tim
tim
@fynzhak The problem continues to occur for me too.
Can't we just use the GeoIP information already present in TPot?
Would you attach or send me the logs?
> They are dated March so I am not sure whether this was fixed. No, I do not think it is fixed. The model definition of the command sequences does...
> My speculation is that the deduplication does not happen sometimes because we dont always have the closing event from cowrie and the code did the deduplication there. Yes, that...
Maybe we could add a cleanup routine that deletes command sequences that are older than 1 day but do not have a `commands_hash` value (which means that they do not...
> UPDATE: I got 2 PRs already merged there !!! :) Cool! :) > About that, in the "likely to recur list", I found basically all the onyphe.net IP addresses...
Hey @IshaanXCoder ! Thank you for your contribution. :) I looked at your code and made a few comments. I really don't think we should use raw SQL in this...
Are you still working on this PR, @IshaanXCoder ?
No problem, take your time. Just wanted to make sure you're still interested.