pwnlandia / mhn

Modern Honey Network
GNU Lesser General Public License v2.1
2.42k stars 631 forks source link

Too much alerts #871

Open DreamRuthenium opened 5 months ago

DreamRuthenium commented 5 months ago

Looks like all spider behaviors and port scans will be captured by my cowrie/glastopf honeypots, and MHN reports all of them on the dashboard.

I hope the MHN only records invasive behaviors like file uploading, SQL injection, etc. What should I do? I'm flooded by fake alerts.