- Home
- Honeypot Software
- MedPot
MedPot
What it is
MedPot is a self-hosted honeypot for Linux that emulates HL7 and FHIR services as an application-level decoy. The project documents running it with Go or a script, compiling it into a binary, and building a Docker container. Installation requires Go 1.17 or newer. By default, MedPot listens on port 2575 and writes logs to /var/log/medpot.log; command-line options can change both locations. Templates and configuration files are stored in /etc/medpot/. Example log records include a timestamp, port, IP address, message, level, and captured data. Another command-line option selects one of two boot logos. Docker is documented as a deployment choice, and no other product integrations are listed. MedPot is free and open source, with a listed price of free. Its README does not specify a narrower audience, support terms, security certifications, or compliance standards.
For and against
For
- Emulates HL7 and FHIR services.
- Can run from Go, a script, a binary, or Docker.
- Port and log location can be changed.
- Logs include connection and captured data details.
Against
- Requires Go 1.17 or newer for installation.
- Self-hosted Linux deployment is listed.
- No support terms are specified.
The verdict
MedPot provides a configurable HL7/FHIR decoy with several documented run and build options. Its fit depends on having a self-hosted Linux deployment and meeting its installation requirements.
Who it suits
MedPot suits people who need to deploy an HL7 or FHIR honeypot on Linux in a self-hosted environment. Its setup requires Go 1.17 or newer, or use of the documented Docker build process.
Plans and prices
MedPot
Open-source repository; Go 1.17 or newer required
Read 8 Oct 2026 · github.com
On the record
- Captured connection data
- The README's example log entry includes a message, time, port, IP address, and encoded data.github.com · read 4 Oct 2026
- Configuration
- Templates and configuration files are located at /etc/medpot/.github.com · read 8 Oct 2026
- Container
- The installation instructions include a script to build a Docker container.github.com · read 8 Oct 2026
- Customization
- A command-line argument lets users choose between two boot logos.github.com · read 4 Oct 2026
- Default port
- By default, MedPot attempts to bind and listen on port 2575.github.com · read 8 Oct 2026
- Go requirement
- Installation requires Go 1.17 or newer.github.com · read 4 Oct 2026
- Installation
- The project requires Go 1.17 or newer and provides instructions to run it or compile it into a binary.github.com · read 8 Oct 2026
- Integrations
- The maker's README documents Docker as a deployment option and does not list other product integrations.github.com · read 4 Oct 2026
- Intended use
- The project describes MedPot as an HL7/FHIR honeypot; it does not specify a narrower target audience.github.com · read 4 Oct 2026
- Intended users
- The project describes itself as an HL7 / FHIR honeypot; its README does not specify a narrower user group.github.com · read 8 Oct 2026
- Log data
- The README's example log record includes a timestamp, port, IP address, message, level, and captured data.github.com · read 8 Oct 2026
- Logging
- The README gives /var/log/medpot.log as the default log file location and says it can be changed with the -sll flag.github.com · read 8 Oct 2026
- Purpose
- MedPot is a honeypot that emulates HL7 / FHIR.github.com · read 8 Oct 2026
- Run and build
- The README documents running MedPot with Go or a script, compiling it into a binary, and building a Docker container.github.com · read 4 Oct 2026
- Runtime options
- Supported arguments include options to select a boot logo, change the listening port, and change the log location.github.com · read 8 Oct 2026
- Support and security details
- The repository README does not specify support terms, security certifications, or compliance standards.github.com · read 4 Oct 2026
