Reading the observatory store…
Reading the observatory store…
First seen 22 Sep 2026, last seen 23 Sep 2026 00:06 UTC (5h ago). 38 observations on record. Location is an estimate derived from registration data — the source and confidence are stated below.
| Port | Service | Product | Technologies | TLS | State | Banner | Last seen |
|---|---|---|---|---|---|---|---|
| 21 tcp / tcp | ftp | Pure-FTPd |
| TLSv1.3certificate
| open | 220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time is now 05:51. Server … | 23 Sep 2026 5h ago |
| 22 tcp / tcp | ssh | OpenSSH 9.9 |
| not negotiated | open | SSH-2.0-OpenSSH_9.9 | 23 Sep 2026 5h ago |
| 53 tcp / tcp | dns | not identified | none detected | not negotiated | open | no banner captured | 23 Sep 2026 5h ago |
| 80 tcp / tcp | http | not identified | none detected | not negotiated | open | no banner captured | 23 Sep 2026 5h ago |
| 110 tcp / tcp | pop3 | Dovecot |
| TLSv1.3certificate
| open | +OK Dovecot ready. | 23 Sep 2026 5h ago |
| 143 tcp / tcp | imap | Dovecot |
| TLSv1.3certificate
| open | * OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. | 23 Sep 2026 5h ago |
| 443 tcp / tcp | https | not identified | none detected | TLSv1.3certificate
| open | no banner captured | 23 Sep 2026 5h ago |
| 465 tcp / tcp | smtps | Exim 4.100 |
| TLSv1.3certificate
| open | 220-phillips.mysecurecloudserver.com ESMTP Exim 4.100 #2 Wed, 23 Sep 2026 05:51:10 +0545 220-We do not authorize the use of this system to … | 23 Sep 2026 5h ago |
| 587 tcp / tcp | smtp-submission | Exim 4.100 |
| TLSv1.3certificate
| open | 220-phillips.mysecurecloudserver.com ESMTP Exim 4.100 #2 Wed, 23 Sep 2026 05:51:12 +0545 220-We do not authorize the use of this system to … | 23 Sep 2026 5h ago |
| 993 tcp / tcp | imaps | Dovecot |
| TLSv1.3certificate
| open | * OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready. | 23 Sep 2026 5h ago |
| 995 tcp / tcp | pop3s | Dovecot |
| TLSv1.3certificate
| open | +OK Dovecot ready. | 23 Sep 2026 5h ago |
| Observed at | Source | Collector | Confidence | Changed | State | Content hash |
|---|---|---|---|---|---|---|
| 23 Sep 2026 00:04 UTC | fingerprint | fingerprint-1 | high | unchanged | {"services":{"21/tcp":{"state":"open","product":"Pure-FTPd","version":"","cert_sha256":"275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642","tls_… | e2367a429e618c91354c132b0828a3583e7956d… |
| 22 Sep 2026 23:43 UTC | fingerprint | fingerprint-1 | high | unchanged | {"services":{"21/tcp":{"state":"open","product":"Pure-FTPd","version":"","cert_sha256":"275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642","tls_… | fa4d6b9246ccebabd124b5a76fbb36a36e4c8cd… |
| 22 Sep 2026 20:08 UTC | fingerprint | fingerprint-1 | high | unchanged | {"services":{"21/tcp":{"state":"open","product":"Pure-FTPd","version":"","cert_sha256":"275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642","tls_… | 35c30c4d4c4a377c7fc98011a478488b551ceaa… |
| 22 Sep 2026 19:46 UTC | fingerprint | fingerprint-1 | high | unchanged | {"services":{"21/tcp":{"state":"open","product":"Pure-FTPd","version":"","cert_sha256":"275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642","tls_… | 2accffa7f70b4deb831d1173a82d906815986ff… |
| 22 Sep 2026 18:16 UTC | fingerprint | fingerprint-1 | high | changed | {"services":{"21/tcp":{"state":"open","product":"Pure-FTPd","version":"","cert_sha256":"275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642","tls_… | e88923d6690fb459db53249ca52b8d0f3a8ad99… |
| 22 Sep 2026 17:24 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"phillips.mysecurecloudserver.com"} | 337ec0977995024425e7ef5a1823939e2543ec7… |
| 22 Sep 2026 12:22 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"phillips.mysecurecloudserver.com"} | fb711ae0fa9c6b7e46004596e5236a0a460fef4… |
| 22 Sep 2026 11:58 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"phillips.mysecurecloudserver.com"} | 183f6b69e302f72cc5113dafb0a6fd52513f83a… |
| 22 Sep 2026 11:33 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"phillips.mysecurecloudserver.com"} | 593fe3103b8b00c152d065d684623a3a2fde9f8… |
| 22 Sep 2026 07:48 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"phillips.mysecurecloudserver.com"} | c4ba30b4e5c86a34b9c53b170c224349b7a5c29… |
| 22 Sep 2026 07:24 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"phillips.mysecurecloudserver.com"} | ef04224114d55a7da974622ca65c9bd3e2a9f38… |
| 22 Sep 2026 06:44 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"phillips.mysecurecloudserver.com"} | 644061f092912b7b40e4e9ecf4e7e6d9bd6bfe7… |
| 22 Sep 2026 05:30 UTC | fingerprint | fingerprint-1 | high | unchanged | {"reverse_dns":"phillips.mysecurecloudserver.com"} | 140d724809ba056e9dfa085a48633f9e88e9c23… |
| 22 Sep 2026 05:12 UTC | fingerprint | fingerprint-1 | high | changed | {"reverse_dns":"phillips.mysecurecloudserver.com"} | d3b43fb2c2900d8dcc1dd967c90933d88d6a1d3… |
| Detected at | Type | Field | Previous | Current | Significance | Confidence |
|---|---|---|---|---|---|---|
| 22 Sep 2026 18:16 UTC | TECHNOLOGY CHANGED | — | — | dovecot, exim, lets-encrypt, openssh, pure-ftpd | low | unknown |
| 22 Sep 2026 18:16 UTC | NEW SERVICE | service:995/tcp | — | Dovecot / TLSv1.3 | low | unknown |
| 22 Sep 2026 18:16 UTC | NEW SERVICE | service:993/tcp | — | Dovecot / TLSv1.3 | low | unknown |
| 22 Sep 2026 18:16 UTC | NEW SERVICE | service:80/tcp | — | http | low | unknown |
| 22 Sep 2026 18:16 UTC | NEW SERVICE | service:587/tcp | — | Exim 4.100 / TLSv1.3 | low | unknown |
| 22 Sep 2026 18:16 UTC | NEW SERVICE | service:53/tcp | — | dns | low | unknown |
| 22 Sep 2026 18:16 UTC | NEW SERVICE | service:465/tcp | — | Exim 4.100 / TLSv1.3 | low | unknown |
| 22 Sep 2026 18:16 UTC | NEW SERVICE | service:443/tcp | — | TLSv1.3 | low | unknown |
| 22 Sep 2026 18:16 UTC | NEW SERVICE | service:22/tcp | — | OpenSSH 9.9 | low | unknown |
| 22 Sep 2026 18:16 UTC | NEW SERVICE | service:21/tcp | — | Pure-FTPd / TLSv1.3 | low | unknown |
| 22 Sep 2026 18:16 UTC | NEW SERVICE | service:143/tcp | — | Dovecot / TLSv1.3 | low | unknown |
| 22 Sep 2026 18:16 UTC | NEW SERVICE | service:110/tcp | — | Dovecot / TLSv1.3 | low | unknown |
| 22 Sep 2026 05:12 UTC | NEW ASSET | — | — | asset with no observed open endpoints | low | unknown |
8 matches on this asset, each one unverified. Treat these as leads for manual review, never as findings.
| Identifier | Severity | CVSS | Product / version | Status | Match confidence | Evidence | Detected |
|---|---|---|---|---|---|---|---|
CVE-2026-94057 Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing. | medium | 4.0 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2026-94056 Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory. | high | 7.5 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2026-94055 Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free. | low | 3.7 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2026-94054 Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write. | high | 7.0 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2026-94057 Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing. | medium | 4.0 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2026-94056 Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory. | high | 7.5 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2026-94055 Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free. | low | 3.7 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
CVE-2026-94054 Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write. | high | 7.0 | Exim 4.100 | potential exposure — unverified | medium | {"match_reason":"keyword match on \"Exim 4.100\"","note":"version-string match only; not a confirmed exposure","observe… | 22 Sep 2026 |
| Field | Previous | Current | Reading |
|---|---|---|---|
| reverse_dns | phillips.mysecurecloudserver.com | phillips.mysecurecloudserver.com | unchanged |
| services.110/tcp.cert_sha256 | 275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642 | 275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642 | unchanged |
| services.110/tcp.product | Dovecot | Dovecot | unchanged |
| services.110/tcp.service_type | pop3 | pop3 | unchanged |
| services.110/tcp.state | open | open | unchanged |
| services.110/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.110/tcp.version | — | — | unchanged |
| services.143/tcp.cert_sha256 | 275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642 | 275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642 | unchanged |
| services.143/tcp.product | Dovecot | Dovecot | unchanged |
| services.143/tcp.service_type | imap | imap | unchanged |
| services.143/tcp.state | open | open | unchanged |
| services.143/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.143/tcp.version | — | — | unchanged |
| services.21/tcp.cert_sha256 | 275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642 | 275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642 | unchanged |
| services.21/tcp.product | Pure-FTPd | Pure-FTPd | unchanged |
| services.21/tcp.service_type | ftp | ftp | unchanged |
| services.21/tcp.state | open | open | unchanged |
| services.21/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.21/tcp.version | — | — | unchanged |
| services.22/tcp.cert_sha256 | — | — | unchanged |
| services.22/tcp.product | OpenSSH | OpenSSH | unchanged |
| services.22/tcp.service_type | ssh | ssh | unchanged |
| services.22/tcp.state | open | open | unchanged |
| services.22/tcp.tls_version | — | — | unchanged |
| services.22/tcp.version | 9.9 | 9.9 | unchanged |
| services.443/tcp.cert_sha256 | c4827d5d1addfd5bd4a379feddaa8335eefd90c68bf5ffade048c31f4f886f4c | c4827d5d1addfd5bd4a379feddaa8335eefd90c68bf5ffade048c31f4f886f4c | unchanged |
| services.443/tcp.product | — | — | unchanged |
| services.443/tcp.service_type | https | https | unchanged |
| services.443/tcp.state | open | open | unchanged |
| services.443/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.443/tcp.version | — | — | unchanged |
| services.465/tcp.cert_sha256 | 275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642 | 275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642 | unchanged |
| services.465/tcp.product | Exim | Exim | unchanged |
| services.465/tcp.service_type | smtps | smtps | unchanged |
| services.465/tcp.state | open | open | unchanged |
| services.465/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.465/tcp.version | 4.100 | 4.100 | unchanged |
| services.53/tcp.cert_sha256 | — | — | unchanged |
| services.53/tcp.product | — | — | unchanged |
| services.53/tcp.service_type | dns | dns | unchanged |
| services.53/tcp.state | open | open | unchanged |
| services.53/tcp.tls_version | — | — | unchanged |
| services.53/tcp.version | — | — | unchanged |
| services.587/tcp.cert_sha256 | 275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642 | 275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642 | unchanged |
| services.587/tcp.product | Exim | Exim | unchanged |
| services.587/tcp.service_type | smtp-submission | smtp-submission | unchanged |
| services.587/tcp.state | open | open | unchanged |
| services.587/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.587/tcp.version | 4.100 | 4.100 | unchanged |
| services.80/tcp.cert_sha256 | — | — | unchanged |
| services.80/tcp.product | — | — | unchanged |
| services.80/tcp.service_type | http | http | unchanged |
| services.80/tcp.state | open | open | unchanged |
| services.80/tcp.tls_version | — | — | unchanged |
| services.80/tcp.version | — | — | unchanged |
| services.993/tcp.cert_sha256 | 275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642 | 275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642 | unchanged |
| services.993/tcp.product | Dovecot | Dovecot | unchanged |
| services.993/tcp.service_type | imaps | imaps | unchanged |
| services.993/tcp.state | open | open | unchanged |
| services.993/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.993/tcp.version | — | — | unchanged |
| services.995/tcp.cert_sha256 | 275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642 | 275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642 | unchanged |
| services.995/tcp.product | Dovecot | Dovecot | unchanged |
| services.995/tcp.service_type | pop3s | pop3s | unchanged |
| services.995/tcp.state | open | open | unchanged |
| services.995/tcp.tls_version | TLSv1.3 | TLSv1.3 | unchanged |
| services.995/tcp.version | — | — | unchanged |
| technologies | ["dovecot","exim","lets-encrypt","openssh","pure-ftpd"] | ["dovecot","exim","lets-encrypt","openssh","pure-ftpd"] | unchanged |
{
"id": "cdff42b56d8e2577182e2a01c79d93f29",
"type": "ipv4",
"value": "103.235.199.20",
"hostname": "yuwasaccos.org.np",
"reverseDns": "phillips.mysecurecloudserver.com",
"asn": {
"number": 4007,
"name": "SUBISU-CABLENET-AS-AP - Subisu Cablenet (Pvt) Ltd, Baluwatar, Kathmandu, Nepal"
},
"organization": {
"id": "c2b1f62bdc5a33a0c2f97cc3d4861dcd6",
"name": "SUBISU-CABLENET-AS-AP - Subisu Cablenet (Pvt) Ltd, Baluwatar, Kathmandu, Nepal"
},
"location": {
"country": "NP",
"city": "Kathmandu",
"province": "Bagmati Province",
"district": "",
"confidence": "low",
"source": "ip-api.com"
},
"scopeStatus": "in_scope",
"priority": "HIGH",
"firstSeen": "2026-09-22T05:12:31.646Z",
"lastSeen": "2026-09-23T00:06:28.490Z",
"observationCount": 38,
"openServices": 11,
"serviceCount": 11,
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"openssh",
"pure-ftpd"
],
"vulnerabilityMatches": [
{
"id": "c93afbbfc9472ac20fca5a68c65c22d1c",
"cve": "CVE-2026-94057",
"severity": "medium",
"cvssScore": 4,
"summary": "Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T20:05:02.936Z",
"assetValue": "103.235.199.20",
"serviceId": "cc5624827e7f744fc501f7632b1d227c4",
"port": 465,
"technologySlug": "lets-encrypt"
},
{
"id": "c5c213d986e64a1ec38635fdcfef64dc6",
"cve": "CVE-2026-94056",
"severity": "high",
"cvssScore": 7.5,
"summary": "Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T20:05:02.934Z",
"assetValue": "103.235.199.20",
"serviceId": "cc5624827e7f744fc501f7632b1d227c4",
"port": 465,
"technologySlug": "lets-encrypt"
},
{
"id": "c2056cb68a83f860bb09eff753b605c65",
"cve": "CVE-2026-94055",
"severity": "low",
"cvssScore": 3.7,
"summary": "Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T20:05:02.932Z",
"assetValue": "103.235.199.20",
"serviceId": "cc5624827e7f744fc501f7632b1d227c4",
"port": 465,
"technologySlug": "lets-encrypt"
},
{
"id": "cf0dfd635e453d2744aa71b05aa099b79",
"cve": "CVE-2026-94054",
"severity": "high",
"cvssScore": 7,
"summary": "Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T20:05:02.929Z",
"assetValue": "103.235.199.20",
"serviceId": "cc5624827e7f744fc501f7632b1d227c4",
"port": 465,
"technologySlug": "lets-encrypt"
},
{
"id": "c35f513a592e24652029532a7fab72349",
"cve": "CVE-2026-94057",
"severity": "medium",
"cvssScore": 4,
"summary": "Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T20:04:52.605Z",
"assetValue": "103.235.199.20",
"serviceId": "c4ef2a89a595e33d6c29d568705917ba0",
"port": 587,
"technologySlug": "lets-encrypt"
},
{
"id": "ce2b5997c2cb7f8cf2430185ab7b8df20",
"cve": "CVE-2026-94056",
"severity": "high",
"cvssScore": 7.5,
"summary": "Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T20:04:52.603Z",
"assetValue": "103.235.199.20",
"serviceId": "c4ef2a89a595e33d6c29d568705917ba0",
"port": 587,
"technologySlug": "lets-encrypt"
},
{
"id": "c4bcd8c6831de5d50cc277cc0e2a5322c",
"cve": "CVE-2026-94055",
"severity": "low",
"cvssScore": 3.7,
"summary": "Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T20:04:52.601Z",
"assetValue": "103.235.199.20",
"serviceId": "c4ef2a89a595e33d6c29d568705917ba0",
"port": 587,
"technologySlug": "lets-encrypt"
},
{
"id": "c3309aae28c6e59ee43360f54c62c312c",
"cve": "CVE-2026-94054",
"severity": "high",
"cvssScore": 7,
"summary": "Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.",
"product": "Exim",
"version": "4.100",
"status": "potential",
"matchConfidence": "medium",
"evidence": "{\"match_reason\":\"keyword match on \\\"Exim 4.100\\\"\",\"note\":\"version-string match only; not a confirmed exposure\",\"observed_product\":\"Exim\",\"observed_version\":\"4.100\",\"source\":\"nvd\"}",
"detectedAt": "2026-09-22T20:04:52.600Z",
"assetValue": "103.235.199.20",
"serviceId": "c4ef2a89a595e33d6c29d568705917ba0",
"port": 587,
"technologySlug": "lets-encrypt"
}
],
"network": {
"id": "c59bc580416c523a0fc9de4dd3a71179a",
"prefix": "103.235.199.0/24",
"ipVersion": 4
},
"services": [
{
"id": "c167ef19ce9ecafce564d6d92ca92ade8",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"port": 21,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "ftp",
"product": "Pure-FTPd",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": "220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time is now 05:51. Server port: 21. 220-This is a private system - No anonymous login 220-IPv6 connections are also welcome on this server. 220 You will be disconnected after 15 minutes of inactivity.",
"state": "open",
"firstSeen": "2026-09-22T18:16:39.951Z",
"lastSeen": "2026-09-23T00:06:28.415Z",
"observationCount": 0,
"technologies": [
{
"slug": "pure-ftpd",
"name": "Pure-FTPd",
"category": "ftp-server",
"vendor": "Pure-FTPd",
"version": null,
"confidence": "high",
"evidence": "FTP banner: 220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time ...",
"detectedAt": "2026-09-22T18:16:39.955Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR2,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T18:16:39.957Z"
}
],
"certificate": {
"id": "c3dbb44766ded42a78960ed037b1903d8",
"sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"subject": "CN=phillips.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "phillips.mysecurecloudserver.com",
"notBefore": "2026-08-21T04:24:51.000Z",
"notAfter": "2026-11-19T04:24:50.000Z",
"sans": [
"phillips.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "c41cbd2381efd3e6c3cb80f0036ac5451",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"port": 22,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "ssh",
"product": "OpenSSH",
"productVersion": "9.9",
"tlsVersion": null,
"banner": "SSH-2.0-OpenSSH_9.9",
"state": "open",
"firstSeen": "2026-09-22T18:16:39.961Z",
"lastSeen": "2026-09-23T00:06:28.423Z",
"observationCount": 0,
"technologies": [
{
"slug": "openssh",
"name": "OpenSSH",
"category": "remote-access",
"vendor": "OpenBSD Project",
"version": "9.9",
"confidence": "high",
"evidence": "SSH banner: SSH-2.0-OpenSSH_9.9",
"detectedAt": "2026-09-23T00:06:28.425Z"
}
],
"certificate": null
},
{
"id": "c2ec984ca36c191f18d4cd2512bfb1249",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"port": 53,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "dns",
"product": null,
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T18:16:39.970Z",
"lastSeen": "2026-09-23T00:06:28.428Z",
"observationCount": 0,
"technologies": [],
"certificate": null
},
{
"id": "c834abb544aaee1d394fd6fc4c5e43085",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"port": 80,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "http",
"product": null,
"productVersion": null,
"tlsVersion": null,
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T18:16:39.975Z",
"lastSeen": "2026-09-23T00:06:28.430Z",
"observationCount": 0,
"technologies": [],
"certificate": null
},
{
"id": "ce7dddae4f9ac359a92c7774b03f85199",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"port": 110,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "pop3",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": "+OK Dovecot ready.",
"state": "open",
"firstSeen": "2026-09-22T18:16:39.979Z",
"lastSeen": "2026-09-23T00:06:28.434Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: +OK Dovecot ready.",
"detectedAt": "2026-09-22T18:16:39.981Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR2,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T18:16:39.984Z"
}
],
"certificate": {
"id": "c3dbb44766ded42a78960ed037b1903d8",
"sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"subject": "CN=phillips.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "phillips.mysecurecloudserver.com",
"notBefore": "2026-08-21T04:24:51.000Z",
"notAfter": "2026-11-19T04:24:50.000Z",
"sans": [
"phillips.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "c150ee52fcab888fe75a47a904fc24bc3",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"port": 143,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "imap",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": "* OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.",
"state": "open",
"firstSeen": "2026-09-22T18:16:39.988Z",
"lastSeen": "2026-09-23T00:06:28.442Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: * OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready...",
"detectedAt": "2026-09-22T18:16:39.991Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR2,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T18:16:39.994Z"
}
],
"certificate": {
"id": "c3dbb44766ded42a78960ed037b1903d8",
"sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"subject": "CN=phillips.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "phillips.mysecurecloudserver.com",
"notBefore": "2026-08-21T04:24:51.000Z",
"notAfter": "2026-11-19T04:24:50.000Z",
"sans": [
"phillips.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "c150b318b2b159b8b996dca2925b0347d",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"port": 443,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "https",
"product": null,
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": null,
"state": "open",
"firstSeen": "2026-09-22T18:16:39.997Z",
"lastSeen": "2026-09-23T00:06:28.450Z",
"observationCount": 0,
"technologies": [],
"certificate": {
"id": "c72cb042329171ca8f72a4f895e1dca79",
"sha256": "c4827d5d1addfd5bd4a379feddaa8335eefd90c68bf5ffade048c31f4f886f4c",
"subject": "CN=nestyhesty.net",
"issuer": "CN=nestyhesty.net",
"commonName": "nestyhesty.net",
"notBefore": "2026-04-24T08:40:17.000Z",
"notAfter": "2027-04-24T08:40:17.000Z",
"sans": [
"nestyhesty.net",
"www.nestyhesty.net",
"mail.nestyhesty.net",
"cpanel.nestyhesty.net",
"webmail.nestyhesty.net",
"webdisk.nestyhesty.net",
"cpcontacts.nestyhesty.net",
"cpcalendars.nestyhesty.net",
"autodiscover.nestyhesty.net"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "cc5624827e7f744fc501f7632b1d227c4",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"port": 465,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "smtps",
"product": "Exim",
"productVersion": "4.100",
"tlsVersion": "TLSv1.3",
"banner": "220-phillips.mysecurecloudserver.com ESMTP Exim 4.100 #2 Wed, 23 Sep 2026 05:51:10 +0545 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.",
"state": "open",
"firstSeen": "2026-09-22T18:16:40.001Z",
"lastSeen": "2026-09-23T00:06:28.453Z",
"observationCount": 0,
"technologies": [
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR2,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T18:16:40.010Z"
},
{
"slug": "exim",
"name": "Exim",
"category": "mail-server",
"vendor": "Exim Project",
"version": "4.100",
"confidence": "high",
"evidence": "SMTP banner: 220-phillips.mysecurecloudserver.com ESMTP Exim 4.100 #2 Wed, 23 Sep 2026 05:51:10 +0545 220-We do not authorize the u...",
"detectedAt": "2026-09-23T00:06:28.456Z"
}
],
"certificate": {
"id": "c3dbb44766ded42a78960ed037b1903d8",
"sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"subject": "CN=phillips.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "phillips.mysecurecloudserver.com",
"notBefore": "2026-08-21T04:24:51.000Z",
"notAfter": "2026-11-19T04:24:50.000Z",
"sans": [
"phillips.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "c4ef2a89a595e33d6c29d568705917ba0",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"port": 587,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "smtp-submission",
"product": "Exim",
"productVersion": "4.100",
"tlsVersion": "TLSv1.3",
"banner": "220-phillips.mysecurecloudserver.com ESMTP Exim 4.100 #2 Wed, 23 Sep 2026 05:51:12 +0545 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.",
"state": "open",
"firstSeen": "2026-09-22T18:16:40.014Z",
"lastSeen": "2026-09-23T00:06:28.463Z",
"observationCount": 0,
"technologies": [
{
"slug": "exim",
"name": "Exim",
"category": "mail-server",
"vendor": "Exim Project",
"version": "4.100",
"confidence": "high",
"evidence": "SMTP banner: 220-phillips.mysecurecloudserver.com ESMTP Exim 4.100 #2 Wed, 23 Sep 2026 05:51:12 +0545 220-We do not authorize the u...",
"detectedAt": "2026-09-23T00:06:28.466Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR2,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T18:16:40.019Z"
}
],
"certificate": {
"id": "c3dbb44766ded42a78960ed037b1903d8",
"sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"subject": "CN=phillips.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "phillips.mysecurecloudserver.com",
"notBefore": "2026-08-21T04:24:51.000Z",
"notAfter": "2026-11-19T04:24:50.000Z",
"sans": [
"phillips.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "c6b300f7fc1a8a1601bf990bff1e1e60e",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"port": 993,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "imaps",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": "* OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.",
"state": "open",
"firstSeen": "2026-09-22T18:16:40.023Z",
"lastSeen": "2026-09-23T00:06:28.472Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: * OK [CAPABILITY IMAP4rev1 LOGIN-REFERRALS ID ENABLE IDLE SASL-IR LITERAL+ AUTH=PLAIN AUTH=LOGIN] Dovecot ready.",
"detectedAt": "2026-09-22T18:16:40.026Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR2,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T18:16:40.029Z"
}
],
"certificate": {
"id": "c3dbb44766ded42a78960ed037b1903d8",
"sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"subject": "CN=phillips.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "phillips.mysecurecloudserver.com",
"notBefore": "2026-08-21T04:24:51.000Z",
"notAfter": "2026-11-19T04:24:50.000Z",
"sans": [
"phillips.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
},
{
"id": "cb1d00c7f9618d4eab9028e471d658e3d",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"port": 995,
"protocol": "tcp",
"transport": "tcp",
"serviceType": "pop3s",
"product": "Dovecot",
"productVersion": null,
"tlsVersion": "TLSv1.3",
"banner": "+OK Dovecot ready.",
"state": "open",
"firstSeen": "2026-09-22T18:16:40.033Z",
"lastSeen": "2026-09-23T00:06:28.481Z",
"observationCount": 0,
"technologies": [
{
"slug": "dovecot",
"name": "Dovecot",
"category": "mail-server",
"vendor": "Dovecot",
"version": null,
"confidence": "high",
"evidence": "IMAP banner: +OK Dovecot ready.",
"detectedAt": "2026-09-22T18:16:40.035Z"
},
{
"slug": "lets-encrypt",
"name": "Let's Encrypt",
"category": "certificate-authority",
"vendor": "Internet Security Research Group",
"version": null,
"confidence": "medium",
"evidence": "TLS certificate issuer: CN=YR2,O=Let's Encrypt,C=US",
"detectedAt": "2026-09-22T18:16:40.038Z"
}
],
"certificate": {
"id": "c3dbb44766ded42a78960ed037b1903d8",
"sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"subject": "CN=phillips.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "phillips.mysecurecloudserver.com",
"notBefore": "2026-08-21T04:24:51.000Z",
"notAfter": "2026-11-19T04:24:50.000Z",
"sans": [
"phillips.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
}
],
"certificates": [
{
"id": "c3dbb44766ded42a78960ed037b1903d8",
"sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"subject": "CN=phillips.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "phillips.mysecurecloudserver.com",
"notBefore": "2026-08-21T04:24:51.000Z",
"notAfter": "2026-11-19T04:24:50.000Z",
"sans": [
"phillips.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "c3dbb44766ded42a78960ed037b1903d8",
"sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"subject": "CN=phillips.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "phillips.mysecurecloudserver.com",
"notBefore": "2026-08-21T04:24:51.000Z",
"notAfter": "2026-11-19T04:24:50.000Z",
"sans": [
"phillips.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "c3dbb44766ded42a78960ed037b1903d8",
"sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"subject": "CN=phillips.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "phillips.mysecurecloudserver.com",
"notBefore": "2026-08-21T04:24:51.000Z",
"notAfter": "2026-11-19T04:24:50.000Z",
"sans": [
"phillips.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "c72cb042329171ca8f72a4f895e1dca79",
"sha256": "c4827d5d1addfd5bd4a379feddaa8335eefd90c68bf5ffade048c31f4f886f4c",
"subject": "CN=nestyhesty.net",
"issuer": "CN=nestyhesty.net",
"commonName": "nestyhesty.net",
"notBefore": "2026-04-24T08:40:17.000Z",
"notAfter": "2027-04-24T08:40:17.000Z",
"sans": [
"nestyhesty.net",
"www.nestyhesty.net",
"mail.nestyhesty.net",
"cpanel.nestyhesty.net",
"webmail.nestyhesty.net",
"webdisk.nestyhesty.net",
"cpcontacts.nestyhesty.net",
"cpcalendars.nestyhesty.net",
"autodiscover.nestyhesty.net"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "c3dbb44766ded42a78960ed037b1903d8",
"sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"subject": "CN=phillips.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "phillips.mysecurecloudserver.com",
"notBefore": "2026-08-21T04:24:51.000Z",
"notAfter": "2026-11-19T04:24:50.000Z",
"sans": [
"phillips.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "c3dbb44766ded42a78960ed037b1903d8",
"sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"subject": "CN=phillips.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "phillips.mysecurecloudserver.com",
"notBefore": "2026-08-21T04:24:51.000Z",
"notAfter": "2026-11-19T04:24:50.000Z",
"sans": [
"phillips.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "c3dbb44766ded42a78960ed037b1903d8",
"sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"subject": "CN=phillips.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "phillips.mysecurecloudserver.com",
"notBefore": "2026-08-21T04:24:51.000Z",
"notAfter": "2026-11-19T04:24:50.000Z",
"sans": [
"phillips.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
},
{
"id": "c3dbb44766ded42a78960ed037b1903d8",
"sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"subject": "CN=phillips.mysecurecloudserver.com",
"issuer": "CN=YR2,O=Let's Encrypt,C=US",
"commonName": "phillips.mysecurecloudserver.com",
"notBefore": "2026-08-21T04:24:51.000Z",
"notAfter": "2026-11-19T04:24:50.000Z",
"sans": [
"phillips.mysecurecloudserver.com"
],
"keyAlgo": "RSA",
"sigAlgo": "SHA256-RSA"
}
],
"recentObservations": [
{
"id": "ce5227d505476bb95ebb2df6289de8ebb",
"observedAt": "2026-09-23T00:04:45.051Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.9",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "c4827d5d1addfd5bd4a379feddaa8335eefd90c68bf5ffade048c31f4f886f4c",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
}
},
"reverse_dns": "phillips.mysecurecloudserver.com",
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"openssh",
"pure-ftpd"
]
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
465,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 11,
"reachable": true,
"reverse_dns": "phillips.mysecurecloudserver.com",
"ports_probed": 26,
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"openssh",
"pure-ftpd"
],
"open_services": 11,
"probe_duration": 30002
},
"contentHash": "e2367a429e618c91354c132b0828a3583e7956dd5df4d706c4e7b9578cef5ca3",
"changed": false
},
{
"id": "cf21f0ca10833e54ec07c6c37ad3ce099",
"observedAt": "2026-09-22T23:43:27.678Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.9",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "c4827d5d1addfd5bd4a379feddaa8335eefd90c68bf5ffade048c31f4f886f4c",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
}
},
"reverse_dns": "phillips.mysecurecloudserver.com",
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"openssh",
"pure-ftpd"
]
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
465,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 11,
"reachable": true,
"reverse_dns": "phillips.mysecurecloudserver.com",
"ports_probed": 26,
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"openssh",
"pure-ftpd"
],
"open_services": 11,
"probe_duration": 28047
},
"contentHash": "fa4d6b9246ccebabd124b5a76fbb36a36e4c8cd730f4f2eb55a5daf74463bdb7",
"changed": false
},
{
"id": "c42cef63a78cb572b87abc91f71806ae1",
"observedAt": "2026-09-22T20:08:14.546Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.9",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "c4827d5d1addfd5bd4a379feddaa8335eefd90c68bf5ffade048c31f4f886f4c",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
}
},
"reverse_dns": "phillips.mysecurecloudserver.com",
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"openssh",
"pure-ftpd"
]
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
465,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 11,
"reachable": true,
"reverse_dns": "phillips.mysecurecloudserver.com",
"ports_probed": 26,
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"openssh",
"pure-ftpd"
],
"open_services": 11,
"probe_duration": 52836
},
"contentHash": "35c30c4d4c4a377c7fc98011a478488b551ceaa8f210bd039deae87b19d17f36",
"changed": false
},
{
"id": "c51b9777174c0c7347283b464ebad4b7d",
"observedAt": "2026-09-22T19:46:55.037Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.9",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "c4827d5d1addfd5bd4a379feddaa8335eefd90c68bf5ffade048c31f4f886f4c",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
}
},
"reverse_dns": "phillips.mysecurecloudserver.com",
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"openssh",
"pure-ftpd"
]
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
465,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 11,
"reachable": true,
"reverse_dns": "phillips.mysecurecloudserver.com",
"ports_probed": 26,
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"openssh",
"pure-ftpd"
],
"open_services": 11,
"probe_duration": 51935
},
"contentHash": "2accffa7f70b4deb831d1173a82d906815986ff9100abaea9d48399a9f8217c9",
"changed": false
},
{
"id": "c53e27a757825185baa727c220c0fbb01",
"observedAt": "2026-09-22T18:16:40.042Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.9",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "c4827d5d1addfd5bd4a379feddaa8335eefd90c68bf5ffade048c31f4f886f4c",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
}
},
"reverse_dns": "phillips.mysecurecloudserver.com",
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"openssh",
"pure-ftpd"
]
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
465,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 11,
"reachable": true,
"reverse_dns": "phillips.mysecurecloudserver.com",
"ports_probed": 26,
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"openssh",
"pure-ftpd"
],
"open_services": 11,
"probe_duration": 29045
},
"contentHash": "e88923d6690fb459db53249ca52b8d0f3a8ad9978c14399122ed8958a81bdc3f",
"changed": true
},
{
"id": "cabb89823ecd80d3cc7151f4dd214cdde",
"observedAt": "2026-09-22T17:24:31.297Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "phillips.mysecurecloudserver.com"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "phillips.mysecurecloudserver.com",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 1
},
"contentHash": "337ec0977995024425e7ef5a1823939e2543ec72d34d0b7da9700a7c7e8afd74",
"changed": false
},
{
"id": "c8acca930d44aeeea21e55f1ccd6c26f7",
"observedAt": "2026-09-22T12:22:13.347Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "phillips.mysecurecloudserver.com"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "phillips.mysecurecloudserver.com",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 5
},
"contentHash": "fb711ae0fa9c6b7e46004596e5236a0a460fef425af593ffa9eb0ae823f2e797",
"changed": false
},
{
"id": "c13e3d744f63384d5bcab6d10967784d3",
"observedAt": "2026-09-22T11:58:18.552Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "phillips.mysecurecloudserver.com"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "phillips.mysecurecloudserver.com",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 0
},
"contentHash": "183f6b69e302f72cc5113dafb0a6fd52513f83ad5c1cc5b203c5eb03ea13bacf",
"changed": false
},
{
"id": "c68760094f8d34ebbf1411b583528fd14",
"observedAt": "2026-09-22T11:33:43.202Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "phillips.mysecurecloudserver.com"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "phillips.mysecurecloudserver.com",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 1
},
"contentHash": "593fe3103b8b00c152d065d684623a3a2fde9f838efbeeacb1e584eaa6b8e2cb",
"changed": false
},
{
"id": "cbe27c254a052f62dee45d7584f056a47",
"observedAt": "2026-09-22T07:48:45.192Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "phillips.mysecurecloudserver.com"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "phillips.mysecurecloudserver.com",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 1
},
"contentHash": "c4ba30b4e5c86a34b9c53b170c224349b7a5c296ee5366179f8d5c10d9f58178",
"changed": false
},
{
"id": "c7038d02a76ca6eb11bfccab7bd00a1bb",
"observedAt": "2026-09-22T07:24:13.635Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "phillips.mysecurecloudserver.com"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "phillips.mysecurecloudserver.com",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 0
},
"contentHash": "ef04224114d55a7da974622ca65c9bd3e2a9f38e6c081297a18a6470ee3da67c",
"changed": false
},
{
"id": "c427c76eaacfece7adcbf3de59c2b54f3",
"observedAt": "2026-09-22T06:44:02.728Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "phillips.mysecurecloudserver.com"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "phillips.mysecurecloudserver.com",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 69
},
"contentHash": "644061f092912b7b40e4e9ecf4e7e6d9bd6bfe7a70499f864680f41165509560",
"changed": false
},
{
"id": "cc8dcc475d588c541c851a463a6da34b2",
"observedAt": "2026-09-22T05:30:23.987Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "phillips.mysecurecloudserver.com"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "phillips.mysecurecloudserver.com",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 0
},
"contentHash": "140d724809ba056e9dfa085a48633f9e88e9c2333e97b30fed6e7b7ac3566582",
"changed": false
},
{
"id": "cdd6e4bb908d5131544902d561718ff91",
"observedAt": "2026-09-22T05:12:31.648Z",
"source": "fingerprint",
"collector": "fingerprint-1",
"confidence": "high",
"state": {
"reverse_dns": "phillips.mysecurecloudserver.com"
},
"evidence": {
"ports": [
21,
22,
23,
25,
53,
80,
110,
143,
443,
445,
587,
993,
995,
1433,
1521,
3306,
3389,
5432,
5900,
6379,
8080,
8443,
8888,
9200,
27017
],
"services": 0,
"reachable": false,
"reverse_dns": "phillips.mysecurecloudserver.com",
"ports_probed": 25,
"technologies": null,
"open_services": 0,
"probe_duration": 41
},
"contentHash": "d3b43fb2c2900d8dcc1dd967c90933d88d6a1d3d27e06da486c03b968d8595a9",
"changed": true
}
],
"recentChanges": [
{
"id": "cd4bafdcd717d599f0c8e0c050dc6ac79",
"changeType": "TECHNOLOGY_CHANGED",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"field": null,
"previousValue": null,
"currentValue": "dovecot, exim, lets-encrypt, openssh, pure-ftpd",
"detectedAt": "2026-09-22T18:16:40.061Z",
"significance": "low",
"severity": "info",
"confidence": null,
"detail": "technology detected: dovecot, exim, lets-encrypt, openssh, pure-ftpd",
"serviceId": null
},
{
"id": "ccd480ee2c7017cc05bb4deb8f4a18194",
"changeType": "NEW_SERVICE",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"field": "service:995/tcp",
"previousValue": null,
"currentValue": "Dovecot / TLSv1.3",
"detectedAt": "2026-09-22T18:16:40.060Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c7ba9fde32204a80b8ce57b53a29a299c",
"changeType": "NEW_SERVICE",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"field": "service:993/tcp",
"previousValue": null,
"currentValue": "Dovecot / TLSv1.3",
"detectedAt": "2026-09-22T18:16:40.058Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "cf713e6b609bb6ab866199d5c1faea95e",
"changeType": "NEW_SERVICE",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"field": "service:80/tcp",
"previousValue": null,
"currentValue": "http",
"detectedAt": "2026-09-22T18:16:40.057Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "cd152b48ed6a0dd83ea37b9dd6a8c0262",
"changeType": "NEW_SERVICE",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"field": "service:587/tcp",
"previousValue": null,
"currentValue": "Exim 4.100 / TLSv1.3",
"detectedAt": "2026-09-22T18:16:40.056Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c2c7fd16ac275c4fed135a5611f0b755c",
"changeType": "NEW_SERVICE",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"field": "service:53/tcp",
"previousValue": null,
"currentValue": "dns",
"detectedAt": "2026-09-22T18:16:40.053Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "cddf0cd7687c7fb38f933e796707d41dd",
"changeType": "NEW_SERVICE",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"field": "service:465/tcp",
"previousValue": null,
"currentValue": "Exim 4.100 / TLSv1.3",
"detectedAt": "2026-09-22T18:16:40.052Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c5cdaaa7a2a98d41496e5a9c501c3f47a",
"changeType": "NEW_SERVICE",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"field": "service:443/tcp",
"previousValue": null,
"currentValue": "TLSv1.3",
"detectedAt": "2026-09-22T18:16:40.050Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c589450f8e943d889340a6902a0e227d0",
"changeType": "NEW_SERVICE",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"field": "service:22/tcp",
"previousValue": null,
"currentValue": "OpenSSH 9.9",
"detectedAt": "2026-09-22T18:16:40.049Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "cb5b8739086f41bace4ab015b9d4d5553",
"changeType": "NEW_SERVICE",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"field": "service:21/tcp",
"previousValue": null,
"currentValue": "Pure-FTPd / TLSv1.3",
"detectedAt": "2026-09-22T18:16:40.048Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c90a007ff730914d36df88cc945a3b094",
"changeType": "NEW_SERVICE",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"field": "service:143/tcp",
"previousValue": null,
"currentValue": "Dovecot / TLSv1.3",
"detectedAt": "2026-09-22T18:16:40.046Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "cea31a667aac4fadbb3203718065ed2d2",
"changeType": "NEW_SERVICE",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"field": "service:110/tcp",
"previousValue": null,
"currentValue": "Dovecot / TLSv1.3",
"detectedAt": "2026-09-22T18:16:40.044Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "newly observed open endpoint",
"serviceId": null
},
{
"id": "c9472b09ab3c609ea431a4c1d8817c503",
"changeType": "NEW_ASSET",
"assetId": "cdff42b56d8e2577182e2a01c79d93f29",
"assetValue": null,
"field": null,
"previousValue": null,
"currentValue": "asset with no observed open endpoints",
"detectedAt": "2026-09-22T05:12:31.650Z",
"significance": "low",
"severity": "notice",
"confidence": null,
"detail": "asset observed for the first time",
"serviceId": null
}
],
"dnsRecords": [],
"state": {
"current": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.9",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "c4827d5d1addfd5bd4a379feddaa8335eefd90c68bf5ffade048c31f4f886f4c",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
}
},
"reverse_dns": "phillips.mysecurecloudserver.com",
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"openssh",
"pure-ftpd"
]
},
"previous": {
"services": {
"21/tcp": {
"state": "open",
"product": "Pure-FTPd",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "ftp"
},
"22/tcp": {
"state": "open",
"product": "OpenSSH",
"version": "9.9",
"cert_sha256": "",
"tls_version": "",
"service_type": "ssh"
},
"53/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "dns"
},
"80/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "",
"tls_version": "",
"service_type": "http"
},
"110/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "pop3"
},
"143/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "imap"
},
"443/tcp": {
"state": "open",
"product": "",
"version": "",
"cert_sha256": "c4827d5d1addfd5bd4a379feddaa8335eefd90c68bf5ffade048c31f4f886f4c",
"tls_version": "TLSv1.3",
"service_type": "https"
},
"465/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "smtps"
},
"587/tcp": {
"state": "open",
"product": "Exim",
"version": "4.100",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "smtp-submission"
},
"993/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "imaps"
},
"995/tcp": {
"state": "open",
"product": "Dovecot",
"version": "",
"cert_sha256": "275d65ce5750e4c6922e290d81e0782112a6c9492f6d8a55d1632651d368d642",
"tls_version": "TLSv1.3",
"service_type": "pop3s"
}
},
"reverse_dns": "phillips.mysecurecloudserver.com",
"technologies": [
"dovecot",
"exim",
"lets-encrypt",
"openssh",
"pure-ftpd"
]
},
"comparable": true
}
}