What it is
The official cert.gt sensor is T-Pot, by Telekom Security, in distributed mode: cert.gt operates the central node and each contributor installs a sensor that sends it its events.
It is a honeypot with built-in intrusion detection. It only sees whoever attacks it, never your private traffic, so its data can be published in aggregate without exposing you.
Requirements: the standard T-Pot installation calls for 8–16 GB of RAM and a 128 GB SSD; those for Sensor mode will be confirmed before the download is published.
What you get
Your own dashboard
See what your sensor captures: events, status and top attackers.
Blocklist
Get the IPs that are attacking Guatemala so you can block them on your network.
Recognition
Appear in the public contributor ranking, under an alias if you prefer.
How to join
Step 1
Install T-Pot in Sensor mode
On a dedicated server or virtual machine, with a public IP or in a DMZ. The guide includes the commands.
Step 2
Request linking
Fill in the form on this page with the sensor's IP and your email.
Step 3
Receive the destination
We send you the central node's public key and the endpoint your sensor will send its events to.
Step 4
Start contributing
Your events appear on the live map and in the statistics, aggregated by department.
Request linking for your sensor
You can fill it in before or after installing. By installing the sensor you agree that the decoy's data may be published in aggregate form.