# Building a Fake Solar Plant for Cybersecurity Research — Part 3

Page: https://stenobird.com/podcast/cybersecurity-tech-brief-by-hackernoon-6365646/building-a-fake-solar-plant-for-cybersecurity-research-part-3
Text version: https://stenobird.com/podcast/cybersecurity-tech-brief-by-hackernoon-6365646/building-a-fake-solar-plant-for-cybersecurity-research-part-3.md
Podcast: [Cybersecurity Tech Brief By HackerNoon](https://stenobird.com/podcast/cybersecurity-tech-brief-by-hackernoon-6365646)
Published: 2026-06-20T16:00:58+00:00
Episode link: https://share.transistor.fm/s/ba24b461
Audio file: https://media.transistor.fm/ba24b461/9c4e060a.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/cybersecurity-tech-brief-by-hackernoon-6365646/episodes/building-a-fake-solar-plant-for-cybersecurity-research-part-3
Duration seconds: 1506

## Resource

This story was originally published on HackerNoon at: https://hackernoon.com/building-a-fake-solar-plant-for-cybersecurity-research-part-3 . Defensive lessons from an exposed ICS/IoT honeypot: keep OT protocols private, block egress, kill default credentials, segment networks, and log behaviour. Check more stories related to cybersecurity at: https://hackernoon.com/c/cybersecurity . You can also check exclusive content about #cybersecurity , #ot-security , #ics-security , #honeypot , #network-security , #devsecops , #mitre-attack , #hackernoon-top-story , and more. This story was written by: @arizh0 . Learn more about this writer by checking @arizh0's about page, and for more stories, please visit hackernoon.com . An exposed energy-themed honeypot gets discovered in under an hour, then faces continuous brute force, web scanning, and protocol-aware Modbus reconnaissance, with zero write or control attempts. Part 3 turns those findings into defence. The same structural controls that stop commodity scanning also shrink the targeted tail: keep OT protocols and management planes off the public internet, block egress by default, remove default credentials, segment IT from OT, and log behaviour instead of bare port contact. Most of it is network architecture, not detection wizardry.

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/cybersecurity-tech-brief-by-hackernoon-6365646/episodes/building-a-fake-solar-plant-for-cybersecurity-research-part-3/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/cybersecurity-tech-brief-by-hackernoon-6365646/building-a-fake-solar-plant-for-cybersecurity-research-part-3.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.