What we know
HFish is a free, community-oriented honeypot product developed by Beijing Microstep Online Technology Co., Ltd., aimed at enterprise scenarios such as internal lateral-movement detection, external threat perception, and intelligence generation. Its documentation states it supports over 90 honeypot service types, a B/S architecture with a server (管理端) and node/client (节点端) component, and multiple alert channels (email, syslog, webhook, WeChat Work, DingTalk, Feishu).
Evidence limits
The described capabilities and architecture come from the project's own documentation; no code was executed and the claims were not independently verified. Classification as a honeypot rests solely on the project's explicit documentation claims.
Sources and provenance
- hfish
repository-metadata-and-pinned-document · 2026-10-04
Reviewed: 2026-10-04. This record may change when new evidence is found.