Conpot

6.0easy start · #16 of 18
in Honeypot Software

Runs on Linux, self-hosted.

Conpot is ranked #16 of 18 in honeypot software on The Geeks Club. It runs on Linux, Self-hosted.

Compared on honeypot software

Beelzebub 0 of 4 in the starter kit Lesson 17.5 OpenCanary 0 of 4 in the starter kit Lesson 27.3 Canarytokens 0 of 4 in the starter kit Lesson 37.0 Cowrie 0 of 4 in the starter kit Lesson 47.0 Heralding 0 of 4 in the starter kit Lesson 56.9 T-Pot 0 of 4 in the starter kit Lesson 66.9

Purpose: Conpot is an ICS honeypot intended to collect intelligence about adversaries targeting industrial control systems.
Emulation: The default profile emulates a Siemens S7-200 CPU and exposes MODBUS, HTTP, SNMP, and S7comm.
Deployment: Conpot can be run in Docker or installed on a host from PyPI or source.
Runtime requirement: The current host installation guide requires Python 3.10 or newer.
Customization: Users can create their own templates and change ports.
Safe file system: ConpotFS proxies files from a controlled location and avoids changing permissions on the actual file system.
Data sharing: Conpot includes HPFeeds support, which is not enabled by default, and shared data is provided as raw JSON.
Data access: The FAQ says users seeking shared Conpot data need an HPFriends account and must accept the share to create an auth key.
Security limitation: The project license states that the software is provided without warranty.
License: The repository identifies the project license as GPL-2.0.
Supported environment: The project metadata classifies Conpot as a console application for Linux/POSIX.
Intended audience: Project metadata lists developers as the intended audience.
Default emulation: The default profile emulates a Siemens S7-200 CPU with expansion modules and exposes Modbus, HTTP, SNMP, and s7comm.
Host requirement: The host installation guide says Conpot requires Python 3.10 or newer.

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.