Reading the observatory store…
Reading the observatory store…
First seen 22 Sep 2026, last seen 23 Sep 2026 22:39 UTC (15h ago). 1 observations on record. Location is an estimate derived from registration data — the source and confidence are stated below.
| Port | Service | Product | Technologies | TLS | State | Banner | Last seen |
|---|---|---|---|---|---|---|---|
| 3306 tcp / tcp | mysql | not identified | none detected | not negotiated | open | l�jHost 'ec2-13-127-122-166.ap-south-1.compute.amazonaws.com' is not allowed to connect to this MySQL server | 23 Sep 2026 15h ago |
| 3389 tcp / tcp | rdp | not identified | none detected | not negotiated | open | no banner captured | 23 Sep 2026 15h ago |
| Observed at | Source | Collector | Confidence | Changed | State | Content hash |
|---|---|---|---|---|---|---|
| 23 Sep 2026 22:39 UTC | fingerprint | fingerprint-1 | high | changed | {"services":{"3306/tcp":{"state":"open","product":"","version":"","cert_sha256":"","tls_version":"","service_type":"mysql"},"3389/tcp":{"state":"open","product… | 88d01a16ffa75a0cabc39d8cc407b4532bc79de… |
| Detected at | Type | Field | Previous | Current | Significance | Confidence |
|---|---|---|---|---|---|---|
| 23 Sep 2026 22:39 UTC | NEW SERVICE | service:3389/tcp | — | rdp | low | unknown |
| 23 Sep 2026 22:39 UTC | NEW SERVICE | service:3306/tcp | — | mysql | low | unknown |
| 23 Sep 2026 22:39 UTC | NEW ASSET | — | — | asset with 2 observed open endpoint(s) | low | unknown |
No version-based matches recorded.
A match can only be produced once a product and version have been detected on a service, which requires a completed probe.
Only one state has been recorded. The current document is shown without a predecessor — no comparison is implied.
{
"id": "cb36f161eec4e701dd36ab173d8735d81",
"type": "ipv4",
"value": "160.22.164.199",
"hostname": null,
"reverseDns": null,
"asn": {
"number": 138933,
"name": "FNCPL-AS-AP - Fiber Net Communication Pvt. Ltd."
},
"organization": {
"id": "cc62da4db4cb7519b9d19b6ffb57e799d",
"name": "FNCPL-AS-AP - Fiber Net Communication Pvt. Ltd."
},
"location": {
"country": "NP",
"city": "Kathmandu",
"province": "Bagmati Province",
"district": "",
"confidence": "low",
"source": "ip-api.com"
},
"scopeStatus": "in_scope",
"priority": "NORMAL",
"firstSeen": "2026-09-22T07:25:56.744Z",
"lastSeen": "2026-09-23T22:39:20.496Z",
"observationCount": 1,
"openServices": 2,
"serviceCount": 2,
"technologies": [],
"vulnerabilityMatches": [],
"network": {
"id": "ca43a96b40a20340a942034d229700802",
"prefix": "160.22.164.0/24",
"ipVersion": 4
},
"services": [
{
"id": "c9eefc7a97f013b97257559eb5fa713ab",
"assetId": "cb36f161eec4e701dd36ab173d8735d81",
"assetValue": null,
"port": 3306,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "mysql",
"product": null,
"productVersion": null,
"tlsVersion": null,
"banner": "l�jHost 'ec2-13-127-122-166.ap-south-1.compute.amazonaws.com' is not allowed to connect to this MySQL server",
"state": "open",
"firstSeen": "2026-09-23T22:39:20.477Z",
"lastSeen": "2026-09-23T22:39:20.477Z",
"observationCount": 0,
"technologies": [],
"certificate": null
},
{
"id": "c1183437e8f574072f0670643a16873a5",
"assetId": "cb36f161eec4e701dd36ab173d8735d81",
"assetValue": null,
"port": 3389,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "rdp",
"product": null,
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-23T22:39:20.481Z",
"lastSeen": "2026-09-23T22:39:20.481Z",
"observationCount": 0,
"technologies": [],
"certificate": null
}
],
"certificates": [],
"recentObservations": [
{
"id": "c9e132b2caa2f725a2e7d006d8ba3246a",
"observedAt": "2026-09-23T22:39:20.485Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"services": {
"3306/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "mysql"
},
"3389/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "rdp"
}
}
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
465,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 2,
"reachable": true,
"reverse_dns": "",
"ports_probed": 26,
"technologies": null,
"open_services": 2,
"probe_duration": 30046
},
"contentHash": "88d01a16ffa75a0cabc39d8cc407b4532bc79dea950960341971361684f10d27",
"changed": true
}
],
"recentChanges": [
{
"id": "c438a5d4f375208a98bbaa597eb2853e4",
"changeType": "NEW_SERVICE",
"assetId": "cb36f161eec4e701dd36ab173d8735d81",
"assetValue": null,
"field": "service:3389/tcp",
"previousValue": null,
"currentValue": "rdp",
"detectedAt": "2026-09-23T22:39:20.494Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "endpoint responded on first observation",
"serviceId": null
},
{
"id": "c69c998e17390c82ae1b21975fca1855d",
"changeType": "NEW_SERVICE",
"assetId": "cb36f161eec4e701dd36ab173d8735d81",
"assetValue": null,
"field": "service:3306/tcp",
"previousValue": null,
"currentValue": "mysql",
"detectedAt": "2026-09-23T22:39:20.492Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "endpoint responded on first observation",
"serviceId": null
},
{
"id": "c78072b2844d39a3bf8c6013ec14a7983",
"changeType": "NEW_ASSET",
"assetId": "cb36f161eec4e701dd36ab173d8735d81",
"assetValue": null,
"field": null,
"previousValue": null,
"currentValue": "asset with 2 observed open endpoint(s)",
"detectedAt": "2026-09-23T22:39:20.488Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "asset observed for the first time",
"serviceId": null
}
],
"dnsRecords": [],
"state": {
"current": {
"services": {
"3306/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "mysql"
},
"3389/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "rdp"
}
}
},
"previous": null,
"comparable": false
}
}