{"ip":"85.217.140.34","total_events":10762,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"modat","confidence":"high","network_type":null,"why":["Source IP is in a known scanner range (modat).","Known research and commercial scanners are labelled as such, not as threats."]},"first_seen":"2026-02-19T08:13:02","last_seen":"2026-07-03T15:21:36","events_24h":275,"events_7d":2891,"geo":{"country_code":"FR","country_name":"France","region":"Hauts-de-France","city":"Gravelines","lat":50.9853,"lon":2.1311,"asn":209334,"org":"Modat B.V."},"source_domain":"o333.scanner.modat.io","known_scanners":["modat","Modat"],"scanner_tag":{"key":"modat","label":"Modat","category":"commercial","url":"https://modat.io/"},"cve_matches":[],"malware":[],"top_ports":[{"port":18054,"proto":"tcp","label":"","count":5},{"port":18112,"proto":"tcp","label":"","count":4},{"port":33522,"proto":"tcp","label":"","count":4},{"port":9988,"proto":"tcp","label":"","count":4},{"port":2249,"proto":"tcp","label":"","count":4},{"port":8709,"proto":"tcp","label":"","count":4},{"port":2978,"proto":"tcp","label":"","count":4},{"port":24616,"proto":"tcp","label":"","count":4},{"port":7542,"proto":"tcp","label":"","count":4},{"port":5238,"proto":"tcp","label":"","count":4},{"port":10815,"proto":"tcp","label":"","count":3},{"port":39659,"proto":"tcp","label":"","count":3},{"port":2373,"proto":"tcp","label":"","count":3},{"port":851,"proto":"tcp","label":"","count":3},{"port":60705,"proto":"tcp","label":"","count":3}],"fingerprints":{"ssh_hassh":["bc3aee897af7d3feb9fc37b89c7d15c9"],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9"],"tls_ja3":["35fa0a83e466acbec1cfbb9016d550ab"],"ja4h":["ge11nn0400_88d30a62b7ad","ge11nn0100_4740ae6347b0"]},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":7212,"ge11nn0100_4740ae6347b0":720,"ge11nn0400_88d30a62b7ad":8010,"bc3aee897af7d3feb9fc37b89c7d15c9":121},"user_agents":["Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)"],"timeline":[{"date":"2026-04-05","count":19},{"date":"2026-04-06","count":1},{"date":"2026-04-07","count":6},{"date":"2026-04-08","count":2},{"date":"2026-04-09","count":35},{"date":"2026-04-10","count":18},{"date":"2026-04-11","count":35},{"date":"2026-04-15","count":57},{"date":"2026-04-19","count":6},{"date":"2026-04-20","count":25},{"date":"2026-04-21","count":34},{"date":"2026-04-22","count":8},{"date":"2026-04-26","count":18},{"date":"2026-04-27","count":1},{"date":"2026-05-02","count":14},{"date":"2026-05-05","count":85},{"date":"2026-05-06","count":3},{"date":"2026-05-07","count":74},{"date":"2026-05-08","count":9},{"date":"2026-05-10","count":133},{"date":"2026-05-11","count":28},{"date":"2026-05-13","count":1},{"date":"2026-05-14","count":1},{"date":"2026-05-15","count":3},{"date":"2026-05-16","count":2},{"date":"2026-05-17","count":1},{"date":"2026-05-18","count":2},{"date":"2026-05-19","count":119},{"date":"2026-05-20","count":92},{"date":"2026-05-21","count":60},{"date":"2026-05-22","count":7},{"date":"2026-05-23","count":51},{"date":"2026-05-24","count":67},{"date":"2026-05-25","count":39},{"date":"2026-05-26","count":30},{"date":"2026-05-27","count":90},{"date":"2026-05-28","count":5},{"date":"2026-05-29","count":94},{"date":"2026-05-30","count":313},{"date":"2026-05-31","count":10},{"date":"2026-06-01","count":4},{"date":"2026-06-02","count":1},{"date":"2026-06-03","count":187},{"date":"2026-06-04","count":8},{"date":"2026-06-05","count":11},{"date":"2026-06-06","count":18},{"date":"2026-06-07","count":2},{"date":"2026-06-08","count":28},{"date":"2026-06-09","count":419},{"date":"2026-06-10","count":232},{"date":"2026-06-11","count":306},{"date":"2026-06-12","count":223},{"date":"2026-06-13","count":26},{"date":"2026-06-14","count":676},{"date":"2026-06-15","count":205},{"date":"2026-06-16","count":81},{"date":"2026-06-17","count":266},{"date":"2026-06-18","count":49},{"date":"2026-06-19","count":708},{"date":"2026-06-20","count":294},{"date":"2026-06-21","count":46},{"date":"2026-06-22","count":107},{"date":"2026-06-23","count":783},{"date":"2026-06-24","count":147},{"date":"2026-06-25","count":556},{"date":"2026-06-26","count":13},{"date":"2026-06-27","count":79},{"date":"2026-06-28","count":340},{"date":"2026-06-29","count":976},{"date":"2026-06-30","count":106},{"date":"2026-07-01","count":329},{"date":"2026-07-02","count":773},{"date":"2026-07-03","count":275}],"recent_events":[{"timestamp":"2026-07-03T15:21:36","port":56984,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:WWUZlKXegSYKF5kKpw1Whxa7f5U=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"c7b0ba81-eddb-4ac8-a99e-f361a7e2f26e","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T15:21:20","port":57740,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:n8trS4fy+VVQCJp2e5BH/zGHR+U=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"1c1310d2-3ce5-47a7-b56f-fae5190d7408","seq":1,"duration_ms":101,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T15:21:20","port":63595,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:SNCtz+9k6KKeQAJphMkJEzohuAc=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"f5493233-07de-4f8e-8975-28ffabbafd16","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T15:21:18","port":52935,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:yTY5pSRTMffY0rP/NYUilc4v5DE=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"02e4a48b-0ab5-4b96-a011-b8e4df0b2369","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T15:21:17","port":59159,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:CMb3Z5xqwOwj87zkLCwESPvbZdo=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"21b1dd03-5d9c-46de-affc-a6a996743244","seq":1,"duration_ms":101,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T15:21:17","port":52339,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:8w4gC2bHhJXCeo+pQxlZLisstLA=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"04bcc411-77f9-45e4-8606-fe714cfc2822","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T15:21:17","port":64420,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:97e7GE1UAFs+2vvZWdhLsngwNMs=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"f320c1d3-dd3d-477b-b0a5-06c652c7880f","seq":1,"duration_ms":101,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T15:21:15","port":54950,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:pMlM2qbHv3B9eDHLjqUbbpFEU5w=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"647a0f7b-07fa-452d-87ed-a575f2cc43fe","seq":1,"duration_ms":101,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T15:21:15","port":63637,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:ZnXeh9++inIOLTKiQwJkGnUKc6A=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"7c860676-18c0-482a-8471-b32f84e51553","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T15:21:15","port":57529,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:rWjsRHn6yLNp2WzOnkMx3zhAjxQ=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"6a4226c7-7fe3-4b59-a2a9-02d67222deb4","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13}],"http_methods":[{"method":"GET","count":6310}],"distinct_ports_total":9573,"top_paths":[{"path":"/","count":6310,"ports":5893}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[{"value":"bbb.ccc","count":31}],"top_alpns":[],"banners":[{"value":"SSH-2.0-Go","count":93}],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-03T21:15:13.591485+00:00"}