Reading the observatory store…
Reading the observatory store…
First seen 22 Sep 2026, last seen 22 Sep 2026 07:13 UTC (1h ago). 2 observations on record. Location is an estimate derived from registration data — the source and confidence are stated below.
| Port | Service | Product | Technologies | TLS | State | Banner | Last seen |
|---|---|---|---|---|---|---|---|
| 21 tcp / tcp | ftp | Pure-FTPd |
| not negotiated | open | 220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time is now 11:10. Server … | 22 Sep 2026 3h ago |
| 22 tcp / tcp | ssh | OpenSSH 9.9 |
| not negotiated | open | SSH-2.0-OpenSSH_9.9 | 22 Sep 2026 3h ago |
| 53 tcp / tcp | dns | not identified | none detected | not negotiated | open | no banner captured | 22 Sep 2026 3h ago |
| 80 tcp / tcp | http | not identified | none detected | not negotiated | open | no banner captured | 22 Sep 2026 3h ago |
| 110 tcp / tcp | pop3 | Dovecot |
| not negotiated | open | +OK Dovecot ready. | 22 Sep 2026 3h ago |
| Observed at | Source | Collector | Confidence | Changed | State | Content hash |
|---|---|---|---|---|---|---|
| 22 Sep 2026 07:13 UTC | fingerprint | fingerprint-1 | high | changed | {"reverse_dns":"r40.merodns.com"} | 42040324da5e78159e847d749598c62f78df947… |
| 22 Sep 2026 05:26 UTC | fingerprint | fingerprint-1 | high | changed | {"services":{"21/tcp":{"state":"open","product":"Pure-FTPd","version":"","cert_sha256":"","tls_version":"","service_type":"ftp"},"22/tcp":{"state":"open","prod… | 54ac52d3d5c4336c950a3937f855fb5736edb48… |
| Detected at | Type | Field | Previous | Current | Significance | Confidence |
|---|---|---|---|---|---|---|
| 22 Sep 2026 07:13 UTC | TECHNOLOGY CHANGED | — | dovecot, openssh, pure-ftpd | — | low | unknown |
| 22 Sep 2026 07:13 UTC | SERVICE DISAPPEARED | service:80/tcp | http | — | medium | unknown |
| 22 Sep 2026 07:13 UTC | SERVICE DISAPPEARED | service:53/tcp | dns | — | medium | unknown |
| 22 Sep 2026 07:13 UTC | SERVICE DISAPPEARED | service:22/tcp | OpenSSH 9.9 | — | medium | unknown |
| 22 Sep 2026 07:13 UTC | SERVICE DISAPPEARED | service:21/tcp | Pure-FTPd | — | medium | unknown |
| 22 Sep 2026 07:13 UTC | SERVICE DISAPPEARED | service:110/tcp | Dovecot | — | medium | unknown |
| 22 Sep 2026 05:26 UTC | NEW SERVICE | service:80/tcp | — | http | low | unknown |
| 22 Sep 2026 05:26 UTC | NEW SERVICE | service:53/tcp | — | dns | low | unknown |
| 22 Sep 2026 05:26 UTC | NEW SERVICE | service:22/tcp | — | OpenSSH 9.9 | low | unknown |
| 22 Sep 2026 05:26 UTC | NEW SERVICE | service:21/tcp | — | Pure-FTPd | low | unknown |
| 22 Sep 2026 05:26 UTC | NEW SERVICE | service:110/tcp | — | Dovecot | low | unknown |
| 22 Sep 2026 05:26 UTC | NEW ASSET | — | — | asset with 5 observed open endpoint(s) | low | unknown |
No version-based matches recorded.
A match can only be produced once a product and version have been detected on a service, which requires a completed probe.
| Field | Previous | Current | Reading |
|---|---|---|---|
| reverse_dns | r40.merodns.com | r40.merodns.com | unchanged |
| services.110/tcp.cert_sha256 | — | — | disappeared |
| services.110/tcp.product | Dovecot | — | disappeared |
| services.110/tcp.service_type | pop3 | — | disappeared |
| services.110/tcp.state | open | — | disappeared |
| services.110/tcp.tls_version | — | — | disappeared |
| services.110/tcp.version | — | — | disappeared |
| services.21/tcp.cert_sha256 | — | — | disappeared |
| services.21/tcp.product | Pure-FTPd | — | disappeared |
| services.21/tcp.service_type | ftp | — | disappeared |
| services.21/tcp.state | open | — | disappeared |
| services.21/tcp.tls_version | — | — | disappeared |
| services.21/tcp.version | — | — | disappeared |
| services.22/tcp.cert_sha256 | — | — | disappeared |
| services.22/tcp.product | OpenSSH | — | disappeared |
| services.22/tcp.service_type | ssh | — | disappeared |
| services.22/tcp.state | open | — | disappeared |
| services.22/tcp.tls_version | — | — | disappeared |
| services.22/tcp.version | 9.9 | — | disappeared |
| services.53/tcp.cert_sha256 | — | — | disappeared |
| services.53/tcp.product | — | — | disappeared |
| services.53/tcp.service_type | dns | — | disappeared |
| services.53/tcp.state | open | — | disappeared |
| services.53/tcp.tls_version | — | — | disappeared |
| services.53/tcp.version | — | — | disappeared |
| services.80/tcp.cert_sha256 | — | — | disappeared |
| services.80/tcp.product | — | — | disappeared |
| services.80/tcp.service_type | http | — | disappeared |
| services.80/tcp.state | open | — | disappeared |
| services.80/tcp.tls_version | — | — | disappeared |
| services.80/tcp.version | — | — | disappeared |
| technologies | ["dovecot","openssh","pure-ftpd"] | — | disappeared |
{
"id": "ccef02dcac3a01cd80b3063f1dfdb4e8b",
"type": "ipv4",
"value": "157.119.71.123",
"hostname": "youth.candid.com.np",
"reverseDns": "r40.merodns.com",
"asn": {
"number": 141767,
"name": "CG-COMMUNICATION-AS-AP - C G Communications Ltd"
},
"organization": {
"id": "c35858da4793cb1a0b59953265e57ae3e",
"name": "CG-COMMUNICATION-AS-AP - C G Communications Ltd"
},
"location": {
"country": "NP",
"city": "Los Angeles",
"province": "California",
"district": "",
"confidence": "low",
"source": "ip-api.com"
},
"scopeStatus": "in_scope",
"priority": "NORMAL",
"firstSeen": "2026-09-22T05:02:08.757Z",
"lastSeen": "2026-09-22T07:13:12.020Z",
"observationCount": 2,
"openServices": 5,
"serviceCount": 5,
"technologies": [
"dovecot",
"openssh",
"pure-ftpd"
],
"vulnerabilityMatches": [],
"network": {
"id": "ce51845d208eeabfb59d963a5040258da",
"prefix": "157.119.71.0/24",
"ipVersion": 4
},
"services": [
{
"id": "cbe2b02868549800bfe696e726d4babdd",
"assetId": "ccef02dcac3a01cd80b3063f1dfdb4e8b",
"assetValue": null,
"port": 21,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "ftp",
"product": "Pure-FTPd",
"productVersion": null,
"tlsVersion": null,
"banner": "220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time is now 11:10. Server port: 21. 220-This is a private system - No anonymous login 220-IPv6 connections are also welcome on this server. 220 You will be disconnected after 15 minutes of inactivity.",
"state": "open",
"firstSeen": "2026-09-22T05:26:07.079Z",
"lastSeen": "2026-09-22T05:26:07.079Z",
"observationCount": 0,
"technologies": [
{
"slug": "pure-ftpd",
"name": "Pure-FTPd",
"category": "ftp-server",
"vendor": "Pure-FTPd",
"version": null,
"confidence": "high",
"evidence": "FTP banner: 220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time ...",
"detectedAt": "2026-09-22T05:26:07.089Z"
}
],
"certificate": null
},
{
"id": "c4935a4bab702949b7348f55138c25c02",
"assetId": "ccef02dcac3a01cd80b3063f1dfdb4e8b",
"assetValue": null,
"port": 22,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "ssh",
"product": "OpenSSH",
"productVersion": "9.9",
"tlsVersion": null,
"banner": "SSH-2.0-OpenSSH_9.9",
"state": "open",
"firstSeen": "2026-09-22T05:26:07.092Z",
"lastSeen": "2026-09-22T05:26:07.092Z",
"observationCount": 0,
"technologies": [
{
"slug": "openssh",
"name": "OpenSSH",
"category": "remote-access",
"vendor": "OpenBSD Project",
"version": "9.9",
"confidence": "high",
"evidence": "SSH banner: SSH-2.0-OpenSSH_9.9",
"detectedAt": "2026-09-22T05:26:07.095Z"
}
],
"certificate": null
},
{
"id": "cab19d6e507984c47827012e4a2616cf9",
"assetId": "ccef02dcac3a01cd80b3063f1dfdb4e8b",
"assetValue": null,
"port": 53,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "dns",
"product": null,
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T05:26:07.099Z",
"lastSeen": "2026-09-22T05:26:07.099Z",
"observationCount": 0,
"technologies": [],
"certificate": null
},
{
"id": "cfbb453adfb6c0482e863f4177fbd2037",
"assetId": "ccef02dcac3a01cd80b3063f1dfdb4e8b",
"assetValue": null,
"port": 80,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "http",
"product": null,
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T05:26:07.102Z",
"lastSeen": "2026-09-22T05:26:07.102Z",
"observationCount": 0,
"technologies": [],
"certificate": null
},
{
"id": "c27785d3bd30cb9abd314f653858a688b",
"assetId": "ccef02dcac3a01cd80b3063f1dfdb4e8b",
"assetValue": null,
"port": 110,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "pop3",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": null,
"banner": "+OK Dovecot ready.",
"state": "open",
"firstSeen": "2026-09-22T05:26:07.104Z",
"lastSeen": "2026-09-22T05:26:07.104Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: +OK Dovecot ready.",
"detectedAt": "2026-09-22T05:26:07.107Z"
}
],
"certificate": null
}
],
"certificates": [],
"recentObservations": [
{
"id": "cf5975cd17268b420f68d79368f5024c0",
"observedAt": "2026-09-22T07:13:12.010Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "r40.merodns.com"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "r40.merodns.com",
"ports_probed": 25,
"technologies": null,
"open_services": 5,
"probe_duration": 49
},
"contentHash": "42040324da5e78159e847d749598c62f78df94703bfcf58a94ab95ed7a46adb9",
"changed": true
},
{
"id": "c32ed095f4148731ec0be2b63d39738fc",
"observedAt": "2026-09-22T05:26:07.109Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.9",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "pop3"
}
},
"reverse_dns": "r40.merodns.com",
"technologies": [
"dovecot",
"openssh",
"pure-ftpd"
]
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 5,
"reachable": true,
"reverse_dns": "r40.merodns.com",
"ports_probed": 25,
"technologies": [
"dovecot",
"openssh",
"pure-ftpd"
],
"open_services": 5,
"probe_duration": 10101
},
"contentHash": "54ac52d3d5c4336c950a3937f855fb5736edb4822b0946f891e3caf1c26a1201",
"changed": true
}
],
"recentChanges": [
{
"id": "cf12261484d1ebf865032eefb76a6d93a",
"changeType": "TECHNOLOGY_CHANGED",
"assetId": "ccef02dcac3a01cd80b3063f1dfdb4e8b",
"assetValue": null,
"field": null,
"previousValue": "dovecot, openssh, pure-ftpd",
"currentValue": null,
"detectedAt": "2026-09-22T07:13:12.018Z",
"significance": "low",
"severity": "info",
"confidence": null,
"detail": "technology no longer detected: dovecot, openssh, pure-ftpd",
"serviceId": null
},
{
"id": "cbd8ca4a3395bccca2a549b50893a743a",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "ccef02dcac3a01cd80b3063f1dfdb4e8b",
"assetValue": null,
"field": "service:80/tcp",
"previousValue": "http",
"currentValue": null,
"detectedAt": "2026-09-22T07:13:12.017Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "c6d6d9c0e1cb55e6cb1e3d11b2172f862",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "ccef02dcac3a01cd80b3063f1dfdb4e8b",
"assetValue": null,
"field": "service:53/tcp",
"previousValue": "dns",
"currentValue": null,
"detectedAt": "2026-09-22T07:13:12.016Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "c5a8ca9655c2815ae60f6f8cb434bc669",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "ccef02dcac3a01cd80b3063f1dfdb4e8b",
"assetValue": null,
"field": "service:22/tcp",
"previousValue": "OpenSSH 9.9",
"currentValue": null,
"detectedAt": "2026-09-22T07:13:12.014Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "c28e65cca010dbb626789308f92c90896",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "ccef02dcac3a01cd80b3063f1dfdb4e8b",
"assetValue": null,
"field": "service:21/tcp",
"previousValue": "Pure-FTPd",
"currentValue": null,
"detectedAt": "2026-09-22T07:13:12.013Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "cae3c988fb12bda07f4b942a7b6795838",
"changeType": "SERVICE_DISAPPEARED",
"assetId": "ccef02dcac3a01cd80b3063f1dfdb4e8b",
"assetValue": null,
"field": "service:110/tcp",
"previousValue": "Dovecot",
"currentValue": null,
"detectedAt": "2026-09-22T07:13:12.012Z",
"significance": "medium",
"severity": "warning",
"confidence": null,
"detail": "endpoint no longer responding",
"serviceId": null
},
{
"id": "c00e51474c91cee8bbfc2d71b23c8fe4a",
"changeType": "NEW_SERVICE",
"assetId": "ccef02dcac3a01cd80b3063f1dfdb4e8b",
"assetValue": null,
"field": "service:80/tcp",
"previousValue": null,
"currentValue": "http",
"detectedAt": "2026-09-22T05:26:07.118Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "endpoint responded on first observation",
"serviceId": null
},
{
"id": "c949f49a0e47a44efd9579dd35e6eb975",
"changeType": "NEW_SERVICE",
"assetId": "ccef02dcac3a01cd80b3063f1dfdb4e8b",
"assetValue": null,
"field": "service:53/tcp",
"previousValue": null,
"currentValue": "dns",
"detectedAt": "2026-09-22T05:26:07.116Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "endpoint responded on first observation",
"serviceId": null
},
{
"id": "cf0124954f3f721b3026e613ae37df954",
"changeType": "NEW_SERVICE",
"assetId": "ccef02dcac3a01cd80b3063f1dfdb4e8b",
"assetValue": null,
"field": "service:22/tcp",
"previousValue": null,
"currentValue": "OpenSSH 9.9",
"detectedAt": "2026-09-22T05:26:07.115Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "endpoint responded on first observation",
"serviceId": null
},
{
"id": "c08a0d806f525a579e734ac6fc84f93d3",
"changeType": "NEW_SERVICE",
"assetId": "ccef02dcac3a01cd80b3063f1dfdb4e8b",
"assetValue": null,
"field": "service:21/tcp",
"previousValue": null,
"currentValue": "Pure-FTPd",
"detectedAt": "2026-09-22T05:26:07.114Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "endpoint responded on first observation",
"serviceId": null
},
{
"id": "c152d6029ac02537660417e0b5b17d6f0",
"changeType": "NEW_SERVICE",
"assetId": "ccef02dcac3a01cd80b3063f1dfdb4e8b",
"assetValue": null,
"field": "service:110/tcp",
"previousValue": null,
"currentValue": "Dovecot",
"detectedAt": "2026-09-22T05:26:07.112Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "endpoint responded on first observation",
"serviceId": null
},
{
"id": "ca2bf3db0159a74959fdf23ed6005212f",
"changeType": "NEW_ASSET",
"assetId": "ccef02dcac3a01cd80b3063f1dfdb4e8b",
"assetValue": null,
"field": null,
"previousValue": null,
"currentValue": "asset with 5 observed open endpoint(s)",
"detectedAt": "2026-09-22T05:26:07.111Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "asset observed for the first time",
"serviceId": null
}
],
"dnsRecords": [],
"state": {
"current": {
"reverse_dns": "r40.merodns.com"
},
"previous": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.9",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "pop3"
}
},
"reverse_dns": "r40.merodns.com",
"technologies": [
"dovecot",
"openssh",
"pure-ftpd"
]
},
"comparable": true
}
}