GingerPot
Real-world security telemetry from an internet-facing T-Pot honeypot.
GingerPot collects and publishes summarized telemetry from an internet-facing T-Pot honeypot to explore security activity, detection engineering, and practical security operations.
What is GingerPot?
GingerPot is a security engineering project that operates an internet-facing T-Pot honeypot and publishes summarized telemetry through a lightweight serverless platform.
Rather than exposing Elasticsearch directly, telemetry is exported as lightweight JSON reports and served through a DigitalOcean Functions API.
Current Focus
Building practical security skills through operating internet-facing honeypots, investigating telemetry, and developing detection logic.
Current Activity
Connecting to honeypot...
These metrics summarize the last 24 hours of activity collected from the internet-facing honeypot. Explore the Live Dashboard for detailed telemetry and historical reports.
Featured Investigation
SMB Scan Spike on TCP/445
Investigated large-scale SMB scanning activity using T-Pot, Suricata, and ELK. Correlated telemetry across network events, session patterns, and source infrastructure.