LLMPot (momalab)

Status: Informative · evaluation proof
Upstream: https://github.com/momalab/LLMPot · commit 9568b5ffe6f3626c70078e53eacaac4a9fcf1b9e
Paper: arXiv:2405.05999 · HF sample: cv43/llmpot

LLM-based ICS honeypot (ByT5 Modbus/S7 emulation + WAGO PLC web decoy).

Protocol survey

Surface	UHBS plugin?	Graded?	Quick	Full
Modbus TCP	yes	yes (HF CPU lab adapter)	38.48 / F	55.24 / D
S7comm	yes	yes (Snap7 NoLogic gold)	45.53 / F	65.41 / D
HTTP WAGO WBM	yes	yes	45.84 / F	63.11 / D
Honeyd WAGO fingerprint (docker/)	partial	no	—	—

• Tutorial · Methodology

Named product is evaluation proof only — not a UHBS endorsement.