Reading the observatory store…
Reading the observatory store…
First seen 22 Sep 2026, last seen 23 Sep 2026 00:05 UTC (1h ago). 13 observations on record. Location is an estimate derived from registration data — the source and confidence are stated below.
| Port | Service | Product | Technologies | TLS | State | Banner | Last seen |
|---|---|---|---|---|---|---|---|
| 53 tcp / tcp | dns | not identified | none detected | not negotiated | open | no banner captured | 23 Sep 2026 1h ago |
| 80 tcp / tcp | http | Apache HTTP Server |
| not negotiated | open | no banner captured | 23 Sep 2026 1h ago |
| 110 tcp / tcp | pop3 | Dovecot |
| TLSv1.3certificate
| open | +OK Dovecot ready. | 23 Sep 2026 1h ago |
| 143 tcp / tcp | imap | Dovecot |
| TLSv1.3certificate
| open | * OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. | 23 Sep 2026 1h ago |
| 443 tcp / tcp | https | Apache HTTP Server |
| TLSv1.3certificate
| open | no banner captured | 23 Sep 2026 1h ago |
| 465 tcp / tcp | smtps | Exim 4.99.5 |
| TLSv1.3certificate
| open | 220-host.itswitch.com.np ESMTP Exim 4.99.5 #2 Wed, 23 Sep 2026 05:50:39 +0545 220-We do not authorize the use of this system to transport u… | 23 Sep 2026 1h ago |
| 587 tcp / tcp | smtp-submission | Exim 4.99.5 |
| TLSv1.3certificate
| open | 220-host.itswitch.com.np ESMTP Exim 4.99.5 #2 Wed, 23 Sep 2026 05:50:40 +0545 220-We do not authorize the use of this system to transport u… | 23 Sep 2026 1h ago |
| 993 tcp / tcp | imaps | Dovecot |
| TLSv1.3certificate
| open | * OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready. | 23 Sep 2026 1h ago |
| 995 tcp / tcp | pop3s | Dovecot |
| TLSv1.3certificate
| open | +OK Dovecot ready. | 23 Sep 2026 1h ago |
| Observed at | Source | Collector | Confidence | Changed | State | Content hash |
|---|---|---|---|---|---|---|
| 23 Sep 2026 00:05 UTC | fingerprint | fingerprint-1 | high | unchanged | {"services":{"53/tcp":{"state":"open","product":"","version":"","cert_sha256":"","tls_version":"","service_type":"dns"},"80/tcp":{"state":"open","product":"Apa… | aa795a38cbe07af2c5b92769a710cb87d721a45… |
| 22 Sep 2026 20:07 UTC | fingerprint | fingerprint-1 | high | changed | {"services":{"53/tcp":{"state":"open","product":"","version":"","cert_sha256":"","tls_version":"","service_type":"dns"},"80/tcp":{"state":"open","product":"Apa… | d3538243996c4ca6fd1d6a11b1c0b25c0da0fe9… |
| 22 Sep 2026 17:35 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"host.itswitch.us"} | 49d73b3188c4880c6f39026230191f781e5b8cb… |
| 22 Sep 2026 16:00 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"host.itswitch.us"} | 5db425179af056f6f910d2de79da1c4ae7cc0b6… |
| 22 Sep 2026 12:28 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"host.itswitch.us"} | abe2f93d7589429e375c0e3c319515bca932247… |
| 22 Sep 2026 11:38 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"host.itswitch.us"} | a0794484c06d7ab109df9d883e5fcc25bfcf633… |
| 22 Sep 2026 11:15 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"host.itswitch.us"} | 5085452f83b846b6285f799b5358acd6bb44875… |
| 22 Sep 2026 07:12 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"host.itswitch.us"} | b1ff62cc843a64bb72863b489f80eba892a3e3f… |
| 22 Sep 2026 05:27 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"host.itswitch.us"} | cb635e05bc87afb995c50eca5f1f6d9fb75a463… |
| 22 Sep 2026 05:12 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"host.itswitch.us"} | 08885c681d0ae7487d1530c5a370ee2daf6287c… |
| 22 Sep 2026 03:27 UTC | fingerprint | fingerprint-1 | high | changed | {"reverse_dns":"host.itswitch.us"} | ae4472143b83bdf68902742a72f743ea0ebb583… |
| Detected at | Type | Field | Previous | Current | Significance | Confidence |
|---|---|---|---|---|---|---|
| 22 Sep 2026 20:07 UTC | TECHNOLOGY CHANGED | — | — | apache-http-server, dovecot, exim, lets-encrypt | low | unknown |
| 22 Sep 2026 20:07 UTC | NEW SERVICE | service:995/tcp | — | Dovecot / TLSv1.3 | low | unknown |
| 22 Sep 2026 20:07 UTC | NEW SERVICE | service:993/tcp | — | Dovecot / TLSv1.3 | low | unknown |
| 22 Sep 2026 20:07 UTC | NEW SERVICE | service:80/tcp | — | Apache HTTP Server | low | unknown |
| 22 Sep 2026 20:07 UTC | NEW SERVICE | service:587/tcp | — | Exim 4.99.5 / TLSv1.3 | low | unknown |
| 22 Sep 2026 20:07 UTC | NEW SERVICE | service:53/tcp | — | dns | low | unknown |
| 22 Sep 2026 20:07 UTC | NEW SERVICE | service:465/tcp | — | Exim 4.99.5 / TLSv1.3 | low | unknown |
| 22 Sep 2026 20:07 UTC | NEW SERVICE | service:443/tcp | — | Apache HTTP Server / TLSv1.3 | low | unknown |
| 22 Sep 2026 20:07 UTC | NEW SERVICE | service:143/tcp | — | Dovecot / TLSv1.3 | low | unknown |
| 22 Sep 2026 20:07 UTC | NEW SERVICE | service:110/tcp | — | Dovecot / TLSv1.3 | low | unknown |
| 22 Sep 2026 03:27 UTC | NEW ASSET | — | — | asset with no observed open endpoints | low | unknown |
4 matches on this asset, each one unverified. Treat these as leads for manual review, never as findings.
| Identifier | Severity | CVSS | Product / version | Status | Match confidence | Evidence | Detected |
|---|---|---|---|---|---|---|---|
CVE-2026-66141 Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled. | high | 7.4 | Exim 4.99.5 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.99.5\"","note":"version-string match only; not a confirmed exposure","observ… | 22 Sep 2026 |
CVE-2026-66140 Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled. | high | 8.4 | Exim 4.99.5 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.99.5\"","note":"version-string match only; not a confirmed exposure","observ… | 22 Sep 2026 |
CVE-2026-66141 Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled. | high | 7.4 | Exim 4.99.5 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.99.5\"","note":"version-string match only; not a confirmed exposure","observ… | 22 Sep 2026 |
CVE-2026-66140 Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled. | high | 8.4 | Exim 4.99.5 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.99.5\"","note":"version-string match only; not a confirmed exposure","observ… | 22 Sep 2026 |
| Field | Previous | Current | Reading |
|---|---|---|---|
| reverse_dns | host.itswitch.us | host.itswitch.us | unchanged |
| services.110/tcp.cert_sha256 | 8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca | 8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca | unchanged |
| services.110/tcp.product | Dovecot | Dovecot | unchanged |
| services.110/tcp.service_type | pop3 | pop3 | unchanged |
| services.110/tcp.state | open | open | unchanged |
| services.110/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.110/tcp.version | — | — | unchanged |
| services.143/tcp.cert_sha256 | 8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca | 8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca | unchanged |
| services.143/tcp.product | Dovecot | Dovecot | unchanged |
| services.143/tcp.service_type | imap | imap | unchanged |
| services.143/tcp.state | open | open | unchanged |
| services.143/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.143/tcp.version | — | — | unchanged |
| services.443/tcp.cert_sha256 | 8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca | 8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca | unchanged |
| services.443/tcp.product | Apache HTTP Server | Apache HTTP Server | unchanged |
| services.443/tcp.service_type | https | https | unchanged |
| services.443/tcp.state | open | open | unchanged |
| services.443/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.443/tcp.version | — | — | unchanged |
| services.465/tcp.cert_sha256 | 8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca | 8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca | unchanged |
| services.465/tcp.product | Exim | Exim | unchanged |
| services.465/tcp.service_type | smtps | smtps | unchanged |
| services.465/tcp.state | open | open | unchanged |
| services.465/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.465/tcp.version | 4.99.5 | 4.99.5 | unchanged |
| services.53/tcp.cert_sha256 | — | — | unchanged |
| services.53/tcp.product | — | — | unchanged |
| services.53/tcp.service_type | dns | dns | unchanged |
| services.53/tcp.state | open | open | unchanged |
| services.53/tcp.tls_version | — | — | unchanged |
| services.53/tcp.version | — | — | unchanged |
| services.587/tcp.cert_sha256 | 8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca | 8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca | unchanged |
| services.587/tcp.product | Exim | Exim | unchanged |
| services.587/tcp.service_type | smtp-submission | smtp-submission | unchanged |
| services.587/tcp.state | open | open | unchanged |
| services.587/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.587/tcp.version | 4.99.5 | 4.99.5 | unchanged |
| services.80/tcp.cert_sha256 | — | — | unchanged |
| services.80/tcp.product | Apache HTTP Server | Apache HTTP Server | unchanged |
| services.80/tcp.service_type | http | http | unchanged |
| services.80/tcp.state | open | open | unchanged |
| services.80/tcp.tls_version | — | — | unchanged |
| services.80/tcp.version | — | — | unchanged |
| services.993/tcp.cert_sha256 | 8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca | 8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca | unchanged |
| services.993/tcp.product | Dovecot | Dovecot | unchanged |
| services.993/tcp.service_type | imaps | imaps | unchanged |
| services.993/tcp.state | open | open | unchanged |
| services.993/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.993/tcp.version | — | — | unchanged |
| services.995/tcp.cert_sha256 | 8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca | 8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca | unchanged |
| services.995/tcp.product | Dovecot | Dovecot | unchanged |
| services.995/tcp.service_type | pop3s | pop3s | unchanged |
| services.995/tcp.state | open | open | unchanged |
| services.995/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.995/tcp.version | — | — | unchanged |
| technologies | ["apache-http-server","dovecot","exim","lets-encrypt"] | ["apache-http-server","dovecot","exim","lets-encrypt"] | unchanged |
{
"id": "cb0dc46367b9ff97f01c8524f81fb237c",
"type": "ipv4",
"value": "103.147.226.18",
"hostname": null,
"reverseDns": "host.itswitch.us",
"asn": {
"number": 140050,
"name": "NG-AS-AP - Next Geekers Pvt. Ltd."
},
"organization": {
"id": "cf568ef827f05801f1e76c56fe52cb098",
"name": "NG-AS-AP - Next Geekers Pvt. Ltd."
},
"location": {
"country": "NP",
"city": "Kathmandu",
"province": "Bagmati Province",
"district": "",
"confidence": "low",
"source": "ip-api.com"
},
"scopeStatus": "in_scope",
"priority": "HIGH",
"firstSeen": "2026-09-22T03:19:16.125Z",
"lastSeen": "2026-09-23T00:05:57.546Z",
"observationCount": 13,
"openServices": 9,
"serviceCount": 9,
"technologies": [
"apache-http-server",
"dovecot",
"exim",
"lets-encrypt"
],
"vulnerabilityMatches": [
{
"id": "c2d60dedf29a1848cca55a4f0bbc461be",
"cve": "CVE-2026-66141",
"severity": "high",
"cvssScore": 7.4,
"summary": "Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.",
"product": "Exim",
"version": "4.99.5",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.99.5\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.99.5\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T22:05:02.420Z",
"assetValue": "103.147.226.18",
"serviceId": "c9da40bff1408af2e8f6fc2ca49d1b765",
"port": 465,
"technologySlug": "exim"
},
{
"id": "c4931f551142263799241c27482cf37cc",
"cve": "CVE-2026-66140",
"severity": "high",
"cvssScore": 8.4,
"summary": "Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled.",
"product": "Exim",
"version": "4.99.5",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.99.5\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.99.5\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T22:05:02.418Z",
"assetValue": "103.147.226.18",
"serviceId": "c9da40bff1408af2e8f6fc2ca49d1b765",
"port": 465,
"technologySlug": "exim"
},
{
"id": "ccd01fd3197862bbf69f906ce82af51b6",
"cve": "CVE-2026-66141",
"severity": "high",
"cvssScore": 7.4,
"summary": "Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.",
"product": "Exim",
"version": "4.99.5",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.99.5\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.99.5\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T20:34:21.981Z",
"assetValue": "103.147.226.18",
"serviceId": "c88271d4308019e8d6953233091998014",
"port": 587,
"technologySlug": "exim"
},
{
"id": "cce693c246ffd4c9fd4c9ba4c1858bc42",
"cve": "CVE-2026-66140",
"severity": "high",
"cvssScore": 8.4,
"summary": "Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled.",
"product": "Exim",
"version": "4.99.5",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.99.5\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.99.5\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T20:34:21.978Z",
"assetValue": "103.147.226.18",
"serviceId": "c88271d4308019e8d6953233091998014",
"port": 587,
"technologySlug": "exim"
}
],
"network": {
"id": "c06ddd44e6342fac7cb1a5ae898c93fd5",
"prefix": "103.147.226.0/24",
"ipVersion": 4
},
"services": [
{
"id": "c364cc4d57163504742481070a6127034",
"assetId": "cb0dc46367b9ff97f01c8524f81fb237c",
"assetValue": null,
"port": 53,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "dns",
"product": null,
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T20:07:21.464Z",
"lastSeen": "2026-09-23T00:05:57.472Z",
"observationCount": 0,
"technologies": [],
"certificate": null
},
{
"id": "c636e1039d560bbaf25f63c53ce00778e",
"assetId": "cb0dc46367b9ff97f01c8524f81fb237c",
"assetValue": null,
"port": 80,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "http",
"product": "Apache HTTP Server",
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T20:07:21.467Z",
"lastSeen": "2026-09-23T00:05:57.475Z",
"observationCount": 0,
"technologies": [
{
"slug": "apache-http-server",
"name": "Apache HTTP Server",
"category": "web-server",
"vendor": "Apache Software Foundation",
"version": null,
"confidence": "high",
"evidence": "server: Apache",
"detectedAt": "2026-09-22T20:07:21.469Z"
},
{
"slug": "apache-http-server",
"name": "Apache HTTP Server",
"category": "web-server",
"vendor": "Apache Software Foundation",
"version": null,
"confidence": "high",
"evidence": "server: Apache",
"detectedAt": "2026-09-23T00:05:57.478Z"
}
],
"certificate": null
},
{
"id": "c88bd5668a3774675be12d695c5b9c581",
"assetId": "cb0dc46367b9ff97f01c8524f81fb237c",
"assetValue": null,
"port": 110,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "pop3",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": "+OK Dovecot ready.",
"state": "open",
"firstSeen": "2026-09-22T20:07:21.473Z",
"lastSeen": "2026-09-23T00:05:57.481Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: +OK Dovecot ready.",
"detectedAt": "2026-09-22T20:07:21.476Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR1,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T20:07:21.478Z"
},
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: +OK Dovecot ready.",
"detectedAt": "2026-09-23T00:05:57.483Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR1,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-23T00:05:57.486Z"
}
],
"certificate": {
"id": "ceca65ba00a86b28df52d79dee49b6033",
"sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"subject": "CN=autoconfig.host.itswitch.us",
"issuer": "CN=YR1,O=Let's Encrypt,C=US",
"commonName": "autoconfig.host.itswitch.us",
"notBefore": "2026-08-13T01:11:08.000Z",
"notAfter": "2026-11-11T01:11:07.000Z",
"sans": [
"autoconfig.host.itswitch.us",
"autodiscover.host.itswitch.us",
"cpanel.host.itswitch.us",
"cpcalendars.host.itswitch.us",
"cpcontacts.host.itswitch.us",
"host.itswitch.com.np",
"host.itswitch.us",
"ipv6.host.itswitch.us",
"mail.host.itswitch.us",
"webdisk.host.itswitch.us",
"webmail.host.itswitch.us",
"whm.host.itswitch.us",
"www.host.itswitch.us"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "c07539dd3cd5b28bd471561a962d8e1cc",
"assetId": "cb0dc46367b9ff97f01c8524f81fb237c",
"assetValue": null,
"port": 143,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "imap",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": "* OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.",
"state": "open",
"firstSeen": "2026-09-22T20:07:21.483Z",
"lastSeen": "2026-09-23T00:05:57.490Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: * OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready...",
"detectedAt": "2026-09-22T20:07:21.485Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR1,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T20:07:21.487Z"
},
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: * OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready...",
"detectedAt": "2026-09-23T00:05:57.492Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR1,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-23T00:05:57.495Z"
}
],
"certificate": {
"id": "ceca65ba00a86b28df52d79dee49b6033",
"sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"subject": "CN=autoconfig.host.itswitch.us",
"issuer": "CN=YR1,O=Let's Encrypt,C=US",
"commonName": "autoconfig.host.itswitch.us",
"notBefore": "2026-08-13T01:11:08.000Z",
"notAfter": "2026-11-11T01:11:07.000Z",
"sans": [
"autoconfig.host.itswitch.us",
"autodiscover.host.itswitch.us",
"cpanel.host.itswitch.us",
"cpcalendars.host.itswitch.us",
"cpcontacts.host.itswitch.us",
"host.itswitch.com.np",
"host.itswitch.us",
"ipv6.host.itswitch.us",
"mail.host.itswitch.us",
"webdisk.host.itswitch.us",
"webmail.host.itswitch.us",
"whm.host.itswitch.us",
"www.host.itswitch.us"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "ccddfe391f5c21424265b77b2a1fd75fa",
"assetId": "cb0dc46367b9ff97f01c8524f81fb237c",
"assetValue": null,
"port": 443,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "https",
"product": "Apache HTTP Server",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T20:07:21.491Z",
"lastSeen": "2026-09-23T00:05:57.498Z",
"observationCount": 0,
"technologies": [
{
"slug": "apache-http-server",
"name": "Apache HTTP Server",
"category": "web-server",
"vendor": "Apache Software Foundation",
"version": null,
"confidence": "high",
"evidence": "server: Apache",
"detectedAt": "2026-09-22T20:07:21.493Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR1,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T20:07:21.496Z"
},
{
"slug": "apache-http-server",
"name": "Apache HTTP Server",
"category": "web-server",
"vendor": "Apache Software Foundation",
"version": null,
"confidence": "high",
"evidence": "server: Apache",
"detectedAt": "2026-09-23T00:05:57.500Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR1,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-23T00:05:57.503Z"
}
],
"certificate": {
"id": "ceca65ba00a86b28df52d79dee49b6033",
"sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"subject": "CN=autoconfig.host.itswitch.us",
"issuer": "CN=YR1,O=Let's Encrypt,C=US",
"commonName": "autoconfig.host.itswitch.us",
"notBefore": "2026-08-13T01:11:08.000Z",
"notAfter": "2026-11-11T01:11:07.000Z",
"sans": [
"autoconfig.host.itswitch.us",
"autodiscover.host.itswitch.us",
"cpanel.host.itswitch.us",
"cpcalendars.host.itswitch.us",
"cpcontacts.host.itswitch.us",
"host.itswitch.com.np",
"host.itswitch.us",
"ipv6.host.itswitch.us",
"mail.host.itswitch.us",
"webdisk.host.itswitch.us",
"webmail.host.itswitch.us",
"whm.host.itswitch.us",
"www.host.itswitch.us"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "c9da40bff1408af2e8f6fc2ca49d1b765",
"assetId": "cb0dc46367b9ff97f01c8524f81fb237c",
"assetValue": null,
"port": 465,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "smtps",
"product": "Exim",
"productVersion": "4.99.5",
"tlsVersion": "TLSv1.3",
"banner": "220-host.itswitch.com.np ESMTP Exim 4.99.5 #2 Wed, 23 Sep 2026 05:50:39 +0545 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.",
"state": "open",
"firstSeen": "2026-09-22T20:07:21.500Z",
"lastSeen": "2026-09-23T00:05:57.507Z",
"observationCount": 0,
"technologies": [
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR1,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T20:07:21.506Z"
},
{
"slug": "exim",
"name": "Exim",
"category": "mail-server",
"vendor": "Exim Project",
"version": "4.99.5",
"confidence": "high",
"evidence": "SMTP banner: 220-host.itswitch.com.np ESMTP Exim 4.99.5 #2 Wed, 23 Sep 2026 05:50:39 +0545 220-We do not authorize the use of this ...",
"detectedAt": "2026-09-23T00:05:57.509Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR1,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-23T00:05:57.513Z"
}
],
"certificate": {
"id": "ceca65ba00a86b28df52d79dee49b6033",
"sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"subject": "CN=autoconfig.host.itswitch.us",
"issuer": "CN=YR1,O=Let's Encrypt,C=US",
"commonName": "autoconfig.host.itswitch.us",
"notBefore": "2026-08-13T01:11:08.000Z",
"notAfter": "2026-11-11T01:11:07.000Z",
"sans": [
"autoconfig.host.itswitch.us",
"autodiscover.host.itswitch.us",
"cpanel.host.itswitch.us",
"cpcalendars.host.itswitch.us",
"cpcontacts.host.itswitch.us",
"host.itswitch.com.np",
"host.itswitch.us",
"ipv6.host.itswitch.us",
"mail.host.itswitch.us",
"webdisk.host.itswitch.us",
"webmail.host.itswitch.us",
"whm.host.itswitch.us",
"www.host.itswitch.us"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "c88271d4308019e8d6953233091998014",
"assetId": "cb0dc46367b9ff97f01c8524f81fb237c",
"assetValue": null,
"port": 587,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "smtp-submission",
"product": "Exim",
"productVersion": "4.99.5",
"tlsVersion": "TLSv1.3",
"banner": "220-host.itswitch.com.np ESMTP Exim 4.99.5 #2 Wed, 23 Sep 2026 05:50:40 +0545 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.",
"state": "open",
"firstSeen": "2026-09-22T20:07:21.510Z",
"lastSeen": "2026-09-23T00:05:57.516Z",
"observationCount": 0,
"technologies": [
{
"slug": "exim",
"name": "Exim",
"category": "mail-server",
"vendor": "Exim Project",
"version": "4.99.5",
"confidence": "high",
"evidence": "SMTP banner: 220-host.itswitch.com.np ESMTP Exim 4.99.5 #2 Wed, 23 Sep 2026 05:50:40 +0545 220-We do not authorize the use of this ...",
"detectedAt": "2026-09-23T00:05:57.519Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR1,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T20:07:21.515Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR1,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-23T00:05:57.522Z"
}
],
"certificate": {
"id": "ceca65ba00a86b28df52d79dee49b6033",
"sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"subject": "CN=autoconfig.host.itswitch.us",
"issuer": "CN=YR1,O=Let's Encrypt,C=US",
"commonName": "autoconfig.host.itswitch.us",
"notBefore": "2026-08-13T01:11:08.000Z",
"notAfter": "2026-11-11T01:11:07.000Z",
"sans": [
"autoconfig.host.itswitch.us",
"autodiscover.host.itswitch.us",
"cpanel.host.itswitch.us",
"cpcalendars.host.itswitch.us",
"cpcontacts.host.itswitch.us",
"host.itswitch.com.np",
"host.itswitch.us",
"ipv6.host.itswitch.us",
"mail.host.itswitch.us",
"webdisk.host.itswitch.us",
"webmail.host.itswitch.us",
"whm.host.itswitch.us",
"www.host.itswitch.us"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "ccacecc3f833abcde3d1ecd8d00da2986",
"assetId": "cb0dc46367b9ff97f01c8524f81fb237c",
"assetValue": null,
"port": 993,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "imaps",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": "* OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.",
"state": "open",
"firstSeen": "2026-09-22T20:07:21.520Z",
"lastSeen": "2026-09-23T00:05:57.526Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: * OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.",
"detectedAt": "2026-09-22T20:07:21.522Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR1,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T20:07:21.525Z"
},
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: * OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.",
"detectedAt": "2026-09-23T00:05:57.528Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR1,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-23T00:05:57.531Z"
}
],
"certificate": {
"id": "ceca65ba00a86b28df52d79dee49b6033",
"sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"subject": "CN=autoconfig.host.itswitch.us",
"issuer": "CN=YR1,O=Let's Encrypt,C=US",
"commonName": "autoconfig.host.itswitch.us",
"notBefore": "2026-08-13T01:11:08.000Z",
"notAfter": "2026-11-11T01:11:07.000Z",
"sans": [
"autoconfig.host.itswitch.us",
"autodiscover.host.itswitch.us",
"cpanel.host.itswitch.us",
"cpcalendars.host.itswitch.us",
"cpcontacts.host.itswitch.us",
"host.itswitch.com.np",
"host.itswitch.us",
"ipv6.host.itswitch.us",
"mail.host.itswitch.us",
"webdisk.host.itswitch.us",
"webmail.host.itswitch.us",
"whm.host.itswitch.us",
"www.host.itswitch.us"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "cc8cd1dab9dee08acbbff1e58e69c978b",
"assetId": "cb0dc46367b9ff97f01c8524f81fb237c",
"assetValue": null,
"port": 995,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "pop3s",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": "+OK Dovecot ready.",
"state": "open",
"firstSeen": "2026-09-22T20:07:21.528Z",
"lastSeen": "2026-09-23T00:05:57.534Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: +OK Dovecot ready.",
"detectedAt": "2026-09-22T20:07:21.531Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR1,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T20:07:21.534Z"
},
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: +OK Dovecot ready.",
"detectedAt": "2026-09-23T00:05:57.537Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR1,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-23T00:05:57.539Z"
}
],
"certificate": {
"id": "ceca65ba00a86b28df52d79dee49b6033",
"sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"subject": "CN=autoconfig.host.itswitch.us",
"issuer": "CN=YR1,O=Let's Encrypt,C=US",
"commonName": "autoconfig.host.itswitch.us",
"notBefore": "2026-08-13T01:11:08.000Z",
"notAfter": "2026-11-11T01:11:07.000Z",
"sans": [
"autoconfig.host.itswitch.us",
"autodiscover.host.itswitch.us",
"cpanel.host.itswitch.us",
"cpcalendars.host.itswitch.us",
"cpcontacts.host.itswitch.us",
"host.itswitch.com.np",
"host.itswitch.us",
"ipv6.host.itswitch.us",
"mail.host.itswitch.us",
"webdisk.host.itswitch.us",
"webmail.host.itswitch.us",
"whm.host.itswitch.us",
"www.host.itswitch.us"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
}
],
"certificates": [
{
"id": "ceca65ba00a86b28df52d79dee49b6033",
"sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"subject": "CN=autoconfig.host.itswitch.us",
"issuer": "CN=YR1,O=Let's Encrypt,C=US",
"commonName": "autoconfig.host.itswitch.us",
"notBefore": "2026-08-13T01:11:08.000Z",
"notAfter": "2026-11-11T01:11:07.000Z",
"sans": [
"autoconfig.host.itswitch.us",
"autodiscover.host.itswitch.us",
"cpanel.host.itswitch.us",
"cpcalendars.host.itswitch.us",
"cpcontacts.host.itswitch.us",
"host.itswitch.com.np",
"host.itswitch.us",
"ipv6.host.itswitch.us",
"mail.host.itswitch.us",
"webdisk.host.itswitch.us",
"webmail.host.itswitch.us",
"whm.host.itswitch.us",
"www.host.itswitch.us"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "ceca65ba00a86b28df52d79dee49b6033",
"sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"subject": "CN=autoconfig.host.itswitch.us",
"issuer": "CN=YR1,O=Let's Encrypt,C=US",
"commonName": "autoconfig.host.itswitch.us",
"notBefore": "2026-08-13T01:11:08.000Z",
"notAfter": "2026-11-11T01:11:07.000Z",
"sans": [
"autoconfig.host.itswitch.us",
"autodiscover.host.itswitch.us",
"cpanel.host.itswitch.us",
"cpcalendars.host.itswitch.us",
"cpcontacts.host.itswitch.us",
"host.itswitch.com.np",
"host.itswitch.us",
"ipv6.host.itswitch.us",
"mail.host.itswitch.us",
"webdisk.host.itswitch.us",
"webmail.host.itswitch.us",
"whm.host.itswitch.us",
"www.host.itswitch.us"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "ceca65ba00a86b28df52d79dee49b6033",
"sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"subject": "CN=autoconfig.host.itswitch.us",
"issuer": "CN=YR1,O=Let's Encrypt,C=US",
"commonName": "autoconfig.host.itswitch.us",
"notBefore": "2026-08-13T01:11:08.000Z",
"notAfter": "2026-11-11T01:11:07.000Z",
"sans": [
"autoconfig.host.itswitch.us",
"autodiscover.host.itswitch.us",
"cpanel.host.itswitch.us",
"cpcalendars.host.itswitch.us",
"cpcontacts.host.itswitch.us",
"host.itswitch.com.np",
"host.itswitch.us",
"ipv6.host.itswitch.us",
"mail.host.itswitch.us",
"webdisk.host.itswitch.us",
"webmail.host.itswitch.us",
"whm.host.itswitch.us",
"www.host.itswitch.us"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "ceca65ba00a86b28df52d79dee49b6033",
"sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"subject": "CN=autoconfig.host.itswitch.us",
"issuer": "CN=YR1,O=Let's Encrypt,C=US",
"commonName": "autoconfig.host.itswitch.us",
"notBefore": "2026-08-13T01:11:08.000Z",
"notAfter": "2026-11-11T01:11:07.000Z",
"sans": [
"autoconfig.host.itswitch.us",
"autodiscover.host.itswitch.us",
"cpanel.host.itswitch.us",
"cpcalendars.host.itswitch.us",
"cpcontacts.host.itswitch.us",
"host.itswitch.com.np",
"host.itswitch.us",
"ipv6.host.itswitch.us",
"mail.host.itswitch.us",
"webdisk.host.itswitch.us",
"webmail.host.itswitch.us",
"whm.host.itswitch.us",
"www.host.itswitch.us"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "ceca65ba00a86b28df52d79dee49b6033",
"sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"subject": "CN=autoconfig.host.itswitch.us",
"issuer": "CN=YR1,O=Let's Encrypt,C=US",
"commonName": "autoconfig.host.itswitch.us",
"notBefore": "2026-08-13T01:11:08.000Z",
"notAfter": "2026-11-11T01:11:07.000Z",
"sans": [
"autoconfig.host.itswitch.us",
"autodiscover.host.itswitch.us",
"cpanel.host.itswitch.us",
"cpcalendars.host.itswitch.us",
"cpcontacts.host.itswitch.us",
"host.itswitch.com.np",
"host.itswitch.us",
"ipv6.host.itswitch.us",
"mail.host.itswitch.us",
"webdisk.host.itswitch.us",
"webmail.host.itswitch.us",
"whm.host.itswitch.us",
"www.host.itswitch.us"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "ceca65ba00a86b28df52d79dee49b6033",
"sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"subject": "CN=autoconfig.host.itswitch.us",
"issuer": "CN=YR1,O=Let's Encrypt,C=US",
"commonName": "autoconfig.host.itswitch.us",
"notBefore": "2026-08-13T01:11:08.000Z",
"notAfter": "2026-11-11T01:11:07.000Z",
"sans": [
"autoconfig.host.itswitch.us",
"autodiscover.host.itswitch.us",
"cpanel.host.itswitch.us",
"cpcalendars.host.itswitch.us",
"cpcontacts.host.itswitch.us",
"host.itswitch.com.np",
"host.itswitch.us",
"ipv6.host.itswitch.us",
"mail.host.itswitch.us",
"webdisk.host.itswitch.us",
"webmail.host.itswitch.us",
"whm.host.itswitch.us",
"www.host.itswitch.us"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "ceca65ba00a86b28df52d79dee49b6033",
"sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"subject": "CN=autoconfig.host.itswitch.us",
"issuer": "CN=YR1,O=Let's Encrypt,C=US",
"commonName": "autoconfig.host.itswitch.us",
"notBefore": "2026-08-13T01:11:08.000Z",
"notAfter": "2026-11-11T01:11:07.000Z",
"sans": [
"autoconfig.host.itswitch.us",
"autodiscover.host.itswitch.us",
"cpanel.host.itswitch.us",
"cpcalendars.host.itswitch.us",
"cpcontacts.host.itswitch.us",
"host.itswitch.com.np",
"host.itswitch.us",
"ipv6.host.itswitch.us",
"mail.host.itswitch.us",
"webdisk.host.itswitch.us",
"webmail.host.itswitch.us",
"whm.host.itswitch.us",
"www.host.itswitch.us"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
],
"recentObservations": [
{
"id": "c3d110ae244a41935f3836d9b35277ecc",
"observedAt": "2026-09-23T00:05:57.542Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"services": {
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "Apache HTTP Server",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "Apache HTTP Server",
"version": "",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "Exim",
"version": "4.99.5",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.99.5",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
}
},
"reverse_dns": "host.itswitch.us",
"technologies": [
"apache-http-server",
"dovecot",
"exim",
"lets-encrypt"
]
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
465,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 9,
"reachable": true,
"reverse_dns": "host.itswitch.us",
"ports_probed": 26,
"technologies": [
"apache-http-server",
"dovecot",
"exim",
"lets-encrypt"
],
"open_services": 9,
"probe_duration": 25060
},
"contentHash": "aa795a38cbe07af2c5b92769a710cb87d721a45ff1d41a368413f49150ae0a59",
"changed": false
},
{
"id": "ccb90e61d58bf05627e21fe63151c00e9",
"observedAt": "2026-09-22T20:07:21.537Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"services": {
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "Apache HTTP Server",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "Apache HTTP Server",
"version": "",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "Exim",
"version": "4.99.5",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.99.5",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
}
},
"reverse_dns": "host.itswitch.us",
"technologies": [
"apache-http-server",
"dovecot",
"exim",
"lets-encrypt"
]
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
465,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 9,
"reachable": true,
"reverse_dns": "host.itswitch.us",
"ports_probed": 26,
"technologies": [
"apache-http-server",
"dovecot",
"exim",
"lets-encrypt"
],
"open_services": 9,
"probe_duration": 54860
},
"contentHash": "d3538243996c4ca6fd1d6a11b1c0b25c0da0fe93946e673639f410803d6fcf0e",
"changed": true
},
{
"id": "c8456a4f42231ab89a3db52e65f934a25",
"observedAt": "2026-09-22T17:35:43.113Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "host.itswitch.us"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
465,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "host.itswitch.us",
"ports_probed": 26,
"technologies": null,
"open_services": 0,
"probe_duration": 1
},
"contentHash": "49d73b3188c4880c6f39026230191f781e5b8cbc0d3aa874e39a0f28d15aa8c3",
"changed": false
},
{
"id": "cc5805ddb1fa9c60b6dbae01631949009",
"observedAt": "2026-09-22T16:00:05.322Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "host.itswitch.us"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "host.itswitch.us",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 1
},
"contentHash": "5db425179af056f6f910d2de79da1c4ae7cc0b6a4e78296fc158a3c15e13c07c",
"changed": false
},
{
"id": "c6e6b717f1199878709fc3a0f34174022",
"observedAt": "2026-09-22T12:28:34.324Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "host.itswitch.us"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "host.itswitch.us",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 1
},
"contentHash": "abe2f93d7589429e375c0e3c319515bca932247bf22b055d5464f0afad7b3b14",
"changed": false
},
{
"id": "c05889cb4a1a4d51b065fd57b3abe8981",
"observedAt": "2026-09-22T11:38:11.187Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "host.itswitch.us"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "host.itswitch.us",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 3
},
"contentHash": "a0794484c06d7ab109df9d883e5fcc25bfcf6332d9adea1c852554d062cb3941",
"changed": false
},
{
"id": "c2114921166ab55734096c12eda356418",
"observedAt": "2026-09-22T11:15:36.268Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "host.itswitch.us"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "host.itswitch.us",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 1
},
"contentHash": "5085452f83b846b6285f799b5358acd6bb448751f8d61ca3e8cff2f9301f5d9f",
"changed": false
},
{
"id": "c6c83ccc23099b06094de1f3a299080c7",
"observedAt": "2026-09-22T07:12:58.675Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "host.itswitch.us"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "host.itswitch.us",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 0
},
"contentHash": "b1ff62cc843a64bb72863b489f80eba892a3e3f6f65aa9e5e7f2038ec037d428",
"changed": false
},
{
"id": "c94295fee3fc3df2094a5e4c8d8e1be9c",
"observedAt": "2026-09-22T05:27:51.187Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "host.itswitch.us"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "host.itswitch.us",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 0
},
"contentHash": "cb635e05bc87afb995c50eca5f1f6d9fb75a463178e6b7b6ada249ab84971bb1",
"changed": false
},
{
"id": "c5bee7a0f320fad06abae95a464149517",
"observedAt": "2026-09-22T05:12:24.160Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "host.itswitch.us"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "host.itswitch.us",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 104
},
"contentHash": "08885c681d0ae7487d1530c5a370ee2daf6287c481fbd245b7b5e3d94aa7d46c",
"changed": false
},
{
"id": "cc8788b6a71c829ec141a913d5c8644d0",
"observedAt": "2026-09-22T03:27:35.952Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "host.itswitch.us"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "host.itswitch.us",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 68
},
"contentHash": "ae4472143b83bdf68902742a72f743ea0ebb583e3bd9a0f093aba485bd50231d",
"changed": true
}
],
"recentChanges": [
{
"id": "c4d34bece0749887961b2d1422304ef40",
"changeType": "TECHNOLOGY_CHANGED",
"assetId": "cb0dc46367b9ff97f01c8524f81fb237c",
"assetValue": null,
"field": null,
"previousValue": null,
"currentValue": "apache-http-server, dovecot, exim, lets-encrypt",
"detectedAt": "2026-09-22T20:07:21.558Z",
"significance": "low",
"severity": "info",
"confidence": null,
"detail": "technology detected: apache-http-server, dovecot, exim, lets-encrypt",
"serviceId": null
},
{
"id": "c462cce68720f4b54ecb157872de67a39",
"changeType": "NEW_SERVICE",
"assetId": "cb0dc46367b9ff97f01c8524f81fb237c",
"assetValue": null,
"field": "service:995/tcp",
"previousValue": null,
"currentValue": "Dovecot / TLSv1.3",
"detectedAt": "2026-09-22T20:07:21.556Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "ceef3980a150569d76fc5ae0eda9038c2",
"changeType": "NEW_SERVICE",
"assetId": "cb0dc46367b9ff97f01c8524f81fb237c",
"assetValue": null,
"field": "service:993/tcp",
"previousValue": null,
"currentValue": "Dovecot / TLSv1.3",
"detectedAt": "2026-09-22T20:07:21.554Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c55f335b4f86c42c3e6530ebe19c1ccde",
"changeType": "NEW_SERVICE",
"assetId": "cb0dc46367b9ff97f01c8524f81fb237c",
"assetValue": null,
"field": "service:80/tcp",
"previousValue": null,
"currentValue": "Apache HTTP Server",
"detectedAt": "2026-09-22T20:07:21.552Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c81df3fbdfb374d29c3c739f2a2144f6f",
"changeType": "NEW_SERVICE",
"assetId": "cb0dc46367b9ff97f01c8524f81fb237c",
"assetValue": null,
"field": "service:587/tcp",
"previousValue": null,
"currentValue": "Exim 4.99.5 / TLSv1.3",
"detectedAt": "2026-09-22T20:07:21.550Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "caeac66608294147144eb18f7edb08332",
"changeType": "NEW_SERVICE",
"assetId": "cb0dc46367b9ff97f01c8524f81fb237c",
"assetValue": null,
"field": "service:53/tcp",
"previousValue": null,
"currentValue": "dns",
"detectedAt": "2026-09-22T20:07:21.548Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c5b81035ace52f672e13c275587a92fc5",
"changeType": "NEW_SERVICE",
"assetId": "cb0dc46367b9ff97f01c8524f81fb237c",
"assetValue": null,
"field": "service:465/tcp",
"previousValue": null,
"currentValue": "Exim 4.99.5 / TLSv1.3",
"detectedAt": "2026-09-22T20:07:21.546Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c6e00ef2d3c858e6cf19e720fe514ec91",
"changeType": "NEW_SERVICE",
"assetId": "cb0dc46367b9ff97f01c8524f81fb237c",
"assetValue": null,
"field": "service:443/tcp",
"previousValue": null,
"currentValue": "Apache HTTP Server / TLSv1.3",
"detectedAt": "2026-09-22T20:07:21.545Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c8eda3fd599e2dc9152efcaa3f832a166",
"changeType": "NEW_SERVICE",
"assetId": "cb0dc46367b9ff97f01c8524f81fb237c",
"assetValue": null,
"field": "service:143/tcp",
"previousValue": null,
"currentValue": "Dovecot / TLSv1.3",
"detectedAt": "2026-09-22T20:07:21.543Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "cf084d5fc1693bae0c1ba3b79c0a2ac6e",
"changeType": "NEW_SERVICE",
"assetId": "cb0dc46367b9ff97f01c8524f81fb237c",
"assetValue": null,
"field": "service:110/tcp",
"previousValue": null,
"currentValue": "Dovecot / TLSv1.3",
"detectedAt": "2026-09-22T20:07:21.541Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c71489141a8e23b9bada2d4a21211c0d9",
"changeType": "NEW_ASSET",
"assetId": "cb0dc46367b9ff97f01c8524f81fb237c",
"assetValue": null,
"field": null,
"previousValue": null,
"currentValue": "asset with no observed open endpoints",
"detectedAt": "2026-09-22T03:27:35.954Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "asset observed for the first time",
"serviceId": null
}
],
"dnsRecords": [],
"state": {
"current": {
"services": {
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "Apache HTTP Server",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "Apache HTTP Server",
"version": "",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "Exim",
"version": "4.99.5",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.99.5",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
}
},
"reverse_dns": "host.itswitch.us",
"technologies": [
"apache-http-server",
"dovecot",
"exim",
"lets-encrypt"
]
},
"previous": {
"services": {
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "Apache HTTP Server",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "Apache HTTP Server",
"version": "",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "Exim",
"version": "4.99.5",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.99.5",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "8c37084b79c3628e11807e908d450723cc4a5f4e16e250770cadecfa6bd098ca",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
}
},
"reverse_dns": "host.itswitch.us",
"technologies": [
"apache-http-server",
"dovecot",
"exim",
"lets-encrypt"
]
},
"comparable": true
}
}