From e761ffa059d1a5d5eeac81a356eb12506567ff5e Mon Sep 17 00:00:00 2001
From: 尹姜谊 <yinjiangyi@iie.ac.cn>
Date: Mon, 29 Jan 2024 19:07:02 +0800
Subject: Add: protonvpn serverip plugin

---
 config23.10.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

(limited to 'config23.10.yaml')

diff --git a/config23.10.yaml b/config23.10.yaml
index ea2445c..4b7ba86 100644
--- a/config23.10.yaml
+++ b/config23.10.yaml
@@ -158,3 +158,12 @@ windscribevpn_serverip:
     object_type: ip
     confidence: confirmed
     kb_sql: SELECT distinct domain FROM {$mariadb_dbname}.{$mariadb_domain_tablename} where vpn_service_name = 'windscribevpn'
+
+
+protonvpn_serverip:
+    vpn_service_name: protonvpn
+    plugin_id: 14
+    plugin_name: protonvpn_serverip
+    object_type: ip
+    confidence: confirmed
+    sql: SELECT common_server_ip, groupUniqArray(common_server_port) AS ports FROM {$db_name}.{$table_name} WHERE {$time_filter} AND (common_server_port IN (443, 7770, 8443, 88, 5060, 51820, 500, 80, 1224, 4500, 4569, 5060, 1194)) GROUP BY common_server_ip HAVING length(ports) > 10
\ No newline at end of file
-- 
cgit v1.2.3