summaryrefslogtreecommitdiff
path: root/config24.01.yaml
diff options
context:
space:
mode:
author尹姜谊 <[email protected]>2024-01-23 11:18:07 +0800
committer尹姜谊 <[email protected]>2024-01-23 11:18:07 +0800
commit726c64c1d5d22ccbdd0f42883e4139ca94de578d (patch)
tree7e968d10f98a0542f6bdc8d40c75040c16fae22d /config24.01.yaml
parentd338c06998d3051d3019a4b1c7ef468d43a85bf7 (diff)
Add: vpnunlimited_serverip plugin
Diffstat (limited to 'config24.01.yaml')
-rw-r--r--config24.01.yaml12
1 files changed, 11 insertions, 1 deletions
diff --git a/config24.01.yaml b/config24.01.yaml
index 448dbeb..b342454 100644
--- a/config24.01.yaml
+++ b/config24.01.yaml
@@ -128,4 +128,14 @@ turbovpn_serverip:
confidence: confirmed
security_table_name: security_event
security_policy_id: 3847
- sql: SELECT server_ip FROM {$db_name}.{$security_table_name} WHERE {$time_filter} AND has(security_rule_list, {$security_policy_id}) AND server_port IN (66, 109, 8080, 97, 94, 92, 21, 25) GROUP BY server_ip having length(groupUniqArray(server_port))>3 \ No newline at end of file
+ sql: SELECT server_ip FROM {$db_name}.{$security_table_name} WHERE {$time_filter} AND has(security_rule_list, {$security_policy_id}) AND server_port IN (66, 109, 8080, 97, 94, 92, 21, 25) GROUP BY server_ip having length(groupUniqArray(server_port))>3
+
+
+vpnunlimited_serverip:
+ vpn_service_name: vpnunlimited
+ plugin_id: 11
+ plugin_name: vpnunlimited_serverip
+ object_type: ip
+ confidence: confirmed
+ sql: SELECT DISTINCT server_ip FROM {$db_name}.{$table_name} WHERE {$time_filter} AND server_domain in ({$domain_list})
+ domains: hurriwhilealivo.club, comcatches.live, cyphyl.com, chinacitybit.click, valarre.com, puppyfood.info, securestartup.business, beansandchips.com, zigzagwand.art, wifimeshnet.cc, atomicspike.art, fastwaterblog.com, aspheric-zombies.club, godzillo.link, cyberroast.shop, seligmania-online.com, easy-2fa.us, ikitoshi.cc, webcitynews.com, prebreeze.club, blackbettyclothing.com, cyberanalytics.link, musicinst.link, adsoasis.xyz, holidayphoto.xyz, graphlist.dev, nohumguitar.com, coffeedaybreak.com, thewalruss.net, learnjapanfilms.cc, ezhyperlix.xyz, statsnet.group, hockeybet.org, fastblazingpix.com, zapp-a-weasel.live