Reading the observatory store…
Reading the observatory store…
First seen 22 Sep 2026, last seen 23 Sep 2026 22:42 UTC (16h ago). 2 observations on record. Location is an estimate derived from registration data — the source and confidence are stated below.
| Port | Service | Product | Technologies | TLS | State | Banner | Last seen |
|---|---|---|---|---|---|---|---|
| 21 tcp / tcp | ftp | Pure-FTPd |
| TLSv1.3certificate
| open | 220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time is now 22:42. Server … | 23 Sep 2026 16h ago |
| 22 tcp / tcp | ssh | OpenSSH 9.6p1 |
| not negotiated | open | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.19 | 23 Sep 2026 16h ago |
| 53 tcp / tcp | dns | not identified | none detected | not negotiated | open | no banner captured | 23 Sep 2026 16h ago |
| 80 tcp / tcp | http | LiteSpeed |
| not negotiated | open | no banner captured | 23 Sep 2026 16h ago |
| 110 tcp / tcp | pop3 | Dovecot |
| TLSv1.3certificate
| open | +OK Dovecot (Ubuntu) ready. | 23 Sep 2026 16h ago |
| 143 tcp / tcp | imap | Dovecot |
| TLSv1.3certificate
| open | * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS LOGINDISABLED] Dovecot (Ubuntu) ready. | 23 Sep 2026 16h ago |
| 443 tcp / tcp | https | LiteSpeed |
| TLSv1.3certificate
| open | no banner captured | 23 Sep 2026 16h ago |
| 465 tcp / tcp | smtps | not identified | none detected | not negotiated | open | no banner captured | 23 Sep 2026 16h ago |
| 587 tcp / tcp | smtp-submission | Postfix |
| not negotiated | open | 220 localhost ESMTP Postfix | 23 Sep 2026 16h ago |
| 993 tcp / tcp | imaps | Dovecot |
| TLSv1.3certificate
| open | * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN] Dovecot (Ubuntu) ready. | 23 Sep 2026 16h ago |
| 995 tcp / tcp | pop3s | Dovecot |
| TLSv1.3certificate
| open | +OK Dovecot (Ubuntu) ready. | 23 Sep 2026 16h ago |
| 8888 tcp / tcp | http-alt | not identified | none detected | not negotiated | open | no banner captured | 23 Sep 2026 16h ago |
| Observed at | Source | Collector | Confidence | Changed | State | Content hash |
|---|---|---|---|---|---|---|
| 23 Sep 2026 22:42 UTC | fingerprint | fingerprint-1 | high | changed | {"services":{"21/tcp":{"state":"open","product":"Pure-FTPd","version":"","cert_sha256":"88b9cbe981b2427bba30aa09894d548e491198609da3fe7539c5aa3c80decbec","tls_… | 81d88b8925261f9835485e04b743d9f126beb10… |
| 22 Sep 2026 09:30 UTC | fingerprint | fingerprint-1 | high | changed | {"reverse_dns":"www.fiber.net.np"} | 48835089913b060ee90e484a06ae9065d5e695e… |
| Detected at | Type | Field | Previous | Current | Significance | Confidence |
|---|---|---|---|---|---|---|
| 23 Sep 2026 22:42 UTC | TECHNOLOGY CHANGED | — | — | dovecot, lets-encrypt, litespeed, openssh, postfix, pure-ftpd | low | unknown |
| 23 Sep 2026 22:42 UTC | NEW SERVICE | service:995/tcp | — | Dovecot / TLSv1.3 | low | unknown |
| 23 Sep 2026 22:42 UTC | NEW SERVICE | service:993/tcp | — | Dovecot / TLSv1.3 | low | unknown |
| 23 Sep 2026 22:42 UTC | NEW SERVICE | service:8888/tcp | — | http-alt | low | unknown |
| 23 Sep 2026 22:42 UTC | NEW SERVICE | service:80/tcp | — | LiteSpeed | low | unknown |
| 23 Sep 2026 22:42 UTC | NEW SERVICE | service:587/tcp | — | Postfix | low | unknown |
| 23 Sep 2026 22:42 UTC | NEW SERVICE | service:53/tcp | — | dns | low | unknown |
| 23 Sep 2026 22:42 UTC | NEW SERVICE | service:465/tcp | — | smtps | low | unknown |
| 23 Sep 2026 22:42 UTC | NEW SERVICE | service:443/tcp | — | LiteSpeed / TLSv1.3 | low | unknown |
| 23 Sep 2026 22:42 UTC | NEW SERVICE | service:22/tcp | — | OpenSSH 9.6p1 | low | unknown |
| 23 Sep 2026 22:42 UTC | NEW SERVICE | service:21/tcp | — | Pure-FTPd / TLSv1.3 | low | unknown |
| 23 Sep 2026 22:42 UTC | NEW SERVICE | service:143/tcp | — | Dovecot / TLSv1.3 | low | unknown |
| 23 Sep 2026 22:42 UTC | NEW SERVICE | service:110/tcp | — | Dovecot / TLSv1.3 | low | unknown |
| 22 Sep 2026 09:30 UTC | NEW ASSET | — | — | asset with no observed open endpoints | low | unknown |
No version-based matches recorded.
A match can only be produced once a product and version have been detected on a service, which requires a completed probe.
| Field | Previous | Current | Reading |
|---|---|---|---|
| reverse_dns | www.fiber.net.np | www.fiber.net.np | unchanged |
| services.110/tcp.cert_sha256 | — | 28f2da6b693e402b68f9fea7dbb989eac8516b8667c540894afd38ea7bd8bbc6 | appeared |
| services.110/tcp.product | — | Dovecot | appeared |
| services.110/tcp.service_type | — | pop3 | appeared |
| services.110/tcp.state | — | open | appeared |
| services.110/tcp.tls_version | — | TLSv1.3 | appeared |
| services.110/tcp.version | — | — | appeared |
| services.143/tcp.cert_sha256 | — | 28f2da6b693e402b68f9fea7dbb989eac8516b8667c540894afd38ea7bd8bbc6 | appeared |
| services.143/tcp.product | — | Dovecot | appeared |
| services.143/tcp.service_type | — | imap | appeared |
| services.143/tcp.state | — | open | appeared |
| services.143/tcp.tls_version | — | TLSv1.3 | appeared |
| services.143/tcp.version | — | — | appeared |
| services.21/tcp.cert_sha256 | — | 88b9cbe981b2427bba30aa09894d548e491198609da3fe7539c5aa3c80decbec | appeared |
| services.21/tcp.product | — | Pure-FTPd | appeared |
| services.21/tcp.service_type | — | ftp | appeared |
| services.21/tcp.state | — | open | appeared |
| services.21/tcp.tls_version | — | TLSv1.3 | appeared |
| services.21/tcp.version | — | — | appeared |
| services.22/tcp.cert_sha256 | — | — | appeared |
| services.22/tcp.product | — | OpenSSH | appeared |
| services.22/tcp.service_type | — | ssh | appeared |
| services.22/tcp.state | — | open | appeared |
| services.22/tcp.tls_version | — | — | appeared |
| services.22/tcp.version | — | 9.6p1 | appeared |
| services.443/tcp.cert_sha256 | — | aba0d0ab1d5f7bc8c6096f33e467d168b1411a94749d336f3a05a82a33855ed7 | appeared |
| services.443/tcp.product | — | LiteSpeed | appeared |
| services.443/tcp.service_type | — | https | appeared |
| services.443/tcp.state | — | open | appeared |
| services.443/tcp.tls_version | — | TLSv1.3 | appeared |
| services.443/tcp.version | — | — | appeared |
| services.465/tcp.cert_sha256 | — | — | appeared |
| services.465/tcp.product | — | — | appeared |
| services.465/tcp.service_type | — | smtps | appeared |
| services.465/tcp.state | — | open | appeared |
| services.465/tcp.tls_version | — | — | appeared |
| services.465/tcp.version | — | — | appeared |
| services.53/tcp.cert_sha256 | — | — | appeared |
| services.53/tcp.product | — | — | appeared |
| services.53/tcp.service_type | — | dns | appeared |
| services.53/tcp.state | — | open | appeared |
| services.53/tcp.tls_version | — | — | appeared |
| services.53/tcp.version | — | — | appeared |
| services.587/tcp.cert_sha256 | — | — | appeared |
| services.587/tcp.product | — | Postfix | appeared |
| services.587/tcp.service_type | — | smtp-submission | appeared |
| services.587/tcp.state | — | open | appeared |
| services.587/tcp.tls_version | — | — | appeared |
| services.587/tcp.version | — | — | appeared |
| services.80/tcp.cert_sha256 | — | — | appeared |
| services.80/tcp.product | — | LiteSpeed | appeared |
| services.80/tcp.service_type | — | http | appeared |
| services.80/tcp.state | — | open | appeared |
| services.80/tcp.tls_version | — | — | appeared |
| services.80/tcp.version | — | — | appeared |
| services.8888/tcp.cert_sha256 | — | — | appeared |
| services.8888/tcp.product | — | — | appeared |
| services.8888/tcp.service_type | — | http-alt | appeared |
| services.8888/tcp.state | — | open | appeared |
| services.8888/tcp.tls_version | — | — | appeared |
| services.8888/tcp.version | — | — | appeared |
| services.993/tcp.cert_sha256 | — | 28f2da6b693e402b68f9fea7dbb989eac8516b8667c540894afd38ea7bd8bbc6 | appeared |
| services.993/tcp.product | — | Dovecot | appeared |
| services.993/tcp.service_type | — | imaps | appeared |
| services.993/tcp.state | — | open | appeared |
| services.993/tcp.tls_version | — | TLSv1.3 | appeared |
| services.993/tcp.version | — | — | appeared |
| services.995/tcp.cert_sha256 | — | 28f2da6b693e402b68f9fea7dbb989eac8516b8667c540894afd38ea7bd8bbc6 | appeared |
| services.995/tcp.product | — | Dovecot | appeared |
| services.995/tcp.service_type | — | pop3s | appeared |
| services.995/tcp.state | — | open | appeared |
| services.995/tcp.tls_version | — | TLSv1.3 | appeared |
| services.995/tcp.version | — | — | appeared |
| technologies | — | ["dovecot","lets-encrypt","litespeed","openssh","postfix","pure-ftpd"] | appeared |
{
"id": "c7f141f1397827886103d2b70d629bb95",
"type": "ipv4",
"value": "160.22.164.205",
"hostname": null,
"reverseDns": "www.fiber.net.np",
"asn": {
"number": 138933,
"name": "FNCPL-AS-AP - Fiber Net Communication Pvt. Ltd."
},
"organization": {
"id": "cc62da4db4cb7519b9d19b6ffb57e799d",
"name": "FNCPL-AS-AP - Fiber Net Communication Pvt. Ltd."
},
"location": {
"country": "NP",
"city": "Kathmandu",
"province": "Bagmati Province",
"district": "",
"confidence": "low",
"source": "ip-api.com"
},
"scopeStatus": "in_scope",
"priority": "NORMAL",
"firstSeen": "2026-09-22T05:02:16.815Z",
"lastSeen": "2026-09-23T22:42:11.801Z",
"observationCount": 2,
"openServices": 12,
"serviceCount": 12,
"technologies": [
"dovecot",
"lets-encrypt",
"litespeed",
"openssh",
"postfix",
"pure-ftpd"
],
"vulnerabilityMatches": [],
"network": {
"id": "ca43a96b40a20340a942034d229700802",
"prefix": "160.22.164.0/24",
"ipVersion": 4
},
"services": [
{
"id": "c42e25a06afaf1282482da68212313513",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"port": 21,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "ftp",
"product": "Pure-FTPd",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": "220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time is now 22:42. Server port: 21. 220-IPv6 connections are also welcome on this server. 220 You will be disconnected after 15 minutes of inactivity.",
"state": "open",
"firstSeen": "2026-09-23T22:42:11.698Z",
"lastSeen": "2026-09-23T22:42:11.698Z",
"observationCount": 0,
"technologies": [
{
"slug": "pure-ftpd",
"name": "Pure-FTPd",
"category": "ftp-server",
"vendor": "Pure-FTPd",
"version": null,
"confidence": "high",
"evidence": "FTP banner: 220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time ...",
"detectedAt": "2026-09-23T22:42:11.701Z"
}
],
"certificate": {
"id": "c0d8be44e647ecf87ecd8f2eb5e06a132",
"sha256": "88b9cbe981b2427bba30aa09894d548e491198609da3fe7539c5aa3c80decbec",
"subject": "CN=www.example.com,O=Dis,L=Sprinal-ield,ST=Denial,C=US",
"issuer": "CN=www.example.com,O=Dis,L=Sprinal-ield,ST=Denial,C=US",
"commonName": "www.example.com",
"notBefore": "2025-10-30T22:37:54.000Z",
"notAfter": "2045-10-25T22:37:54.000Z",
"sans": [],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "cdcaa6ee7b7f2b56a02cdbce78b08f6c7",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"port": 22,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "ssh",
"product": "OpenSSH",
"productVersion": "9.6p1",
"tlsVersion": null,
"banner": "SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.19",
"state": "open",
"firstSeen": "2026-09-23T22:42:11.703Z",
"lastSeen": "2026-09-23T22:42:11.703Z",
"observationCount": 0,
"technologies": [
{
"slug": "openssh",
"name": "OpenSSH",
"category": "remote-access",
"vendor": "OpenBSD Project",
"version": "9.6p1",
"confidence": "high",
"evidence": "SSH banner: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.19",
"detectedAt": "2026-09-23T22:42:11.706Z"
}
],
"certificate": null
},
{
"id": "cfa5f5057da4f4de6e47672807512d7d7",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"port": 53,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "dns",
"product": null,
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-23T22:42:11.710Z",
"lastSeen": "2026-09-23T22:42:11.710Z",
"observationCount": 0,
"technologies": [],
"certificate": null
},
{
"id": "c97626eebf7eb1596c8f5da6c7a7587d0",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"port": 80,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "http",
"product": "LiteSpeed",
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-23T22:42:11.712Z",
"lastSeen": "2026-09-23T22:42:11.712Z",
"observationCount": 0,
"technologies": [
{
"slug": "litespeed",
"name": "LiteSpeed",
"category": "web-server",
"vendor": "LiteSpeed Technologies",
"version": null,
"confidence": "high",
"evidence": "server: LiteSpeed",
"detectedAt": "2026-09-23T22:42:11.715Z"
}
],
"certificate": null
},
{
"id": "cc98137ed522adf5b7b59520cfd9eeab2",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"port": 110,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "pop3",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": "+OK Dovecot (Ubuntu) ready.",
"state": "open",
"firstSeen": "2026-09-23T22:42:11.720Z",
"lastSeen": "2026-09-23T22:42:11.720Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: +OK Dovecot (Ubuntu) ready.",
"detectedAt": "2026-09-23T22:42:11.723Z"
}
],
"certificate": {
"id": "c911cbf4aa169b791d79c3075d3077602",
"sha256": "28f2da6b693e402b68f9fea7dbb989eac8516b8667c540894afd38ea7bd8bbc6",
"subject": "CN=www.example.com,O=Dis,L=Springfield,ST=Denial,C=US",
"issuer": "CN=www.example.com,O=Dis,L=Springfield,ST=Denial,C=US",
"commonName": "www.example.com",
"notBefore": "2025-10-30T22:38:59.000Z",
"notAfter": "2035-10-28T22:38:59.000Z",
"sans": [],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "c5147136256cd503b1faf4aaa3c10c003",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"port": 143,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "imap",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS LOGINDISABLED] Dovecot (Ubuntu) ready.",
"state": "open",
"firstSeen": "2026-09-23T22:42:11.729Z",
"lastSeen": "2026-09-23T22:42:11.729Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS LOGINDISABLED] Dovecot (Ubuntu) read...",
"detectedAt": "2026-09-23T22:42:11.731Z"
}
],
"certificate": {
"id": "c911cbf4aa169b791d79c3075d3077602",
"sha256": "28f2da6b693e402b68f9fea7dbb989eac8516b8667c540894afd38ea7bd8bbc6",
"subject": "CN=www.example.com,O=Dis,L=Springfield,ST=Denial,C=US",
"issuer": "CN=www.example.com,O=Dis,L=Springfield,ST=Denial,C=US",
"commonName": "www.example.com",
"notBefore": "2025-10-30T22:38:59.000Z",
"notAfter": "2035-10-28T22:38:59.000Z",
"sans": [],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "c4be7d67c7958a90db85b2f6370c234dd",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"port": 443,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "https",
"product": "LiteSpeed",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": null,
"state": "open",
"firstSeen": "2026-09-23T22:42:11.735Z",
"lastSeen": "2026-09-23T22:42:11.735Z",
"observationCount": 0,
"technologies": [
{
"slug": "litespeed",
"name": "LiteSpeed",
"category": "web-server",
"vendor": "LiteSpeed Technologies",
"version": null,
"confidence": "high",
"evidence": "server: LiteSpeed",
"detectedAt": "2026-09-23T22:42:11.738Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YE2,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-23T22:42:11.740Z"
}
],
"certificate": {
"id": "c01ccb34e4475a316800e0a02ca89e683",
"sha256": "aba0d0ab1d5f7bc8c6096f33e467d168b1411a94749d336f3a05a82a33855ed7",
"subject": "CN=fiber.net.np",
"issuer": "CN=YE2,O=Let's Encrypt,C=US",
"commonName": "fiber.net.np",
"notBefore": "2026-09-13T23:09:05.000Z",
"notAfter": "2026-12-12T23:09:04.000Z",
"sans": [
"fiber.net.np",
"www.fiber.net.np"
],
"keyAlgo": "ECDSA",
"sigAlgo": "ECDSA-SHA384"
}
},
{
"id": "c2bea6033309bde268133d5ac8ebee56f",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"port": 465,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "smtps",
"product": null,
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-23T22:42:11.744Z",
"lastSeen": "2026-09-23T22:42:11.744Z",
"observationCount": 0,
"technologies": [],
"certificate": null
},
{
"id": "cd00b73eee9804ef2f2362e0997bb7ef8",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"port": 587,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "smtp-submission",
"product": "Postfix",
"productVersion": null,
"tlsVersion": null,
"banner": "220 localhost ESMTP Postfix",
"state": "open",
"firstSeen": "2026-09-23T22:42:11.747Z",
"lastSeen": "2026-09-23T22:42:11.747Z",
"observationCount": 0,
"technologies": [
{
"slug": "postfix",
"name": "Postfix",
"category": "mail-server",
"vendor": "Wietse Venema",
"version": null,
"confidence": "high",
"evidence": "SMTP banner: 220 localhost ESMTP Postfix",
"detectedAt": "2026-09-23T22:42:11.749Z"
}
],
"certificate": null
},
{
"id": "c92d1a4ac8a27cfdeaef9c252abe180ec",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"port": 993,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "imaps",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": "* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN] Dovecot (Ubuntu) ready.",
"state": "open",
"firstSeen": "2026-09-23T22:42:11.755Z",
"lastSeen": "2026-09-23T22:42:11.755Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN] Dovecot (Ubuntu) ready.",
"detectedAt": "2026-09-23T22:42:11.758Z"
}
],
"certificate": {
"id": "c911cbf4aa169b791d79c3075d3077602",
"sha256": "28f2da6b693e402b68f9fea7dbb989eac8516b8667c540894afd38ea7bd8bbc6",
"subject": "CN=www.example.com,O=Dis,L=Springfield,ST=Denial,C=US",
"issuer": "CN=www.example.com,O=Dis,L=Springfield,ST=Denial,C=US",
"commonName": "www.example.com",
"notBefore": "2025-10-30T22:38:59.000Z",
"notAfter": "2035-10-28T22:38:59.000Z",
"sans": [],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "ce1849b2171b75e263ce4c77b3e09394f",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"port": 995,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "pop3s",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": "+OK Dovecot (Ubuntu) ready.",
"state": "open",
"firstSeen": "2026-09-23T22:42:11.762Z",
"lastSeen": "2026-09-23T22:42:11.762Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: +OK Dovecot (Ubuntu) ready.",
"detectedAt": "2026-09-23T22:42:11.765Z"
}
],
"certificate": {
"id": "c911cbf4aa169b791d79c3075d3077602",
"sha256": "28f2da6b693e402b68f9fea7dbb989eac8516b8667c540894afd38ea7bd8bbc6",
"subject": "CN=www.example.com,O=Dis,L=Springfield,ST=Denial,C=US",
"issuer": "CN=www.example.com,O=Dis,L=Springfield,ST=Denial,C=US",
"commonName": "www.example.com",
"notBefore": "2025-10-30T22:38:59.000Z",
"notAfter": "2035-10-28T22:38:59.000Z",
"sans": [],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "c2b75b327bb5be258644a887669fcaa34",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"port": 8888,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "http-alt",
"product": null,
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-23T22:42:11.767Z",
"lastSeen": "2026-09-23T22:42:11.767Z",
"observationCount": 0,
"technologies": [],
"certificate": null
}
],
"certificates": [
{
"id": "c0d8be44e647ecf87ecd8f2eb5e06a132",
"sha256": "88b9cbe981b2427bba30aa09894d548e491198609da3fe7539c5aa3c80decbec",
"subject": "CN=www.example.com,O=Dis,L=Sprinal-ield,ST=Denial,C=US",
"issuer": "CN=www.example.com,O=Dis,L=Sprinal-ield,ST=Denial,C=US",
"commonName": "www.example.com",
"notBefore": "2025-10-30T22:37:54.000Z",
"notAfter": "2045-10-25T22:37:54.000Z",
"sans": [],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "c911cbf4aa169b791d79c3075d3077602",
"sha256": "28f2da6b693e402b68f9fea7dbb989eac8516b8667c540894afd38ea7bd8bbc6",
"subject": "CN=www.example.com,O=Dis,L=Springfield,ST=Denial,C=US",
"issuer": "CN=www.example.com,O=Dis,L=Springfield,ST=Denial,C=US",
"commonName": "www.example.com",
"notBefore": "2025-10-30T22:38:59.000Z",
"notAfter": "2035-10-28T22:38:59.000Z",
"sans": [],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "c911cbf4aa169b791d79c3075d3077602",
"sha256": "28f2da6b693e402b68f9fea7dbb989eac8516b8667c540894afd38ea7bd8bbc6",
"subject": "CN=www.example.com,O=Dis,L=Springfield,ST=Denial,C=US",
"issuer": "CN=www.example.com,O=Dis,L=Springfield,ST=Denial,C=US",
"commonName": "www.example.com",
"notBefore": "2025-10-30T22:38:59.000Z",
"notAfter": "2035-10-28T22:38:59.000Z",
"sans": [],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "c01ccb34e4475a316800e0a02ca89e683",
"sha256": "aba0d0ab1d5f7bc8c6096f33e467d168b1411a94749d336f3a05a82a33855ed7",
"subject": "CN=fiber.net.np",
"issuer": "CN=YE2,O=Let's Encrypt,C=US",
"commonName": "fiber.net.np",
"notBefore": "2026-09-13T23:09:05.000Z",
"notAfter": "2026-12-12T23:09:04.000Z",
"sans": [
"fiber.net.np",
"www.fiber.net.np"
],
"keyAlgo": "ECDSA",
"sigAlgo": "ECDSA-SHA384"
},
{
"id": "c911cbf4aa169b791d79c3075d3077602",
"sha256": "28f2da6b693e402b68f9fea7dbb989eac8516b8667c540894afd38ea7bd8bbc6",
"subject": "CN=www.example.com,O=Dis,L=Springfield,ST=Denial,C=US",
"issuer": "CN=www.example.com,O=Dis,L=Springfield,ST=Denial,C=US",
"commonName": "www.example.com",
"notBefore": "2025-10-30T22:38:59.000Z",
"notAfter": "2035-10-28T22:38:59.000Z",
"sans": [],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "c911cbf4aa169b791d79c3075d3077602",
"sha256": "28f2da6b693e402b68f9fea7dbb989eac8516b8667c540894afd38ea7bd8bbc6",
"subject": "CN=www.example.com,O=Dis,L=Springfield,ST=Denial,C=US",
"issuer": "CN=www.example.com,O=Dis,L=Springfield,ST=Denial,C=US",
"commonName": "www.example.com",
"notBefore": "2025-10-30T22:38:59.000Z",
"notAfter": "2035-10-28T22:38:59.000Z",
"sans": [],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
],
"recentObservations": [
{
"id": "ca42e8452ccc778a9ab16b651c45dcfa8",
"observedAt": "2026-09-23T22:42:11.771Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "88b9cbe981b2427bba30aa09894d548e491198609da3fe7539c5aa3c80decbec",
"tls_version": "TLSv1.3",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.6p1",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "LiteSpeed",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "28f2da6b693e402b68f9fea7dbb989eac8516b8667c540894afd38ea7bd8bbc6",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "28f2da6b693e402b68f9fea7dbb989eac8516b8667c540894afd38ea7bd8bbc6",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "LiteSpeed",
"version": "",
"cert_sha256": "aba0d0ab1d5f7bc8c6096f33e467d168b1411a94749d336f3a05a82a33855ed7",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Postfix",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "28f2da6b693e402b68f9fea7dbb989eac8516b8667c540894afd38ea7bd8bbc6",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "28f2da6b693e402b68f9fea7dbb989eac8516b8667c540894afd38ea7bd8bbc6",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
},
"8888/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http-alt"
}
},
"reverse_dns": "www.fiber.net.np",
"technologies": [
"dovecot",
"lets-encrypt",
"litespeed",
"openssh",
"postfix",
"pure-ftpd"
]
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
465,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 12,
"reachable": true,
"reverse_dns": "www.fiber.net.np",
"ports_probed": 26,
"technologies": [
"dovecot",
"lets-encrypt",
"litespeed",
"openssh",
"postfix",
"pure-ftpd"
],
"open_services": 12,
"probe_duration": 28101
},
"contentHash": "81d88b8925261f9835485e04b743d9f126beb10145428f9d80396735fce5ec60",
"changed": true
},
{
"id": "c1c3438a698c3c54d9f35dd8aecf89834",
"observedAt": "2026-09-22T09:30:12.892Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "www.fiber.net.np"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "www.fiber.net.np",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 42
},
"contentHash": "48835089913b060ee90e484a06ae9065d5e695e58bb99035fbc1d34cb4911f1a",
"changed": true
}
],
"recentChanges": [
{
"id": "c001cf6baab434e85acca7ffe07329f6f",
"changeType": "TECHNOLOGY_CHANGED",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"field": null,
"previousValue": null,
"currentValue": "dovecot, lets-encrypt, litespeed, openssh, postfix, pure-ftpd",
"detectedAt": "2026-09-23T22:42:11.799Z",
"significance": "low",
"severity": "info",
"confidence": null,
"detail": "technology detected: dovecot, lets-encrypt, litespeed, openssh, postfix, pure-ftpd",
"serviceId": null
},
{
"id": "c31a923eac40c91c3213f6cc22b23ab4f",
"changeType": "NEW_SERVICE",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"field": "service:995/tcp",
"previousValue": null,
"currentValue": "Dovecot / TLSv1.3",
"detectedAt": "2026-09-23T22:42:11.796Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c2132ad7216097c186bdf92f290b57e8b",
"changeType": "NEW_SERVICE",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"field": "service:993/tcp",
"previousValue": null,
"currentValue": "Dovecot / TLSv1.3",
"detectedAt": "2026-09-23T22:42:11.794Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "cea3b6a42a035f49fdd3f63a281efae6a",
"changeType": "NEW_SERVICE",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"field": "service:8888/tcp",
"previousValue": null,
"currentValue": "http-alt",
"detectedAt": "2026-09-23T22:42:11.792Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "cc6e48ce48662ed21923c42db00a8eb5e",
"changeType": "NEW_SERVICE",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"field": "service:80/tcp",
"previousValue": null,
"currentValue": "LiteSpeed",
"detectedAt": "2026-09-23T22:42:11.789Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c51a35d27d8802e964fbf7a91776ee134",
"changeType": "NEW_SERVICE",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"field": "service:587/tcp",
"previousValue": null,
"currentValue": "Postfix",
"detectedAt": "2026-09-23T22:42:11.787Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c9bb530766970f45e14ccef91a44d6427",
"changeType": "NEW_SERVICE",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"field": "service:53/tcp",
"previousValue": null,
"currentValue": "dns",
"detectedAt": "2026-09-23T22:42:11.785Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c0d4a3c98dc0d2b4a3b2dce134168b357",
"changeType": "NEW_SERVICE",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"field": "service:465/tcp",
"previousValue": null,
"currentValue": "smtps",
"detectedAt": "2026-09-23T22:42:11.783Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c3cb848ddc605f550ed4ad5182f6054bb",
"changeType": "NEW_SERVICE",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"field": "service:443/tcp",
"previousValue": null,
"currentValue": "LiteSpeed / TLSv1.3",
"detectedAt": "2026-09-23T22:42:11.781Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c89ffc597b099ce081724928e38754b30",
"changeType": "NEW_SERVICE",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"field": "service:22/tcp",
"previousValue": null,
"currentValue": "OpenSSH 9.6p1",
"detectedAt": "2026-09-23T22:42:11.779Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c5d5525ffb29dfabde540cf5c2e16ee98",
"changeType": "NEW_SERVICE",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"field": "service:21/tcp",
"previousValue": null,
"currentValue": "Pure-FTPd / TLSv1.3",
"detectedAt": "2026-09-23T22:42:11.778Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "cf39a50f1ab10b64a84686672866b16bd",
"changeType": "NEW_SERVICE",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"field": "service:143/tcp",
"previousValue": null,
"currentValue": "Dovecot / TLSv1.3",
"detectedAt": "2026-09-23T22:42:11.776Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c3eddb28fd8fac8c421e4073b2fba0cdb",
"changeType": "NEW_SERVICE",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"field": "service:110/tcp",
"previousValue": null,
"currentValue": "Dovecot / TLSv1.3",
"detectedAt": "2026-09-23T22:42:11.773Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c39e91bc1b02a56874fa2a4675735646d",
"changeType": "NEW_ASSET",
"assetId": "c7f141f1397827886103d2b70d629bb95",
"assetValue": null,
"field": null,
"previousValue": null,
"currentValue": "asset with no observed open endpoints",
"detectedAt": "2026-09-22T09:30:12.893Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "asset observed for the first time",
"serviceId": null
}
],
"dnsRecords": [],
"state": {
"current": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "88b9cbe981b2427bba30aa09894d548e491198609da3fe7539c5aa3c80decbec",
"tls_version": "TLSv1.3",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.6p1",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "LiteSpeed",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "28f2da6b693e402b68f9fea7dbb989eac8516b8667c540894afd38ea7bd8bbc6",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "28f2da6b693e402b68f9fea7dbb989eac8516b8667c540894afd38ea7bd8bbc6",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "LiteSpeed",
"version": "",
"cert_sha256": "aba0d0ab1d5f7bc8c6096f33e467d168b1411a94749d336f3a05a82a33855ed7",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Postfix",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "28f2da6b693e402b68f9fea7dbb989eac8516b8667c540894afd38ea7bd8bbc6",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "28f2da6b693e402b68f9fea7dbb989eac8516b8667c540894afd38ea7bd8bbc6",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
},
"8888/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http-alt"
}
},
"reverse_dns": "www.fiber.net.np",
"technologies": [
"dovecot",
"lets-encrypt",
"litespeed",
"openssh",
"postfix",
"pure-ftpd"
]
},
"previous": {
"reverse_dns": "www.fiber.net.np"
},
"comparable": true
}
}