connection to TorProject every 10 mins

intelowlproject / IntelOwl

IntelOwl: manage your Threat Intelligence at scale

https://intelowlproject.github.io

GNU Affero General Public License v3.0

3.75k stars 425 forks source link

connection to TorProject every 10 mins #1133

Closed Sp-TT closed 2 years ago

Sp-TT commented 2 years ago

What happened

I can see IntelOwl sending request to [https://check.torproject.org/] every 10 mins in my environment. I disabled TorProject in analyzer config file and can still see this traffic.

Wondering is this a heartbeat traffic from IntelOwl? If it is, is there a way to disable it?

What did you expect to happen

How to reproduce your issue

Error messages and logs

0ssigeno commented 2 years ago

Hi! There is a celery cron that is executed inside celery every 10 minutes. Unfortunately, it does not check at the moment that its own analyzer is enabled. Since i can see why this is misleading, I will add this check, I will tag this Issue on the PR

mlodic commented 2 years ago

We fixed that. All those updaters won't work if you have disabled the related analyzer. Available from the next release.