Reading the observatory store…
Reading the observatory store…
First seen 22 Sep 2026, last seen 23 Sep 2026 19:09 UTC (6h ago). 9 observations on record. Location is an estimate derived from registration data — the source and confidence are stated below.
| Port | Service | Product | Technologies | TLS | State | Banner | Last seen |
|---|---|---|---|---|---|---|---|
| 21 tcp / tcp | ftp | Pure-FTPd |
| TLSv1.3certificate
| open | 220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time is now 00:53. Server … | 23 Sep 2026 6h ago |
| 22 tcp / tcp | ssh | OpenSSH 9.9 |
| not negotiated | open | SSH-2.0-OpenSSH_9.9 | 23 Sep 2026 6h ago |
| 53 tcp / tcp | dns | not identified | none detected | not negotiated | open | no banner captured | 23 Sep 2026 6h ago |
| 80 tcp / tcp | http | not identified | none detected | not negotiated | open | no banner captured | 23 Sep 2026 6h ago |
| 110 tcp / tcp | pop3 | Dovecot |
| TLSv1.3certificate
| open | +OK Dovecot ready. | 23 Sep 2026 6h ago |
| 143 tcp / tcp | imap | Dovecot |
| TLSv1.3certificate
| open | * OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. | 23 Sep 2026 6h ago |
| 443 tcp / tcp | https | PHP 7.2.34 |
| TLSv1.3certificate
| open | no banner captured | 23 Sep 2026 6h ago |
| 465 tcp / tcp | smtps | Exim 4.100 |
| TLSv1.3certificate
| open | 220-kush.mysecurecloudserver.com ESMTP Exim 4.100 #2 Thu, 24 Sep 2026 00:53:37 +0545 220-We do not authorize the use of this system to tran… | 23 Sep 2026 6h ago |
| 587 tcp / tcp | smtp-submission | Exim 4.100 |
| TLSv1.3certificate
| open | 220-kush.mysecurecloudserver.com ESMTP Exim 4.100 #2 Thu, 24 Sep 2026 00:53:38 +0545 220-We do not authorize the use of this system to tran… | 23 Sep 2026 6h ago |
| 993 tcp / tcp | imaps | Dovecot |
| TLSv1.3certificate
| open | * OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready. | 23 Sep 2026 6h ago |
| 995 tcp / tcp | pop3s | Dovecot |
| TLSv1.3certificate
| open | +OK Dovecot ready. | 23 Sep 2026 6h ago |
| 3306 tcp / tcp | mysql | MySQL 10.11.19 |
| not negotiated | open | Z 5.5.5-10.11.19-MariaDB�= Xl5cuA"(����?E{^DvIFeK&zmysql_native_password | 23 Sep 2026 6h ago |
| 8443 tcp / tcp | https-alt | not identified | none detected | not negotiated | open | no banner captured | 23 Sep 2026 6h ago |
| Observed at | Source | Collector | Confidence | Changed | State | Content hash |
|---|---|---|---|---|---|---|
| 23 Sep 2026 19:09 UTC | fingerprint | fingerprint-1 | high | unchanged | {"services":{"21/tcp":{"state":"open","product":"Pure-FTPd","version":"","cert_sha256":"354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b","tls_… | e2503f9cd20c3b7e4e9b3de08b24b1a8233416c… |
| 23 Sep 2026 13:10 UTC | fingerprint | fingerprint-1 | high | unchanged | {"services":{"21/tcp":{"state":"open","product":"Pure-FTPd","version":"","cert_sha256":"354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b","tls_… | 94531461a3710f045a00f7508c32ab9bde4ef54… |
| 23 Sep 2026 08:31 UTC | fingerprint | fingerprint-1 | high | unchanged | {"services":{"21/tcp":{"state":"open","product":"Pure-FTPd","version":"","cert_sha256":"354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b","tls_… | b685e95a3f073c0a6bcae5208350a12f3505611… |
| 23 Sep 2026 06:02 UTC | fingerprint | fingerprint-1 | high | unchanged | {"services":{"21/tcp":{"state":"open","product":"Pure-FTPd","version":"","cert_sha256":"354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b","tls_… | 2186f0dc55f7bba3603dd576a10b950cad6a664… |
| 23 Sep 2026 00:02 UTC | fingerprint | fingerprint-1 | high | unchanged | {"services":{"21/tcp":{"state":"open","product":"Pure-FTPd","version":"","cert_sha256":"354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b","tls_… | 2eb7dab1c492935a871c701fddcddb8eaca1b90… |
| 22 Sep 2026 19:34 UTC | fingerprint | fingerprint-1 | high | changed | {"services":{"21/tcp":{"state":"open","product":"Pure-FTPd","version":"","cert_sha256":"354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b","tls_… | 5eb10c3d3376d80b14afa59b00e19df13eb4780… |
| 22 Sep 2026 17:35 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"kush.mysecurecloudserver.com"} | e1c397e49ec438212ace57081be7c9bf74aeb57… |
| 22 Sep 2026 12:18 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"kush.mysecurecloudserver.com"} | 07a06c3e67c47c3e4c7e5cc048990c3c10c2b9e… |
| 22 Sep 2026 11:37 UTC | fingerprint | fingerprint-1 | high | changed | {"reverse_dns":"kush.mysecurecloudserver.com"} | f5a5ec28eba0df06acc3ceff009b6706a80b96f… |
| Detected at | Type | Field | Previous | Current | Significance | Confidence |
|---|---|---|---|---|---|---|
| 22 Sep 2026 19:34 UTC | TECHNOLOGY CHANGED | — | — | dovecot, exim, lets-encrypt, mysql, openssh, php, pure-ftpd | low | unknown |
| 22 Sep 2026 19:34 UTC | NEW SERVICE | service:995/tcp | — | Dovecot / TLSv1.3 | low | unknown |
| 22 Sep 2026 19:34 UTC | NEW SERVICE | service:993/tcp | — | Dovecot / TLSv1.3 | low | unknown |
| 22 Sep 2026 19:34 UTC | NEW SERVICE | service:8443/tcp | — | https-alt | low | unknown |
| 22 Sep 2026 19:34 UTC | NEW SERVICE | service:80/tcp | — | http | low | unknown |
| 22 Sep 2026 19:34 UTC | NEW SERVICE | service:587/tcp | — | Exim 4.100 / TLSv1.3 | low | unknown |
| 22 Sep 2026 19:34 UTC | NEW SERVICE | service:53/tcp | — | dns | low | unknown |
| 22 Sep 2026 19:34 UTC | NEW SERVICE | service:465/tcp | — | Exim 4.100 / TLSv1.3 | low | unknown |
| 22 Sep 2026 19:34 UTC | NEW SERVICE | service:443/tcp | — | PHP 7.2.34 / TLSv1.3 | low | unknown |
| 22 Sep 2026 19:34 UTC | NEW SERVICE | service:3306/tcp | — | MySQL 10.11.19 | low | unknown |
| 22 Sep 2026 19:34 UTC | NEW SERVICE | service:22/tcp | — | OpenSSH 9.9 | low | unknown |
| 22 Sep 2026 19:34 UTC | NEW SERVICE | service:21/tcp | — | Pure-FTPd / TLSv1.3 | low | unknown |
| 22 Sep 2026 19:34 UTC | NEW SERVICE | service:143/tcp | — | Dovecot / TLSv1.3 | low | unknown |
| 22 Sep 2026 19:34 UTC | NEW SERVICE | service:110/tcp | — | Dovecot / TLSv1.3 | low | unknown |
| 22 Sep 2026 11:37 UTC | NEW ASSET | — | — | asset with no observed open endpoints | low | unknown |
10 matches on this asset, each one unverified. Treat these as leads for manual review, never as findings.
| Identifier | Severity | CVSS | Product / version | Status | Match confidence | Evidence | Detected |
|---|---|---|---|---|---|---|---|
CVE-2026-94057 Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing. | medium | 4.0 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2026-94056 Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory. | high | 7.5 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2026-94055 Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free. | low | 3.7 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2026-94054 Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write. | high | 7.0 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2020-7070 In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with pref… | medium | 4.3 | PHP 7.2.34 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"PHP 7.2.34\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2020-7069 In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually use… | medium | 5.4 | PHP 7.2.34 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"PHP 7.2.34\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2026-94057 Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing. | medium | 4.0 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2026-94056 Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory. | high | 7.5 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2026-94055 Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free. | low | 3.7 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2026-94054 Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write. | high | 7.0 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
| Field | Previous | Current | Reading |
|---|---|---|---|
| reverse_dns | kush.mysecurecloudserver.com | kush.mysecurecloudserver.com | unchanged |
| services.110/tcp.cert_sha256 | 354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b | 354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b | unchanged |
| services.110/tcp.product | Dovecot | Dovecot | unchanged |
| services.110/tcp.service_type | pop3 | pop3 | unchanged |
| services.110/tcp.state | open | open | unchanged |
| services.110/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.110/tcp.version | — | — | unchanged |
| services.143/tcp.cert_sha256 | 354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b | 354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b | unchanged |
| services.143/tcp.product | Dovecot | Dovecot | unchanged |
| services.143/tcp.service_type | imap | imap | unchanged |
| services.143/tcp.state | open | open | unchanged |
| services.143/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.143/tcp.version | — | — | unchanged |
| services.21/tcp.cert_sha256 | 354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b | 354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b | unchanged |
| services.21/tcp.product | Pure-FTPd | Pure-FTPd | unchanged |
| services.21/tcp.service_type | ftp | ftp | unchanged |
| services.21/tcp.state | open | open | unchanged |
| services.21/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.21/tcp.version | — | — | unchanged |
| services.22/tcp.cert_sha256 | — | — | unchanged |
| services.22/tcp.product | OpenSSH | OpenSSH | unchanged |
| services.22/tcp.service_type | ssh | ssh | unchanged |
| services.22/tcp.state | open | open | unchanged |
| services.22/tcp.tls_version | — | — | unchanged |
| services.22/tcp.version | 9.9 | 9.9 | unchanged |
| services.3306/tcp.cert_sha256 | — | — | unchanged |
| services.3306/tcp.product | MySQL | MySQL | unchanged |
| services.3306/tcp.service_type | mysql | mysql | unchanged |
| services.3306/tcp.state | open | open | unchanged |
| services.3306/tcp.tls_version | — | — | unchanged |
| services.3306/tcp.version | 10.11.19 | 10.11.19 | unchanged |
| services.443/tcp.cert_sha256 | fb8ea122541274e3bc24ceb03c71d36c1f7e6f2363cc860d1a9065e5beaade83 | fb8ea122541274e3bc24ceb03c71d36c1f7e6f2363cc860d1a9065e5beaade83 | unchanged |
| services.443/tcp.product | PHP | PHP | unchanged |
| services.443/tcp.service_type | https | https | unchanged |
| services.443/tcp.state | open | open | unchanged |
| services.443/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.443/tcp.version | 7.2.34 | 7.2.34 | unchanged |
| services.465/tcp.cert_sha256 | 354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b | 354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b | unchanged |
| services.465/tcp.product | Exim | Exim | unchanged |
| services.465/tcp.service_type | smtps | smtps | unchanged |
| services.465/tcp.state | open | open | unchanged |
| services.465/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.465/tcp.version | 4.100 | 4.100 | unchanged |
| services.53/tcp.cert_sha256 | — | — | unchanged |
| services.53/tcp.product | — | — | unchanged |
| services.53/tcp.service_type | dns | dns | unchanged |
| services.53/tcp.state | open | open | unchanged |
| services.53/tcp.tls_version | — | — | unchanged |
| services.53/tcp.version | — | — | unchanged |
| services.587/tcp.cert_sha256 | 354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b | 354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b | unchanged |
| services.587/tcp.product | Exim | Exim | unchanged |
| services.587/tcp.service_type | smtp-submission | smtp-submission | unchanged |
| services.587/tcp.state | open | open | unchanged |
| services.587/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.587/tcp.version | 4.100 | 4.100 | unchanged |
| services.80/tcp.cert_sha256 | — | — | unchanged |
| services.80/tcp.product | — | — | unchanged |
| services.80/tcp.service_type | http | http | unchanged |
| services.80/tcp.state | open | open | unchanged |
| services.80/tcp.tls_version | — | — | unchanged |
| services.80/tcp.version | — | — | unchanged |
| services.8443/tcp.cert_sha256 | — | — | unchanged |
| services.8443/tcp.product | — | — | unchanged |
| services.8443/tcp.service_type | https-alt | https-alt | unchanged |
| services.8443/tcp.state | open | open | unchanged |
| services.8443/tcp.tls_version | — | — | unchanged |
| services.8443/tcp.version | — | — | unchanged |
| services.993/tcp.cert_sha256 | 354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b | 354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b | unchanged |
| services.993/tcp.product | Dovecot | Dovecot | unchanged |
| services.993/tcp.service_type | imaps | imaps | unchanged |
| services.993/tcp.state | open | open | unchanged |
| services.993/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.993/tcp.version | — | — | unchanged |
| services.995/tcp.cert_sha256 | 354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b | 354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b | unchanged |
| services.995/tcp.product | Dovecot | Dovecot | unchanged |
| services.995/tcp.service_type | pop3s | pop3s | unchanged |
| services.995/tcp.state | open | open | unchanged |
| services.995/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.995/tcp.version | — | — | unchanged |
| technologies | ["dovecot","exim","lets-encrypt","mysql","openssh","php","pure-ftpd"] | ["dovecot","exim","lets-encrypt","mysql","openssh","php","pure-ftpd"] | unchanged |
{
"id": "c939288af2db1af318e044b07626ca30a",
"type": "ipv4",
"value": "110.34.3.165",
"hostname": "ads.com.np",
"reverseDns": "kush.mysecurecloudserver.com",
"asn": {
"number": 4007,
"name": "SUBISU-CABLENET-AS-AP - Subisu Cablenet (Pvt) Ltd, Baluwatar, Kathmandu, Nepal"
},
"organization": {
"id": "c2b1f62bdc5a33a0c2f97cc3d4861dcd6",
"name": "SUBISU-CABLENET-AS-AP - Subisu Cablenet (Pvt) Ltd, Baluwatar, Kathmandu, Nepal"
},
"location": {
"country": "NP",
"city": "Kathmandu",
"province": "Bagmati Province",
"district": "",
"confidence": "low",
"source": "ip-api.com"
},
"scopeStatus": "in_scope",
"priority": "NORMAL",
"firstSeen": "2026-09-22T08:55:47.697Z",
"lastSeen": "2026-09-23T19:09:01.949Z",
"observationCount": 9,
"openServices": 13,
"serviceCount": 13,
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"mysql",
"openssh",
"php",
"pure-ftpd"
],
"vulnerabilityMatches": [
{
"id": "ce04b162eccec5eb7d66f6099c8b8a1e0",
"cve": "CVE-2026-94057",
"severity": "medium",
"cvssScore": 4,
"summary": "Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T22:05:08.357Z",
"assetValue": "110.34.3.165",
"serviceId": "ca68808988d0697067a247f0d879da124",
"port": 587,
"technologySlug": "exim"
},
{
"id": "c879e5af00186d83a9ed7ea6e6bf57768",
"cve": "CVE-2026-94056",
"severity": "high",
"cvssScore": 7.5,
"summary": "Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T22:05:08.354Z",
"assetValue": "110.34.3.165",
"serviceId": "ca68808988d0697067a247f0d879da124",
"port": 587,
"technologySlug": "exim"
},
{
"id": "cb85ac72e11256ea6eda2948f43383227",
"cve": "CVE-2026-94055",
"severity": "low",
"cvssScore": 3.7,
"summary": "Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T22:05:08.351Z",
"assetValue": "110.34.3.165",
"serviceId": "ca68808988d0697067a247f0d879da124",
"port": 587,
"technologySlug": "exim"
},
{
"id": "c3a196fb6cc8a796808fc4e8aeee15baa",
"cve": "CVE-2026-94054",
"severity": "high",
"cvssScore": 7,
"summary": "Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T22:05:08.348Z",
"assetValue": "110.34.3.165",
"serviceId": "ca68808988d0697067a247f0d879da124",
"port": 587,
"technologySlug": "exim"
},
{
"id": "c4eda24b24f41c8337d32da2d11a47130",
"cve": "CVE-2020-7070",
"severity": "medium",
"cvssScore": 4.3,
"summary": "In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. See also CVE-2020-8184 for more information.",
"product": "PHP",
"version": "7.2.34",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"PHP 7.2.34\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"PHP\",\"observed_version\":\"7.2.34\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T21:34:25.821Z",
"assetValue": "110.34.3.165",
"serviceId": "ceb900cd972f4c2707b8817c4c58413da",
"port": 443,
"technologySlug": "php"
},
{
"id": "c49a8c2dc3ef93ac921fd01fa427f585a",
"cve": "CVE-2020-7069",
"severity": "medium",
"cvssScore": 5.4,
"summary": "In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data.",
"product": "PHP",
"version": "7.2.34",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"PHP 7.2.34\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"PHP\",\"observed_version\":\"7.2.34\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T21:34:25.817Z",
"assetValue": "110.34.3.165",
"serviceId": "ceb900cd972f4c2707b8817c4c58413da",
"port": 443,
"technologySlug": "php"
},
{
"id": "c6edc378d6aebd46b85b556314fdb632a",
"cve": "CVE-2026-94057",
"severity": "medium",
"cvssScore": 4,
"summary": "Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T20:05:14.581Z",
"assetValue": "110.34.3.165",
"serviceId": "ce5a25baff7f99f3803183bf2ce941080",
"port": 465,
"technologySlug": "exim"
},
{
"id": "c308a9d67f0f61e06ae6bbaeb8bdfeefd",
"cve": "CVE-2026-94056",
"severity": "high",
"cvssScore": 7.5,
"summary": "Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T20:05:14.578Z",
"assetValue": "110.34.3.165",
"serviceId": "ce5a25baff7f99f3803183bf2ce941080",
"port": 465,
"technologySlug": "exim"
},
{
"id": "c25ff75a409db02949a162d88d27b9a45",
"cve": "CVE-2026-94055",
"severity": "low",
"cvssScore": 3.7,
"summary": "Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T20:05:14.575Z",
"assetValue": "110.34.3.165",
"serviceId": "ce5a25baff7f99f3803183bf2ce941080",
"port": 465,
"technologySlug": "exim"
},
{
"id": "c8e05740fdebe24260bb3499112c6a8af",
"cve": "CVE-2026-94054",
"severity": "high",
"cvssScore": 7,
"summary": "Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T20:05:14.572Z",
"assetValue": "110.34.3.165",
"serviceId": "ce5a25baff7f99f3803183bf2ce941080",
"port": 465,
"technologySlug": "exim"
}
],
"network": {
"id": "ccdb4e44672985d058303518c58418d32",
"prefix": "110.34.3.0/24",
"ipVersion": 4
},
"services": [
{
"id": "cae1ea9752e6d0f93e2c418a8588fd2f3",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"port": 21,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "ftp",
"product": "Pure-FTPd",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": "220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time is now 00:53. Server port: 21. 220-This is a private system - No anonymous login 220-IPv6 connections are also welcome on this server. 220 You will be disconnected after 15 minutes of inactivity.",
"state": "open",
"firstSeen": "2026-09-22T19:34:59.283Z",
"lastSeen": "2026-09-23T19:09:01.835Z",
"observationCount": 0,
"technologies": [
{
"slug": "pure-ftpd",
"name": "Pure-FTPd",
"category": "ftp-server",
"vendor": "Pure-FTPd",
"version": null,
"confidence": "high",
"evidence": "FTP banner: 220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time ...",
"detectedAt": "2026-09-22T19:34:59.286Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR2,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T19:34:59.288Z"
}
],
"certificate": {
"id": "c3036956a928931937480c150da21f23f",
"sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"subject": "CN=kush.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "kush.mysecurecloudserver.com",
"notBefore": "2026-08-26T03:32:50.000Z",
"notAfter": "2026-11-24T03:32:49.000Z",
"sans": [
"kush.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "c2b468afbc6d174ac658074b91501f096",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"port": 22,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "ssh",
"product": "OpenSSH",
"productVersion": "9.9",
"tlsVersion": null,
"banner": "SSH-2.0-OpenSSH_9.9",
"state": "open",
"firstSeen": "2026-09-22T19:34:59.291Z",
"lastSeen": "2026-09-23T19:09:01.846Z",
"observationCount": 0,
"technologies": [
{
"slug": "openssh",
"name": "OpenSSH",
"category": "remote-access",
"vendor": "OpenBSD Project",
"version": "9.9",
"confidence": "high",
"evidence": "SSH banner: SSH-2.0-OpenSSH_9.9",
"detectedAt": "2026-09-23T19:09:01.849Z"
}
],
"certificate": null
},
{
"id": "c1ac46f14c0f394c76ab039f0a5b1d5ca",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"port": 53,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "dns",
"product": null,
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T19:34:59.297Z",
"lastSeen": "2026-09-23T19:09:01.853Z",
"observationCount": 0,
"technologies": [],
"certificate": null
},
{
"id": "c277c66db25c52a4e0f6cff8985c0f5fd",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"port": 80,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "http",
"product": null,
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T19:34:59.300Z",
"lastSeen": "2026-09-23T19:09:01.855Z",
"observationCount": 0,
"technologies": [],
"certificate": null
},
{
"id": "c8aa4f5ac71aaf42a9d87e8ba0456c675",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"port": 110,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "pop3",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": "+OK Dovecot ready.",
"state": "open",
"firstSeen": "2026-09-22T19:34:59.303Z",
"lastSeen": "2026-09-23T19:09:01.859Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: +OK Dovecot ready.",
"detectedAt": "2026-09-22T19:34:59.306Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR2,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T19:34:59.309Z"
}
],
"certificate": {
"id": "c3036956a928931937480c150da21f23f",
"sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"subject": "CN=kush.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "kush.mysecurecloudserver.com",
"notBefore": "2026-08-26T03:32:50.000Z",
"notAfter": "2026-11-24T03:32:49.000Z",
"sans": [
"kush.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "c8af92608c6c44fc26af317986f41c1ec",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"port": 143,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "imap",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": "* OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.",
"state": "open",
"firstSeen": "2026-09-22T19:34:59.313Z",
"lastSeen": "2026-09-23T19:09:01.868Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: * OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready...",
"detectedAt": "2026-09-22T19:34:59.315Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR2,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T19:34:59.318Z"
}
],
"certificate": {
"id": "c3036956a928931937480c150da21f23f",
"sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"subject": "CN=kush.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "kush.mysecurecloudserver.com",
"notBefore": "2026-08-26T03:32:50.000Z",
"notAfter": "2026-11-24T03:32:49.000Z",
"sans": [
"kush.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "ceb900cd972f4c2707b8817c4c58413da",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"port": 443,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "https",
"product": "PHP",
"productVersion": "7.2.34",
"tlsVersion": "TLSv1.3",
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T19:34:59.321Z",
"lastSeen": "2026-09-23T19:09:01.885Z",
"observationCount": 0,
"technologies": [
{
"slug": "php",
"name": "PHP",
"category": "language",
"vendor": "PHP Group",
"version": "7.2.34",
"confidence": "high",
"evidence": "X-Powered-By: PHP/7.2.34",
"detectedAt": "2026-09-23T19:09:01.888Z"
}
],
"certificate": {
"id": "c11faaafb39d3e6b4350f08c3eb02fc28",
"sha256": "fb8ea122541274e3bc24ceb03c71d36c1f7e6f2363cc860d1a9065e5beaade83",
"subject": "CN=nestyhesty.com",
"issuer": "CN=nestyhesty.com",
"commonName": "nestyhesty.com",
"notBefore": "2026-04-30T07:21:14.000Z",
"notAfter": "2027-04-30T07:21:14.000Z",
"sans": [
"nestyhesty.com",
"www.nestyhesty.com",
"mail.nestyhesty.com",
"cpanel.nestyhesty.com",
"webmail.nestyhesty.com",
"webdisk.nestyhesty.com",
"cpcontacts.nestyhesty.com",
"cpcalendars.nestyhesty.com",
"autodiscover.nestyhesty.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "ce5a25baff7f99f3803183bf2ce941080",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"port": 465,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "smtps",
"product": "Exim",
"productVersion": "4.100",
"tlsVersion": "TLSv1.3",
"banner": "220-kush.mysecurecloudserver.com ESMTP Exim 4.100 #2 Thu, 24 Sep 2026 00:53:37 +0545 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.",
"state": "open",
"firstSeen": "2026-09-22T19:34:59.329Z",
"lastSeen": "2026-09-23T19:09:01.894Z",
"observationCount": 0,
"technologies": [
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR2,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T19:34:59.337Z"
},
{
"slug": "exim",
"name": "Exim",
"category": "mail-server",
"vendor": "Exim Project",
"version": "4.100",
"confidence": "high",
"evidence": "SMTP banner: 220-kush.mysecurecloudserver.com ESMTP Exim 4.100 #2 Thu, 24 Sep 2026 00:53:37 +0545 220-We do not authorize the use o...",
"detectedAt": "2026-09-23T19:09:01.898Z"
}
],
"certificate": {
"id": "c3036956a928931937480c150da21f23f",
"sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"subject": "CN=kush.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "kush.mysecurecloudserver.com",
"notBefore": "2026-08-26T03:32:50.000Z",
"notAfter": "2026-11-24T03:32:49.000Z",
"sans": [
"kush.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "ca68808988d0697067a247f0d879da124",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"port": 587,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "smtp-submission",
"product": "Exim",
"productVersion": "4.100",
"tlsVersion": "TLSv1.3",
"banner": "220-kush.mysecurecloudserver.com ESMTP Exim 4.100 #2 Thu, 24 Sep 2026 00:53:38 +0545 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.",
"state": "open",
"firstSeen": "2026-09-22T19:34:59.346Z",
"lastSeen": "2026-09-23T19:09:01.905Z",
"observationCount": 0,
"technologies": [
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR2,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T19:34:59.355Z"
},
{
"slug": "exim",
"name": "Exim",
"category": "mail-server",
"vendor": "Exim Project",
"version": "4.100",
"confidence": "high",
"evidence": "SMTP banner: 220-kush.mysecurecloudserver.com ESMTP Exim 4.100 #2 Thu, 24 Sep 2026 00:53:38 +0545 220-We do not authorize the use o...",
"detectedAt": "2026-09-23T19:09:01.908Z"
}
],
"certificate": {
"id": "c3036956a928931937480c150da21f23f",
"sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"subject": "CN=kush.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "kush.mysecurecloudserver.com",
"notBefore": "2026-08-26T03:32:50.000Z",
"notAfter": "2026-11-24T03:32:49.000Z",
"sans": [
"kush.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "ce99c457d8a7e9abe0177ee0f3a482323",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"port": 993,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "imaps",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": "* OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.",
"state": "open",
"firstSeen": "2026-09-22T19:34:59.359Z",
"lastSeen": "2026-09-23T19:09:01.915Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: * OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.",
"detectedAt": "2026-09-22T19:34:59.362Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR2,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T19:34:59.365Z"
}
],
"certificate": {
"id": "c3036956a928931937480c150da21f23f",
"sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"subject": "CN=kush.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "kush.mysecurecloudserver.com",
"notBefore": "2026-08-26T03:32:50.000Z",
"notAfter": "2026-11-24T03:32:49.000Z",
"sans": [
"kush.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "c8ff8d556881aa0b94e0af1e3b2749b56",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"port": 995,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "pop3s",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": "+OK Dovecot ready.",
"state": "open",
"firstSeen": "2026-09-22T19:34:59.370Z",
"lastSeen": "2026-09-23T19:09:01.925Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: +OK Dovecot ready.",
"detectedAt": "2026-09-22T19:34:59.372Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR2,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T19:34:59.374Z"
}
],
"certificate": {
"id": "c3036956a928931937480c150da21f23f",
"sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"subject": "CN=kush.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "kush.mysecurecloudserver.com",
"notBefore": "2026-08-26T03:32:50.000Z",
"notAfter": "2026-11-24T03:32:49.000Z",
"sans": [
"kush.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "c6b54fd10729ae0130b08e4f35d00789a",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"port": 3306,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "mysql",
"product": "MySQL",
"productVersion": "10.11.19",
"tlsVersion": null,
"banner": "Z 5.5.5-10.11.19-MariaDB�= Xl5cuA\"(����?E{^DvIFeK&zmysql_native_password",
"state": "open",
"firstSeen": "2026-09-22T19:34:59.377Z",
"lastSeen": "2026-09-23T19:09:01.933Z",
"observationCount": 0,
"technologies": [
{
"slug": "mysql",
"name": "MySQL",
"category": "database",
"vendor": "Oracle",
"version": "10.11.19",
"confidence": "high",
"evidence": "MySQL handshake: Z 5.5.5-10.11.19-MariaDB�= Xl5cuA\"(����?E{^DvIFeK&zmysql_native_password",
"detectedAt": "2026-09-23T19:09:01.935Z"
}
],
"certificate": null
},
{
"id": "c13795bb981c558cf3aa3d2f6d345ebf0",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"port": 8443,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "https-alt",
"product": null,
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T19:34:59.385Z",
"lastSeen": "2026-09-23T19:09:01.939Z",
"observationCount": 0,
"technologies": [],
"certificate": null
}
],
"certificates": [
{
"id": "c3036956a928931937480c150da21f23f",
"sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"subject": "CN=kush.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "kush.mysecurecloudserver.com",
"notBefore": "2026-08-26T03:32:50.000Z",
"notAfter": "2026-11-24T03:32:49.000Z",
"sans": [
"kush.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "c3036956a928931937480c150da21f23f",
"sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"subject": "CN=kush.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "kush.mysecurecloudserver.com",
"notBefore": "2026-08-26T03:32:50.000Z",
"notAfter": "2026-11-24T03:32:49.000Z",
"sans": [
"kush.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "c3036956a928931937480c150da21f23f",
"sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"subject": "CN=kush.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "kush.mysecurecloudserver.com",
"notBefore": "2026-08-26T03:32:50.000Z",
"notAfter": "2026-11-24T03:32:49.000Z",
"sans": [
"kush.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "c11faaafb39d3e6b4350f08c3eb02fc28",
"sha256": "fb8ea122541274e3bc24ceb03c71d36c1f7e6f2363cc860d1a9065e5beaade83",
"subject": "CN=nestyhesty.com",
"issuer": "CN=nestyhesty.com",
"commonName": "nestyhesty.com",
"notBefore": "2026-04-30T07:21:14.000Z",
"notAfter": "2027-04-30T07:21:14.000Z",
"sans": [
"nestyhesty.com",
"www.nestyhesty.com",
"mail.nestyhesty.com",
"cpanel.nestyhesty.com",
"webmail.nestyhesty.com",
"webdisk.nestyhesty.com",
"cpcontacts.nestyhesty.com",
"cpcalendars.nestyhesty.com",
"autodiscover.nestyhesty.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "c3036956a928931937480c150da21f23f",
"sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"subject": "CN=kush.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "kush.mysecurecloudserver.com",
"notBefore": "2026-08-26T03:32:50.000Z",
"notAfter": "2026-11-24T03:32:49.000Z",
"sans": [
"kush.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "c3036956a928931937480c150da21f23f",
"sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"subject": "CN=kush.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "kush.mysecurecloudserver.com",
"notBefore": "2026-08-26T03:32:50.000Z",
"notAfter": "2026-11-24T03:32:49.000Z",
"sans": [
"kush.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "c3036956a928931937480c150da21f23f",
"sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"subject": "CN=kush.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "kush.mysecurecloudserver.com",
"notBefore": "2026-08-26T03:32:50.000Z",
"notAfter": "2026-11-24T03:32:49.000Z",
"sans": [
"kush.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "c3036956a928931937480c150da21f23f",
"sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"subject": "CN=kush.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "kush.mysecurecloudserver.com",
"notBefore": "2026-08-26T03:32:50.000Z",
"notAfter": "2026-11-24T03:32:49.000Z",
"sans": [
"kush.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
],
"recentObservations": [
{
"id": "c75268d5f2bca5f28f36af84e7ebcd3c7",
"observedAt": "2026-09-23T19:09:01.944Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.9",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "PHP",
"version": "7.2.34",
"cert_sha256": "fb8ea122541274e3bc24ceb03c71d36c1f7e6f2363cc860d1a9065e5beaade83",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
},
"3306/tcp": {
"state": "open",
"product": "MySQL",
"version": "10.11.19",
"cert_sha256": "",
"tls_version": "",
"service_type": "mysql"
},
"8443/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "https-alt"
}
},
"reverse_dns": "kush.mysecurecloudserver.com",
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"mysql",
"openssh",
"php",
"pure-ftpd"
]
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
465,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 13,
"reachable": true,
"reverse_dns": "kush.mysecurecloudserver.com",
"ports_probed": 26,
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"mysql",
"openssh",
"php",
"pure-ftpd"
],
"open_services": 13,
"probe_duration": 30127
},
"contentHash": "e2503f9cd20c3b7e4e9b3de08b24b1a8233416cad45cb30c8d08cc09b16bbd06",
"changed": false
},
{
"id": "cdfab89dc64f4f4f9bc8408f4dae4214e",
"observedAt": "2026-09-23T13:10:19.639Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.9",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "PHP",
"version": "7.2.34",
"cert_sha256": "fb8ea122541274e3bc24ceb03c71d36c1f7e6f2363cc860d1a9065e5beaade83",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
},
"3306/tcp": {
"state": "open",
"product": "MySQL",
"version": "10.11.19",
"cert_sha256": "",
"tls_version": "",
"service_type": "mysql"
},
"8443/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "https-alt"
}
},
"reverse_dns": "kush.mysecurecloudserver.com",
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"mysql",
"openssh",
"php",
"pure-ftpd"
]
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
465,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 13,
"reachable": true,
"reverse_dns": "kush.mysecurecloudserver.com",
"ports_probed": 26,
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"mysql",
"openssh",
"php",
"pure-ftpd"
],
"open_services": 13,
"probe_duration": 30083
},
"contentHash": "94531461a3710f045a00f7508c32ab9bde4ef54d7f1eac38c8401466d8b6a0ff",
"changed": false
},
{
"id": "c34c8148c2f00aab37517d57dcab02d77",
"observedAt": "2026-09-23T08:31:56.848Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.9",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "PHP",
"version": "7.2.34",
"cert_sha256": "fb8ea122541274e3bc24ceb03c71d36c1f7e6f2363cc860d1a9065e5beaade83",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
},
"3306/tcp": {
"state": "open",
"product": "MySQL",
"version": "10.11.19",
"cert_sha256": "",
"tls_version": "",
"service_type": "mysql"
},
"8443/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "https-alt"
}
},
"reverse_dns": "kush.mysecurecloudserver.com",
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"mysql",
"openssh",
"php",
"pure-ftpd"
]
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
465,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 13,
"reachable": true,
"reverse_dns": "kush.mysecurecloudserver.com",
"ports_probed": 26,
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"mysql",
"openssh",
"php",
"pure-ftpd"
],
"open_services": 13,
"probe_duration": 30002
},
"contentHash": "b685e95a3f073c0a6bcae5208350a12f3505611728d3144e86a63178f5fbe507",
"changed": false
},
{
"id": "c21eec606fa6c960defe098a661263ca4",
"observedAt": "2026-09-23T06:02:10.032Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.9",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "PHP",
"version": "7.2.34",
"cert_sha256": "fb8ea122541274e3bc24ceb03c71d36c1f7e6f2363cc860d1a9065e5beaade83",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
},
"3306/tcp": {
"state": "open",
"product": "MySQL",
"version": "10.11.19",
"cert_sha256": "",
"tls_version": "",
"service_type": "mysql"
},
"8443/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "https-alt"
}
},
"reverse_dns": "kush.mysecurecloudserver.com",
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"mysql",
"openssh",
"php",
"pure-ftpd"
]
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
465,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 13,
"reachable": true,
"reverse_dns": "kush.mysecurecloudserver.com",
"ports_probed": 26,
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"mysql",
"openssh",
"php",
"pure-ftpd"
],
"open_services": 13,
"probe_duration": 29003
},
"contentHash": "2186f0dc55f7bba3603dd576a10b950cad6a66417cb133c96bdbeb57893b54db",
"changed": false
},
{
"id": "c2c439a10a7cd9e2b98dea5e618004c39",
"observedAt": "2026-09-23T00:02:24.944Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.9",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "PHP",
"version": "7.2.34",
"cert_sha256": "fb8ea122541274e3bc24ceb03c71d36c1f7e6f2363cc860d1a9065e5beaade83",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
},
"3306/tcp": {
"state": "open",
"product": "MySQL",
"version": "10.11.19",
"cert_sha256": "",
"tls_version": "",
"service_type": "mysql"
},
"8443/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "https-alt"
}
},
"reverse_dns": "kush.mysecurecloudserver.com",
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"mysql",
"openssh",
"php",
"pure-ftpd"
]
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
465,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 13,
"reachable": true,
"reverse_dns": "kush.mysecurecloudserver.com",
"ports_probed": 26,
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"mysql",
"openssh",
"php",
"pure-ftpd"
],
"open_services": 13,
"probe_duration": 26002
},
"contentHash": "2eb7dab1c492935a871c701fddcddb8eaca1b900b9602063afe66a1922807bf0",
"changed": false
},
{
"id": "ca8100a56be9c3bb791ef92d2507af94a",
"observedAt": "2026-09-22T19:34:59.388Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.9",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "PHP",
"version": "7.2.34",
"cert_sha256": "fb8ea122541274e3bc24ceb03c71d36c1f7e6f2363cc860d1a9065e5beaade83",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
},
"3306/tcp": {
"state": "open",
"product": "MySQL",
"version": "10.11.19",
"cert_sha256": "",
"tls_version": "",
"service_type": "mysql"
},
"8443/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "https-alt"
}
},
"reverse_dns": "kush.mysecurecloudserver.com",
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"mysql",
"openssh",
"php",
"pure-ftpd"
]
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
465,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 13,
"reachable": true,
"reverse_dns": "kush.mysecurecloudserver.com",
"ports_probed": 26,
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"mysql",
"openssh",
"php",
"pure-ftpd"
],
"open_services": 13,
"probe_duration": 48259
},
"contentHash": "5eb10c3d3376d80b14afa59b00e19df13eb47800e2153fbaef6ad0f5f5822c9d",
"changed": true
},
{
"id": "c96fdc05699548cc1081dbaa838792dd0",
"observedAt": "2026-09-22T17:35:05.675Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "kush.mysecurecloudserver.com"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
465,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "kush.mysecurecloudserver.com",
"ports_probed": 26,
"technologies": null,
"open_services": 0,
"probe_duration": 78
},
"contentHash": "e1c397e49ec438212ace57081be7c9bf74aeb575828d8d9ee65162ecbca15a9d",
"changed": false
},
{
"id": "c9bd0c57f538895b01c99c6a0dad8d424",
"observedAt": "2026-09-22T12:18:27.389Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "kush.mysecurecloudserver.com"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "kush.mysecurecloudserver.com",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 189
},
"contentHash": "07a06c3e67c47c3e4c7e5cc048990c3c10c2b9e57c0a3694ed414726650b0c2b",
"changed": false
},
{
"id": "c9dbf0360d1fdb6437cc3f0475306df67",
"observedAt": "2026-09-22T11:37:30.487Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "kush.mysecurecloudserver.com"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "kush.mysecurecloudserver.com",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 67
},
"contentHash": "f5a5ec28eba0df06acc3ceff009b6706a80b96fdfeda8ff64f11b9337e0dafa6",
"changed": true
}
],
"recentChanges": [
{
"id": "cfb4bb0baa459118d0402a814743e9972",
"changeType": "TECHNOLOGY_CHANGED",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"field": null,
"previousValue": null,
"currentValue": "dovecot, exim, lets-encrypt, mysql, openssh, php, pure-ftpd",
"detectedAt": "2026-09-22T19:34:59.414Z",
"significance": "low",
"severity": "info",
"confidence": null,
"detail": "technology detected: dovecot, exim, lets-encrypt, mysql, openssh, php, pure-ftpd",
"serviceId": null
},
{
"id": "c831ec4a40fa649b3d0cef2e6e700d750",
"changeType": "NEW_SERVICE",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"field": "service:995/tcp",
"previousValue": null,
"currentValue": "Dovecot / TLSv1.3",
"detectedAt": "2026-09-22T19:34:59.413Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "cd9cdf756de4639164cb76f342e511cb1",
"changeType": "NEW_SERVICE",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"field": "service:993/tcp",
"previousValue": null,
"currentValue": "Dovecot / TLSv1.3",
"detectedAt": "2026-09-22T19:34:59.411Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c5d9e5aef74ca6743765f059c63386aa9",
"changeType": "NEW_SERVICE",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"field": "service:8443/tcp",
"previousValue": null,
"currentValue": "https-alt",
"detectedAt": "2026-09-22T19:34:59.409Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c068442eef5b051f33a9cdb39f9743bcb",
"changeType": "NEW_SERVICE",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"field": "service:80/tcp",
"previousValue": null,
"currentValue": "http",
"detectedAt": "2026-09-22T19:34:59.407Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c8718825b19f0d2d68aa5fff2e26bd769",
"changeType": "NEW_SERVICE",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"field": "service:587/tcp",
"previousValue": null,
"currentValue": "Exim 4.100 / TLSv1.3",
"detectedAt": "2026-09-22T19:34:59.405Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c27a09bd176a6d2c635e39536802bf407",
"changeType": "NEW_SERVICE",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"field": "service:53/tcp",
"previousValue": null,
"currentValue": "dns",
"detectedAt": "2026-09-22T19:34:59.403Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c01358943ed9449379f7def3af5c1a248",
"changeType": "NEW_SERVICE",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"field": "service:465/tcp",
"previousValue": null,
"currentValue": "Exim 4.100 / TLSv1.3",
"detectedAt": "2026-09-22T19:34:59.402Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c3512e60e83b0e7229bca230fd57c3189",
"changeType": "NEW_SERVICE",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"field": "service:443/tcp",
"previousValue": null,
"currentValue": "PHP 7.2.34 / TLSv1.3",
"detectedAt": "2026-09-22T19:34:59.400Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "cea948b7fc7dd7537d95b707114b10dcf",
"changeType": "NEW_SERVICE",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"field": "service:3306/tcp",
"previousValue": null,
"currentValue": "MySQL 10.11.19",
"detectedAt": "2026-09-22T19:34:59.398Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c4222e6b99f28e35d41c67d8c32091a9a",
"changeType": "NEW_SERVICE",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"field": "service:22/tcp",
"previousValue": null,
"currentValue": "OpenSSH 9.9",
"detectedAt": "2026-09-22T19:34:59.396Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c7a5992ab62508b1adda9ae8efe697115",
"changeType": "NEW_SERVICE",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"field": "service:21/tcp",
"previousValue": null,
"currentValue": "Pure-FTPd / TLSv1.3",
"detectedAt": "2026-09-22T19:34:59.395Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c381c4ce8c6b1b8e6872662bc9b0f98a0",
"changeType": "NEW_SERVICE",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"field": "service:143/tcp",
"previousValue": null,
"currentValue": "Dovecot / TLSv1.3",
"detectedAt": "2026-09-22T19:34:59.393Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "ca90eaeeb77bc1727ad013bd9388e71d5",
"changeType": "NEW_SERVICE",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"field": "service:110/tcp",
"previousValue": null,
"currentValue": "Dovecot / TLSv1.3",
"detectedAt": "2026-09-22T19:34:59.391Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c9d00b17aa1558c680af413ed6e71d855",
"changeType": "NEW_ASSET",
"assetId": "c939288af2db1af318e044b07626ca30a",
"assetValue": null,
"field": null,
"previousValue": null,
"currentValue": "asset with no observed open endpoints",
"detectedAt": "2026-09-22T11:37:30.489Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "asset observed for the first time",
"serviceId": null
}
],
"dnsRecords": [],
"state": {
"current": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.9",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "PHP",
"version": "7.2.34",
"cert_sha256": "fb8ea122541274e3bc24ceb03c71d36c1f7e6f2363cc860d1a9065e5beaade83",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
},
"3306/tcp": {
"state": "open",
"product": "MySQL",
"version": "10.11.19",
"cert_sha256": "",
"tls_version": "",
"service_type": "mysql"
},
"8443/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "https-alt"
}
},
"reverse_dns": "kush.mysecurecloudserver.com",
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"mysql",
"openssh",
"php",
"pure-ftpd"
]
},
"previous": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.9",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "PHP",
"version": "7.2.34",
"cert_sha256": "fb8ea122541274e3bc24ceb03c71d36c1f7e6f2363cc860d1a9065e5beaade83",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "354f76f4d1814a75360209aa6aff96d14b62d720749340986c9c9a10b695e23b",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
},
"3306/tcp": {
"state": "open",
"product": "MySQL",
"version": "10.11.19",
"cert_sha256": "",
"tls_version": "",
"service_type": "mysql"
},
"8443/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "https-alt"
}
},
"reverse_dns": "kush.mysecurecloudserver.com",
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"mysql",
"openssh",
"php",
"pure-ftpd"
]
},
"comparable": true
}
}