summaryrefslogtreecommitdiff
path: root/config24.01.yaml
diff options
context:
space:
mode:
author尹姜谊 <[email protected]>2024-01-29 19:07:02 +0800
committer尹姜谊 <[email protected]>2024-01-29 19:07:02 +0800
commite761ffa059d1a5d5eeac81a356eb12506567ff5e (patch)
tree210daac71004c7003dda9a6fe0b16349745281fb /config24.01.yaml
parentca307fa4aa8286060919170f103f06327549d8d4 (diff)
Add: protonvpn serverip plugin
Diffstat (limited to 'config24.01.yaml')
-rw-r--r--config24.01.yaml11
1 files changed, 10 insertions, 1 deletions
diff --git a/config24.01.yaml b/config24.01.yaml
index 666f70f..543fb56 100644
--- a/config24.01.yaml
+++ b/config24.01.yaml
@@ -156,4 +156,13 @@ windscribevpn_serverip:
plugin_name: windscribevpn_serverip
object_type: ip
confidence: confirmed
- kb_sql: SELECT distinct domain FROM {$mariadb_dbname}.{$mariadb_domain_tablename} where vpn_service_name = 'windscribevpn' \ No newline at end of file
+ kb_sql: SELECT distinct domain FROM {$mariadb_dbname}.{$mariadb_domain_tablename} where vpn_service_name = 'windscribevpn'
+
+
+protonvpn_serverip:
+ vpn_service_name: protonvpn
+ plugin_id: 14
+ plugin_name: protonvpn_serverip
+ object_type: ip
+ confidence: confirmed
+ sql: SELECT server_ip, groupUniqArray(server_port) AS ports FROM {$db_name}.{$table_name} WHERE {$time_filter} AND (server_port IN (443, 7770, 8443, 88, 5060, 51820, 500, 80, 1224, 4500, 4569, 5060, 1194)) GROUP BY server_ip HAVING length(ports) > 10 \ No newline at end of file