TODO log average websocket lifespan add interesting IP lookups * government IPs * tor exit nodes * reverse lookup, check for open 3128 port for potential proxy usage