aau-network-security / HosTaGe

Low Interaction Mobile Honeypot
https://aau-network-security.github.io/HosTaGe/
MIT License
88 stars 30 forks source link

VPN/Proxy/Tor exit node detection #109

Open sastry17 opened 3 years ago

sastry17 commented 3 years ago

Is your feature request related to a problem? Please describe. To identify if the attacker is using a VPN/Proxy or a Tor exit node for better analysis of the attack.

Describe the solution you'd like Classifying the attacker IP into a VPN/Proxy/Tor exit node. Also we can check if an IP is a known blacklister.

Describe alternatives you've considered Can use the ipinfo api

Additional context

sastry17 commented 2 years ago

@gheisariyeh try to label traffic from Tor exit nodes