Introducing otpot: A Modern OT/ICS Honeypot (And What We Caught in the First 90 Minutes)
First, Some Context: What Is a Honeypot and Why Does It Matter? If you’ve spent your career on the OT side — programming PLCs, commissioning HMIs, integrating SCADA systems — cybersecurity might feel like someone else’s department. That’s changing fast, and if you’re reading this, you probably already know it. Here’s the simplest way I can explain a honeypot: it’s a trap. You set up a system that looks exactly like something an attacker would want to find — an exposed PLC, an unprotected SCADA gateway, an industrial device sitting on the internet. But it’s fake. Nothing real is connected to it. When an attacker finds it and starts probing, you’re watching everything they do. ...