HoneyLabs
iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

tag=modat

132 unique IPs · 201.3K events · 3 countries · 2 ASNs

Activity · last 7d

2026-07-01: 2.8K events2026-07-02: 32.8K events2026-07-03: 22.1K events2026-07-04: 20.4K events2026-07-05: 20.0K events2026-07-06: 26.7K events2026-07-07: 44.2K events2026-07-08: 32.3K events

peak 44.2K on 2026-07-07

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP10080GET /
UA: Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)
137.7K · 131 IPs85.217.149.8 →
TLS162440a63.5K · 132 IPs85.217.140.41 →
SMTP21/FTPHELO5 · 4 IPs85.217.149.35 →
Redis16379*1 $4 PING5 · 5 IPs85.217.140.54 →
SMTP25/SMTPEHLO4 · 4 IPs85.217.149.35 →
Redis16379*1 $4 QUIT4 · 4 IPs85.217.140.54 →
Redis16379*1 $4 INFO4 · 4 IPs85.217.140.54 →
Redis16379*1 $11 NONEXISTENT4 · 4 IPs85.217.140.54 →
SSH22/SSHSSH-2.0-Go ,'�H;�����9��v��curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellm…185.217.140.30 →
SSH22/SSHSSH-2.0-Go ,�<y7ʃd0T���r�curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellma…131.14.32.6 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.