About me

Hi, I’m Chirag. I work as a cyber security consultant in Australia, mostly on infrastructure and cloud security, with threat intelligence feeding into it. In plain terms: I keep an eye on what attackers are doing right now, then go and check whether the systems I’m responsible for would hold up if those same people knocked on the door.

I like the practical end of security. Reading about a new technique is fine, but I’d rather see it hit a honeypot, pull the logs apart and work out what a sensible defence looks like. Most of what I write here comes from that habit.

On the side I maintain a few open-source tools, including a threat intelligence feed built from my own honeypots and community blocklists. It began as a small experiment and somehow turned into something people actually use. The full list is on the Projects page.

This site is my notebook: field notes, tooling, the odd rant. Everything here is personal and does not represent any employer or client, past or present.

Away from the keyboard I’m usually tinkering with something in the home lab, reading far too widely, or trying to get slightly better at whatever caught my attention that month.

If any of that sounds like your kind of thing, say hello. Quiet readers are welcome too. 🙂

Elsewhere Link to heading

Honeypots Link to heading

I run a few honeypots and report what hits them to AbuseIPDB. The public feed built from that data is spydithreatintel.

AbuseIPDB contributor badge

Responsible disclosure Link to heading

This site is static files served from Cloudflare’s edge: no login, no database, not much to break. If you find something anyway, email me at the address above or use the details in security.txt. I will reply, and I will credit you here if you want that.