#685·sniffnet

Identify suspicious connections and IP addresses

Author: GyulyVGCCreated Jan 24, 2025Updated Aug 25, 2026
Labelsenhancement

Identify suspicious connections and IP addresses:

  • such entries should be highlighted in:
    • the network host list in Overview page
    • the Inspect page table
  • a new notification kind should be added to warn about suspicious connections

Identification of suspicious IPs via blacklists has already been implemented. This issue wants to track the need to identify suspicious traffic with more advanced techniques such as deep packet inspection (DPI).