{"ip":"85.217.140.28","total_events":10205,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"modat","confidence":"high","network_type":null,"why":["Source IP is in a known scanner range (modat).","Known research and commercial scanners are labelled as such, not as threats."]},"first_seen":"2026-02-16T20:13:27","last_seen":"2026-07-03T20:32:07","events_24h":71,"events_7d":2161,"geo":{"country_code":"FR","country_name":"France","region":"Hauts-de-France","city":"Gravelines","lat":50.9853,"lon":2.1311,"asn":209334,"org":"Modat B.V."},"source_domain":"o327.scanner.modat.io","known_scanners":["modat","Modat"],"scanner_tag":{"key":"modat","label":"Modat","category":"commercial","url":"https://modat.io/"},"cve_matches":[],"malware":[],"top_ports":[{"port":9888,"proto":"tcp","label":"","count":4},{"port":5006,"proto":"tcp","label":"","count":4},{"port":12443,"proto":"tcp","label":"","count":4},{"port":32310,"proto":"tcp","label":"","count":3},{"port":3024,"proto":"tcp","label":"","count":3},{"port":9351,"proto":"tcp","label":"","count":3},{"port":42069,"proto":"tcp","label":"","count":3},{"port":62053,"proto":"tcp","label":"","count":3},{"port":60020,"proto":"tcp","label":"","count":3},{"port":35355,"proto":"tcp","label":"","count":3},{"port":2503,"proto":"tcp","label":"","count":3},{"port":2785,"proto":"tcp","label":"","count":3},{"port":1266,"proto":"tcp","label":"","count":3},{"port":11046,"proto":"tcp","label":"","count":3},{"port":4443,"proto":"tcp","label":"","count":3}],"fingerprints":{"ssh_hassh":["bc3aee897af7d3feb9fc37b89c7d15c9"],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9"],"tls_ja3":["35fa0a83e466acbec1cfbb9016d550ab"],"ja4h":["ge11nn0400_88d30a62b7ad","ge11nn0100_4740ae6347b0"]},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":7209,"ge11nn0100_4740ae6347b0":719,"ge11nn0400_88d30a62b7ad":8011,"bc3aee897af7d3feb9fc37b89c7d15c9":121},"user_agents":["Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)"],"timeline":[{"date":"2026-04-06","count":10},{"date":"2026-04-07","count":39},{"date":"2026-04-09","count":1},{"date":"2026-04-10","count":6},{"date":"2026-04-11","count":83},{"date":"2026-04-12","count":3},{"date":"2026-04-15","count":60},{"date":"2026-04-16","count":26},{"date":"2026-04-17","count":11},{"date":"2026-04-19","count":22},{"date":"2026-04-20","count":25},{"date":"2026-04-21","count":74},{"date":"2026-04-27","count":7},{"date":"2026-05-02","count":67},{"date":"2026-05-03","count":6},{"date":"2026-05-05","count":101},{"date":"2026-05-06","count":71},{"date":"2026-05-07","count":22},{"date":"2026-05-08","count":1},{"date":"2026-05-09","count":2},{"date":"2026-05-10","count":109},{"date":"2026-05-11","count":26},{"date":"2026-05-13","count":1},{"date":"2026-05-15","count":10},{"date":"2026-05-17","count":1},{"date":"2026-05-18","count":16},{"date":"2026-05-19","count":87},{"date":"2026-05-20","count":168},{"date":"2026-05-21","count":50},{"date":"2026-05-22","count":5},{"date":"2026-05-23","count":3},{"date":"2026-05-24","count":43},{"date":"2026-05-25","count":66},{"date":"2026-05-26","count":66},{"date":"2026-05-27","count":89},{"date":"2026-05-28","count":14},{"date":"2026-05-29","count":102},{"date":"2026-05-30","count":22},{"date":"2026-05-31","count":54},{"date":"2026-06-01","count":44},{"date":"2026-06-02","count":165},{"date":"2026-06-03","count":24},{"date":"2026-06-04","count":24},{"date":"2026-06-05","count":16},{"date":"2026-06-07","count":36},{"date":"2026-06-08","count":49},{"date":"2026-06-09","count":939},{"date":"2026-06-10","count":17},{"date":"2026-06-11","count":512},{"date":"2026-06-12","count":278},{"date":"2026-06-13","count":125},{"date":"2026-06-14","count":14},{"date":"2026-06-15","count":3},{"date":"2026-06-16","count":27},{"date":"2026-06-17","count":35},{"date":"2026-06-18","count":567},{"date":"2026-06-19","count":51},{"date":"2026-06-20","count":1164},{"date":"2026-06-21","count":271},{"date":"2026-06-22","count":327},{"date":"2026-06-23","count":687},{"date":"2026-06-24","count":131},{"date":"2026-06-25","count":57},{"date":"2026-06-26","count":92},{"date":"2026-06-27","count":899},{"date":"2026-06-28","count":448},{"date":"2026-06-29","count":557},{"date":"2026-06-30","count":47},{"date":"2026-07-01","count":53},{"date":"2026-07-02","count":88},{"date":"2026-07-03","count":71}],"recent_events":[{"timestamp":"2026-07-03T20:32:07","port":48839,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:8GZMirvkp26eGllFncTm3SWgYkA=","ja3":"","session":"36a749c3-450e-4cea-822d-20e7ff6aa368","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T20:32:07","port":45289,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:kpV/HmoDr/Xzd5LUrXRmI8kLouU=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"85472f9c-5291-4d13-8c97-b87d2f48663c","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T20:32:07","port":63236,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:J5aEEMlHmt4105WNvsumhZBLLqI=","ja3":"","session":"169a0448-90b1-4209-a629-f09a8c6493b1","seq":1,"duration_ms":101,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T20:32:07","port":60571,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:xA6ApFbu45sOE5ZDFfZLOdg/vFs=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"cc1ecd47-1595-4bbd-b2b9-814825641ea6","seq":1,"duration_ms":102,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T20:32:07","port":14350,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:cF3C5uthc8VT9lFqxL0EuOdnYsI=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"f1561103-7b01-4ead-ae88-a48760aa2873","seq":1,"duration_ms":105,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T20:32:07","port":24505,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:XuwMyL3mH81/mubDvzoewNrZf6o=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"20cd67b1-085e-46fa-b8ab-d902133874a7","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T20:32:07","port":10344,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:XK2ePW0Z1iXy8vs85clj0mwi+ss=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"ef0097f0-38e1-498c-9e59-7ac6806063a9","seq":1,"duration_ms":101,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T20:32:07","port":47983,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:87/3nTFCkbZ8c4gy1qXWSLNVpiY=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"77564d2f-2a38-4d31-bc13-442df50e09f0","seq":1,"duration_ms":101,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T20:32:01","port":53255,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:E+622XaVgfh3r2+ficAihziy9/A=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"28d2a472-323e-4162-b483-cf45d8db100b","seq":1,"duration_ms":103,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T20:32:01","port":29305,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:zqyigJSO3meUxXvO03BgmdlNrwg=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"c38cb79e-d9f0-475e-a3c0-d3bcb084dc68","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13}],"http_methods":[{"method":"GET","count":5348}],"distinct_ports_total":9202,"top_paths":[{"path":"/","count":5348,"ports":5058}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[{"value":"bbb.ccc","count":46}],"top_alpns":[],"banners":[{"value":"SSH-2.0-Go","count":330}],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-04T00:23:15.656378+00:00"}