What we know
A Python honeypot that listens on all TCP and UDP ports, emulating services such as SSH, telnet, SMTP, HTTP/HTTPS, SIP (with sipvicious scan detection), and a Netis router factory backdoor, logging unrecognized traffic in hexdump-like form.
Evidence limits
The described behavior (service emulation and scan detection) is as documented by the author and has not been independently verified.
Sources and provenance
- fabio-d/honeypot repository
repository-documentation · 2026-10-04
Reviewed: 2026-10-04. This record may change when new evidence is found.