{"ip":"85.217.149.51","total_events":6431,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"modat","confidence":"high","network_type":null,"why":["Source IP is in a known scanner range (modat).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"payload","label":"Sustained payload","detail":"635,619 bytes sent","bytes_sent":635619,"session_seconds":7,"persistent":false}},"first_seen":"2026-03-04T21:07:08","last_seen":"2026-08-02T18:32:41","events_24h":111,"events_7d":463,"geo":{"country_code":"CA","country_name":"Canada","region":"Quebec","city":"Beauharnois","lat":45.3161,"lon":-73.8736,"asn":209334,"org":"Modat B.V."},"source_domain":"o051.scanner.modat.io","known_scanners":["modat","Modat"],"scanner_tag":{"key":"modat","label":"Modat","category":"commercial","url":"https://modat.io/"},"cve_matches":[],"malware":[],"top_ports":[{"port":53314,"proto":"tcp","label":"","count":3},{"port":8282,"proto":"tcp","label":"","count":3},{"port":12440,"proto":"tcp","label":"","count":3},{"port":5987,"proto":"tcp","label":"","count":3},{"port":9353,"proto":"tcp","label":"","count":3},{"port":12415,"proto":"tcp","label":"","count":3},{"port":9008,"proto":"tcp","label":"","count":3},{"port":7779,"proto":"tcp","label":"","count":3},{"port":31689,"proto":"tcp","label":"","count":3},{"port":1576,"proto":"tcp","label":"","count":3},{"port":25004,"proto":"tcp","label":"","count":3},{"port":3571,"proto":"tcp","label":"","count":3},{"port":12461,"proto":"tcp","label":"","count":3},{"port":1121,"proto":"tcp","label":"","count":3},{"port":15625,"proto":"tcp","label":"","count":3}],"fingerprints":{"ssh_hassh":["bc3aee897af7d3feb9fc37b89c7d15c9"],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9"],"tls_ja3":["35fa0a83e466acbec1cfbb9016d550ab"],"ja4h":["ge11nn0400_88d30a62b7ad"]},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":1535,"ge11nn0400_88d30a62b7ad":4709,"bc3aee897af7d3feb9fc37b89c7d15c9":7},"user_agents":["Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)"],"timeline":[{"date":"2026-05-05","count":2},{"date":"2026-05-06","count":2},{"date":"2026-05-08","count":1},{"date":"2026-05-09","count":19},{"date":"2026-05-10","count":137},{"date":"2026-05-11","count":109},{"date":"2026-05-12","count":2},{"date":"2026-05-16","count":10},{"date":"2026-05-17","count":1},{"date":"2026-05-18","count":2},{"date":"2026-05-19","count":267},{"date":"2026-05-20","count":92},{"date":"2026-05-21","count":9},{"date":"2026-05-22","count":2},{"date":"2026-05-26","count":33},{"date":"2026-05-27","count":29},{"date":"2026-05-28","count":2},{"date":"2026-05-29","count":16},{"date":"2026-05-30","count":10},{"date":"2026-06-02","count":25},{"date":"2026-06-03","count":50},{"date":"2026-06-04","count":24},{"date":"2026-06-05","count":9},{"date":"2026-06-06","count":32},{"date":"2026-06-07","count":44},{"date":"2026-06-08","count":5},{"date":"2026-06-09","count":56},{"date":"2026-06-10","count":4},{"date":"2026-06-11","count":675},{"date":"2026-06-12","count":15},{"date":"2026-06-13","count":32},{"date":"2026-06-15","count":63},{"date":"2026-06-16","count":3},{"date":"2026-06-17","count":172},{"date":"2026-06-18","count":27},{"date":"2026-06-19","count":106},{"date":"2026-06-20","count":4},{"date":"2026-06-21","count":55},{"date":"2026-06-22","count":70},{"date":"2026-06-23","count":71},{"date":"2026-06-24","count":21},{"date":"2026-06-25","count":650},{"date":"2026-06-26","count":1},{"date":"2026-06-27","count":37},{"date":"2026-06-30","count":340},{"date":"2026-07-01","count":161},{"date":"2026-07-02","count":63},{"date":"2026-07-03","count":12},{"date":"2026-07-05","count":105},{"date":"2026-07-07","count":158},{"date":"2026-07-09","count":7},{"date":"2026-07-10","count":213},{"date":"2026-07-11","count":450},{"date":"2026-07-12","count":54},{"date":"2026-07-13","count":53},{"date":"2026-07-14","count":106},{"date":"2026-07-21","count":60},{"date":"2026-07-23","count":3},{"date":"2026-07-28","count":1},{"date":"2026-07-29","count":9},{"date":"2026-07-30","count":218},{"date":"2026-07-31","count":50},{"date":"2026-08-01","count":76},{"date":"2026-08-02","count":109}],"recent_events":[{"timestamp":"2026-08-02T18:32:41","port":43134,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"00000000","payload_hex":"3030303030303030","method":"","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"275d6308-e9bc-41b0-8c95-9d10562ec061","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":13,"enriched":{"digest":"70352f41061eda4f","strings":["00000000"]}},{"timestamp":"2026-08-02T18:32:41","port":60835,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"00000000","payload_hex":"3030303030303030","method":"","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"df91c148-2bf4-4ea6-96f8-52f6f6d97d4d","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":13,"enriched":{"digest":"70352f41061eda4f","strings":["00000000"]}},{"timestamp":"2026-08-02T18:32:41","port":1709,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"00000000","payload_hex":"3030303030303030","method":"","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"95723738-45b8-45ab-b8f0-d4916362c979","seq":1,"duration_ms":101,"bytes_in":8,"bytes_out":13,"enriched":{"digest":"70352f41061eda4f","strings":["00000000"]}},{"timestamp":"2026-08-02T18:32:41","port":13506,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"00000000","payload_hex":"3030303030303030","method":"","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"6b33eade-0fbd-4b5a-b87a-fba30b8adb38","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":13,"enriched":{"digest":"70352f41061eda4f","strings":["00000000"]}},{"timestamp":"2026-08-02T18:32:41","port":2439,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"00000000","payload_hex":"3030303030303030","method":"","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"cc90bba4-bcea-4926-9284-e91a83a13080","seq":1,"duration_ms":101,"bytes_in":8,"bytes_out":13,"enriched":{"digest":"70352f41061eda4f","strings":["00000000"]}},{"timestamp":"2026-08-02T18:32:37","port":57102,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"00000000","payload_hex":"3030303030303030","method":"","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"8dfb3558-d932-471a-bab1-bbf2e9816b56","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":13,"enriched":{"digest":"70352f41061eda4f","strings":["00000000"]}},{"timestamp":"2026-08-02T18:32:37","port":40788,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"00000000","payload_hex":"3030303030303030","method":"","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"0dfe1712-11c1-4c11-bd47-8411d7e56a55","seq":1,"duration_ms":120,"bytes_in":8,"bytes_out":13,"enriched":{"digest":"70352f41061eda4f","strings":["00000000"]}},{"timestamp":"2026-08-02T18:32:37","port":25004,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"00000000","payload_hex":"3030303030303030","method":"","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"7f58dca7-5379-4232-8171-aaa7b5741db3","seq":1,"duration_ms":105,"bytes_in":8,"bytes_out":13,"enriched":{"digest":"70352f41061eda4f","strings":["00000000"]}},{"timestamp":"2026-08-02T18:32:37","port":58993,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"00000000","payload_hex":"3030303030303030","method":"","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"52bfefb3-07f6-4f79-9a5b-8aa3ebd3c4b2","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":13,"enriched":{"digest":"70352f41061eda4f","strings":["00000000"]}},{"timestamp":"2026-08-02T18:32:37","port":55798,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"00000000","payload_hex":"3030303030303030","method":"","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"a1714143-84bc-4552-910f-59ebd07d3af5","seq":1,"duration_ms":112,"bytes_in":8,"bytes_out":13,"enriched":{"digest":"70352f41061eda4f","strings":["00000000"]}}],"http_methods":[{"method":"GET","count":2657}],"distinct_ports_total":5964,"top_paths":[{"path":"/","count":2657,"ports":2547}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[{"value":"SSH-2.0-Go","count":147}],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-02T21:09:31.842297+00:00"}