{
  "category": "known",
  "description": "List containing IP's associated with the Modat scanners. This scanner CIDR range is extracted from CIRCL Network Telescope analysis on 2026/10/08",
  "list": [
    "212.73.148.0/32",
    "212.73.148.11/32",
    "212.73.148.14/32",
    "212.73.148.16/32",
    "212.73.148.2/32",
    "212.73.148.20/32",
    "212.73.148.22/32",
    "212.73.148.29/32",
    "212.73.148.4/31",
    "212.73.148.9/32",
    "31.14.32.4/30",
    "31.14.32.8/32",
    "57.129.64.10/32",
    "57.129.64.219/32",
    "57.129.64.237/32",
    "85.217.140.1/32",
    "85.217.140.16/28",
    "85.217.140.2/31",
    "85.217.140.32/28",
    "85.217.140.4/30",
    "85.217.140.48/30",
    "85.217.140.52/31",
    "85.217.140.54/32",
    "85.217.140.8/29",
    "85.217.149.1/32",
    "85.217.149.10/31",
    "85.217.149.13/32",
    "85.217.149.19/32",
    "85.217.149.20/30",
    "85.217.149.24/31",
    "85.217.149.26/32",
    "85.217.149.3/32",
    "85.217.149.32/27",
    "85.217.149.4/30",
    "85.217.149.64/29",
    "85.217.149.72/31",
    "85.217.149.74/32"
  ],
  "matching_attributes": [
    "ip-src",
    "ip-dst",
    "domain|ip",
    "ip-dst|port",
    "ip-src|port"
  ],
  "name": "Modat IP Ranges Used for Scanning",
  "type": "cidr",
  "version": 26100813
}