAt": "2026-09-22T06:39:40.275Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "ce92a479afc1e158e720f1366450c7152",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"field": "service:587/tcp",
"previousValue": "Exim 4.100",
"currentValue": null,
"detectedAt": "2026-09-22T06:39:40.273Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "cf7c69203cced1984204c0d582b36bb2c",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"field": "service:53/tcp",
"previousValue": "dns",
"currentValue": null,
"detectedAt": "2026-09-22T06:39:40.272Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "cbf243610a53acb04d7da384ad8c9c26a",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"field": "service:443/tcp",
"previousValue": "LiteSpeed / TLSv1.3",
"currentValue": null,
"detectedAt": "2026-09-22T06:39:40.271Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "ceb4b00e5de78a1c631d4de2aceee3526",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"field": "service:22/tcp",
"previousValue": "OpenSSH 9.9",
"currentValue": null,
"detectedAt": "2026-09-22T06:39:40.269Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "c5f2347f642892526d17209bc2b2a53dd",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"field": "service:21/tcp",
"previousValue": "Pure-FTPd",
"currentValue": null,
"detectedAt": "2026-09-22T06:39:40.268Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "ca23d0549e3b924e5016257c242355e41",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"field": "service:143/tcp",
"previousValue": "Dovecot",
"currentValue": null,
"detectedAt": "2026-09-22T06:39:40.267Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "ca0fe1c2b3fa82c2ef88ec7556cfce09b",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"field": "service:110/tcp",
"previousValue": "Dovecot",
"currentValue": null,
"detectedAt": "2026-09-22T06:39:40.266Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "c84d484332ace0ccd1a383e5e3cf3eb88",
"changeType": "TECHNOLOGY_CHANGED",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"field": null,
"previousValue": null,
"currentValue": "dovecot, exim, lets-encrypt, litespeed, openssh, pure-ftpd",
"detectedAt": "2026-09-22T05:42:27.455Z",
"significance": "low",
"severity": "info",
"confidence": null,
"detail": "technology detected: dovecot, exim, lets-encrypt, litespeed, openssh, pure-ftpd",
"serviceId": null
},
{
"id": "c064376afe23d52ee4c869ffb2198eada",
"changeType": "NEW_SERVICE",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"field": "service:995/tcp",
"previousValue": null,
"currentValue": "pop3s",
"detectedAt": "2026-09-22T05:42:27.453Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "cf349ae9802aaff3da651adad29763fa5",
"changeType": "NEW_SERVICE",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"field": "service:993/tcp",
"previousValue": null,
"currentValue": "imaps",
"detectedAt": "2026-09-22T05:42:27.452Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c1c70fdff11b6858ee0745056209134cc",
"changeType": "NEW_SERVICE",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"field": "service:80/tcp",
"previousValue": null,
"currentValue": "LiteSpeed",
"detectedAt": "2026-09-22T05:42:27.451Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c43112e5d6ca84837c381763df2626738",
"changeType": "NEW_SERVICE",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"field": "service:587/tcp",
"previousValue": null,
"currentValue": "Exim 4.100",
"detectedAt": "2026-09-22T05:42:27.450Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c3301f3aa0bdd1da1c17c4deaf568478f",
"changeType": "NEW_SERVICE",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"field": "service:53/tcp",
"previousValue": null,
"currentValue": "dns",
"detectedAt": "2026-09-22T05:42:27.449Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "ce613ae2e5c61f98ce24f8afccba5aaf6",
"changeType": "NEW_SERVICE",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"field": "service:443/tcp",
"previousValue": null,
"currentValue": "LiteSpeed / TLSv1.3",
"detectedAt": "2026-09-22T05:42:27.447Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c54002318017d10cf3edda6fae54dae7f",
"changeType": "NEW_SERVICE",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"field": "service:22/tcp",
"previousValue": null,
"currentValue": "OpenSSH 9.9",
"detectedAt": "2026-09-22T05:42:27.446Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c7c305120630b34349ff103b3ddd9efa2",
"changeType": "NEW_SERVICE",
"assetId": "c7d01fe4324b219a4cadccbb7ea92bf84",
"assetValue": null,
"field": "service:21/tcp",
"previousValue": null,
"currentValue": "Pure-FTPd",
"detectedAt": "2026-09-22T05:42:27.445Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
}
],
"dnsRecords": [],
"state": {
"current": {
"reverse_dns": "dacloud.himalayan.host"
},
"previous": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.9",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "LiteSpeed",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "LiteSpeed",
"version": "",
"cert_sha256": "6fe9a993e5fdc8d08b6ee31a3fa29bbae019f68433b9df6a1e3d9f5cbf6fb714",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "",
"tls_version": "",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "pop3s"
}
},
"reverse_dns": "dacloud.himalayan.host",
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"litespeed",
"openssh",
"pure-ftpd"
]
},
"comparable": true
}
}