{"ip":"85.217.149.61","total_events":6128,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"modat","confidence":"high","network_type":null,"why":["Source IP is in a known scanner range (modat).","Known research and commercial scanners are labelled as such, not as threats."]},"first_seen":"2026-03-04T16:53:30","last_seen":"2026-07-03T11:09:10","events_24h":253,"events_7d":867,"geo":{"country_code":"CA","country_name":"Canada","region":"Quebec","city":"Beauharnois","lat":45.3161,"lon":-73.8736,"asn":209334,"org":"Modat B.V."},"source_domain":"o061.scanner.modat.io","known_scanners":["modat","Modat"],"scanner_tag":{"key":"modat","label":"Modat","category":"commercial","url":"https://modat.io/"},"cve_matches":[],"malware":[],"top_ports":[{"port":1553,"proto":"tcp","label":"","count":5},{"port":1718,"proto":"tcp","label":"","count":4},{"port":4271,"proto":"tcp","label":"","count":4},{"port":4166,"proto":"tcp","label":"","count":4},{"port":5523,"proto":"tcp","label":"","count":3},{"port":2107,"proto":"tcp","label":"","count":3},{"port":7359,"proto":"tcp","label":"","count":3},{"port":31072,"proto":"tcp","label":"","count":3},{"port":1260,"proto":"tcp","label":"","count":3},{"port":4085,"proto":"tcp","label":"","count":3},{"port":4236,"proto":"tcp","label":"","count":3},{"port":27876,"proto":"tcp","label":"","count":3},{"port":581,"proto":"tcp","label":"","count":3},{"port":4127,"proto":"tcp","label":"","count":3},{"port":10398,"proto":"tcp","label":"","count":3}],"fingerprints":{"ssh_hassh":["bc3aee897af7d3feb9fc37b89c7d15c9"],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9"],"tls_ja3":["35fa0a83e466acbec1cfbb9016d550ab"],"ja4h":["ge11nn0400_88d30a62b7ad"]},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":7208,"ge11nn0400_88d30a62b7ad":8003,"bc3aee897af7d3feb9fc37b89c7d15c9":121},"user_agents":["Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)"],"timeline":[{"date":"2026-04-05","count":1},{"date":"2026-04-06","count":12},{"date":"2026-04-07","count":5},{"date":"2026-04-08","count":1},{"date":"2026-04-09","count":135},{"date":"2026-04-10","count":15},{"date":"2026-04-11","count":35},{"date":"2026-04-12","count":2},{"date":"2026-04-16","count":19},{"date":"2026-04-17","count":15},{"date":"2026-04-19","count":31},{"date":"2026-04-20","count":26},{"date":"2026-04-21","count":5},{"date":"2026-05-01","count":13},{"date":"2026-05-02","count":200},{"date":"2026-05-03","count":74},{"date":"2026-05-04","count":44},{"date":"2026-05-05","count":5},{"date":"2026-05-06","count":8},{"date":"2026-05-07","count":7},{"date":"2026-05-09","count":19},{"date":"2026-05-10","count":124},{"date":"2026-05-11","count":50},{"date":"2026-05-12","count":1},{"date":"2026-05-13","count":1},{"date":"2026-05-17","count":7},{"date":"2026-05-19","count":301},{"date":"2026-05-20","count":94},{"date":"2026-05-21","count":6},{"date":"2026-05-22","count":6},{"date":"2026-05-23","count":66},{"date":"2026-05-24","count":55},{"date":"2026-05-25","count":37},{"date":"2026-05-26","count":79},{"date":"2026-05-27","count":22},{"date":"2026-05-29","count":104},{"date":"2026-05-30","count":4},{"date":"2026-06-01","count":5},{"date":"2026-06-02","count":42},{"date":"2026-06-03","count":54},{"date":"2026-06-04","count":4},{"date":"2026-06-06","count":43},{"date":"2026-06-07","count":5},{"date":"2026-06-08","count":7},{"date":"2026-06-09","count":55},{"date":"2026-06-10","count":236},{"date":"2026-06-11","count":112},{"date":"2026-06-12","count":57},{"date":"2026-06-13","count":1},{"date":"2026-06-14","count":16},{"date":"2026-06-15","count":4},{"date":"2026-06-17","count":323},{"date":"2026-06-18","count":30},{"date":"2026-06-19","count":52},{"date":"2026-06-20","count":116},{"date":"2026-06-21","count":16},{"date":"2026-06-22","count":392},{"date":"2026-06-23","count":292},{"date":"2026-06-24","count":336},{"date":"2026-06-25","count":35},{"date":"2026-06-26","count":167},{"date":"2026-06-27","count":2},{"date":"2026-06-29","count":26},{"date":"2026-06-30","count":10},{"date":"2026-07-01","count":134},{"date":"2026-07-02","count":256},{"date":"2026-07-03","count":439}],"recent_events":[{"timestamp":"2026-07-03T11:09:10","port":40799,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:s0ao8A7u+Ja8p9ltaeaGnJsPFcM=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"540f3371-1e6d-4271-934b-ddfb3b30346a","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T11:09:10","port":20137,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:CZxkTfp70Q1egx2kxa/NQlRVmgM=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"911bd8d7-c464-4ed3-ae0e-20d372b46314","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T11:09:10","port":57915,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:un0M1BNoXReYIk7vVBwIxYQ1Y3I=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"3ccd98fc-5260-4ac9-8018-5d0d4879fbf5","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T11:09:10","port":58373,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:ylJX8CfGQwcuq/zO/Z9kA7YFmHQ=","ja3":"","session":"6210a306-0826-456c-a3ca-a7aedcda0126","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T11:09:10","port":52722,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:SaIuEAL4RKNRa/979QPwjONI2c4=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"9cb0032f-7d98-4ed2-91fb-98c5450bacd9","seq":1,"duration_ms":103,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T11:09:10","port":34024,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:SAWqhxSXapqyxddO0FAqKmi5J9k=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"23c2cb91-d3e0-4de9-ba37-8a2bf916abfa","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T11:09:10","port":18493,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:tGxzNWcHlNYmnujrhehkWUN5N/w=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"77b2f0ea-a950-4904-b8ac-21a90e8aef9e","seq":1,"duration_ms":101,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T11:09:10","port":54425,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:+IQSQS8ewkIs2fw1CRGMStr6OHo=","ja3":"","session":"ca2f2f92-c7ac-42c1-be54-52e9c9998b38","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T11:09:10","port":52238,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:0EJdNpNkgiZ+yvTug4v6Y7MQC0M=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"34c9721e-9492-44c6-9fe0-5c6fc793e432","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-07-03T11:09:10","port":58047,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:iUaRAyqgLNwfpbzFlhUiUGngoFM=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"ee7ecee7-4572-4732-bf15-5939ef49ecac","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13}],"http_methods":[{"method":"GET","count":2482}],"distinct_ports_total":5517,"top_paths":[{"path":"/","count":2482,"ports":2413}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[{"value":"SSH-2.0-Go","count":1}],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-04T03:16:06.505848+00:00"}