-
Keeping the Gateway Contained
Once the Gateway was showing me real traffic, the next problem was making sure it could…
-
What the First Traffic Looked Like
The first recorded traffic was not dramatic at first. Some connections appeared and disappeared within a…
-
The First Services
Once the Gateway was running on antiX, the next question was what to put on it.…
-
Setting Up the Gateway
Once I knew the old Gateway could still be useful, the next job was turning it…
-
The Dumpster Find
The next part of this story started with a computer I had almost forgotten about. Around…
-
From Alerts to Evidence
An alert is useful because it gets your attention. It is not evidence by itself. When…
-
A Honeypot Is Only as Good as Its Logs
Putting a honeypot online is the easy part. Before long, scanners will find it and the…
-
Setting Up the ESP32 Honeypot
In the previous posts, I showed the hardware, some of the activity it captured, and the…
-
What the ESP32 Honeypot Captured
Once I put the ESP32 honeypot online, I did not have to wait long for something…
-
Building the ESP32 Honeypot
The hardware behind the first honeypot was nothing exotic. It was an ESP32-S3 development board mounted…
