{"ip":"85.217.149.70","total_events":6024,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"modat","confidence":"high","network_type":null},"first_seen":"2026-03-04T16:29:17","last_seen":"2026-06-25T07:26:37","events_24h":0,"events_7d":1033,"geo":{"country_code":"CA","country_name":"Canada","region":"Quebec","city":"Beauharnois","lat":45.3161,"lon":-73.8736,"asn":209334,"org":"Modat B.V."},"source_domain":"o070.scanner.modat.io","known_scanners":["modat","Modat"],"scanner_tag":{"key":"modat","label":"Modat","category":"commercial","url":"https://modat.io/"},"cve_matches":[],"top_ports":[{"port":3290,"proto":"tcp","label":"","count":5},{"port":2347,"proto":"tcp","label":"","count":4},{"port":1505,"proto":"tcp","label":"","count":4},{"port":11,"proto":"tcp","label":"","count":4},{"port":2306,"proto":"tcp","label":"","count":4},{"port":2586,"proto":"tcp","label":"","count":3},{"port":427,"proto":"tcp","label":"","count":3},{"port":254,"proto":"tcp","label":"","count":3},{"port":48128,"proto":"tcp","label":"","count":3},{"port":3839,"proto":"tcp","label":"","count":3},{"port":12167,"proto":"tcp","label":"","count":3},{"port":9654,"proto":"tcp","label":"","count":3},{"port":21,"proto":"tcp","label":"FTP","count":3},{"port":7010,"proto":"tcp","label":"","count":3},{"port":864,"proto":"tcp","label":"","count":3}],"fingerprints":{"ssh_hassh":["bc3aee897af7d3feb9fc37b89c7d15c9"],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9"],"tls_ja3":["35fa0a83e466acbec1cfbb9016d550ab"],"ja4h":["ge11nn0400_88d30a62b7ad"]},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":5693,"ge11nn0400_88d30a62b7ad":7865,"bc3aee897af7d3feb9fc37b89c7d15c9":123},"user_agents":["Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)"],"timeline":[{"date":"2026-03-28","count":31},{"date":"2026-03-30","count":35},{"date":"2026-03-31","count":52},{"date":"2026-04-01","count":42},{"date":"2026-04-05","count":2},{"date":"2026-04-07","count":1},{"date":"2026-04-09","count":154},{"date":"2026-04-10","count":58},{"date":"2026-04-11","count":96},{"date":"2026-04-12","count":4},{"date":"2026-04-16","count":41},{"date":"2026-04-18","count":2},{"date":"2026-04-19","count":21},{"date":"2026-04-20","count":134},{"date":"2026-04-27","count":17},{"date":"2026-04-30","count":315},{"date":"2026-05-02","count":46},{"date":"2026-05-03","count":35},{"date":"2026-05-04","count":8},{"date":"2026-05-05","count":103},{"date":"2026-05-06","count":3},{"date":"2026-05-07","count":7},{"date":"2026-05-08","count":1},{"date":"2026-05-09","count":2},{"date":"2026-05-10","count":72},{"date":"2026-05-11","count":52},{"date":"2026-05-13","count":1},{"date":"2026-05-15","count":5},{"date":"2026-05-16","count":28},{"date":"2026-05-17","count":63},{"date":"2026-05-19","count":122},{"date":"2026-05-20","count":49},{"date":"2026-05-21","count":43},{"date":"2026-05-22","count":10},{"date":"2026-05-23","count":88},{"date":"2026-05-24","count":162},{"date":"2026-05-25","count":69},{"date":"2026-05-26","count":45},{"date":"2026-05-27","count":23},{"date":"2026-05-28","count":3},{"date":"2026-05-29","count":62},{"date":"2026-05-30","count":8},{"date":"2026-05-31","count":7},{"date":"2026-06-03","count":183},{"date":"2026-06-04","count":20},{"date":"2026-06-05","count":1},{"date":"2026-06-06","count":70},{"date":"2026-06-07","count":2},{"date":"2026-06-08","count":2},{"date":"2026-06-09","count":127},{"date":"2026-06-10","count":65},{"date":"2026-06-11","count":75},{"date":"2026-06-12","count":132},{"date":"2026-06-13","count":249},{"date":"2026-06-14","count":11},{"date":"2026-06-15","count":25},{"date":"2026-06-16","count":227},{"date":"2026-06-17","count":173},{"date":"2026-06-18","count":653},{"date":"2026-06-19","count":188},{"date":"2026-06-20","count":31},{"date":"2026-06-21","count":235},{"date":"2026-06-22","count":204},{"date":"2026-06-23","count":110},{"date":"2026-06-24","count":34},{"date":"2026-06-25","count":360}],"recent_events":[{"timestamp":"2026-06-25T07:26:37","port":52130,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:XyKGRGV9Ob0j2GG1uao/PzG/Zec=","ja3":"","session":"3837e3bf-1a4f-49c4-8eb1-e08018cb84bc","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-06-25T07:26:36","port":52522,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:52522\",\"user-agent\":\"Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a35323532320d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b204d6f6461745363616e6e65722f312e323b202b68747470733a2f2f6d6f6461742e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)","community_id":"1:lrcZybKxqq6njZDRfd2XF0TAYqA=","ja3":"","session":"d900800d-5d69-46ce-8ed9-517f136ad9af","seq":1,"duration_ms":100,"bytes_in":156,"bytes_out":78},{"timestamp":"2026-06-25T01:19:19","port":65060,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:8+WnkL4wapb6hEw57G72Iw7TIyA=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"374f972a-9724-4997-9ea0-d9d176c1cef1","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-06-25T01:19:19","port":64433,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:sgpT+Vb5dxQI8z/qeNMAMLfyViE=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"d1a3ea2d-d5c3-49e4-a83d-c962d4235c70","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-06-25T01:19:19","port":63460,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:E+waj16tMYaXebZV8RUgtRjXpvA=","ja3":"","session":"3a8ff047-3ab2-4bb2-8b21-6c98944d245b","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-06-25T01:19:19","port":63318,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\n","payload_hex":"0a","method":"","user_agent":"","community_id":"1:zTODKwUe5Tr85K6hIakHleh5UUc=","ja3":"","session":"40f471a9-b6d1-4667-ae4d-034ac8107277","seq":1,"duration_ms":100,"bytes_in":1,"bytes_out":13},{"timestamp":"2026-06-25T01:19:14","port":14182,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:14182\",\"user-agent\":\"Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31343138320d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b204d6f6461745363616e6e65722f312e323b202b68747470733a2f2f6d6f6461742e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)","community_id":"1:ew57CXqHLCDgE0oDlT5RRN8qwWc=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"85167dde-77a3-4e45-85bc-bbadb2688627","seq":1,"duration_ms":100,"bytes_in":156,"bytes_out":78},{"timestamp":"2026-06-25T01:19:14","port":50908,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:50908\",\"user-agent\":\"Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a35303930380d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b204d6f6461745363616e6e65722f312e323b202b68747470733a2f2f6d6f6461742e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)","community_id":"1:COhdEHsODXRzoXm8WOXl8GjvSLo=","ja3":"","session":"51109c3f-f19e-4b12-b3e5-22763068b101","seq":1,"duration_ms":102,"bytes_in":156,"bytes_out":78},{"timestamp":"2026-06-25T01:19:14","port":50287,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:50287\",\"user-agent\":\"Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a35303238370d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b204d6f6461745363616e6e65722f312e323b202b68747470733a2f2f6d6f6461742e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)","community_id":"1:7ccA4ScHsChFMFZ8IBwSJo22TY4=","ja3":"","session":"255c5a6f-1fc9-4c3d-b7a4-69a4e50f4be9","seq":1,"duration_ms":101,"bytes_in":156,"bytes_out":78},{"timestamp":"2026-06-25T01:19:14","port":64752,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:64752\",\"user-agent\":\"Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a36343735320d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b204d6f6461745363616e6e65722f312e323b202b68747470733a2f2f6d6f6461742e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)","community_id":"1:T0UC6uv4LmvJgb5QTswCD7gX5jw=","ja3":"","session":"0440de53-117a-4dc5-9a3c-84d845ab7a4e","seq":1,"duration_ms":101,"bytes_in":156,"bytes_out":78}],"http_methods":[{"method":"GET","count":2277}],"distinct_ports_total":5480,"top_paths":[{"path":"/","count":2277,"ports":2204}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[{"value":"SSH-2.0-Go","count":11}],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:52522","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)","notable":false}],"distinct_sets":1,"events_with_headers":5},"tags":[],"data_as_of":"2026-06-26T15:54:51.071612+00:00"}