diff --git a/network/honeypot/conpot-siemens-honeypot-detect.yaml b/network/honeypot/conpot-siemens-honeypot-detect.yaml index 21da8a58ee..b827ba77dd 100644 --- a/network/honeypot/conpot-siemens-honeypot-detect.yaml +++ b/network/honeypot/conpot-siemens-honeypot-detect.yaml @@ -8,9 +8,11 @@ info: A Conpot (Siemens) honeypot has been identified. The response to a first packet of a connection attempt differs from real installations, signaling a possible deceptive setup. metadata: - max-request: 2 + max-request: 1 + verified: true vendor: conpot product: siemens + shodan-query: html:"Overview - Siemens, SIMATIC" tags: conpot,siemens,honeypot,ir,cti,network tcp: