||In recent years, the process of industrial development improved from complex to simple. The theory of automatic control also develops rapidly, and the level of automation technology is greatly enhanced. An Industrial control system (ICS) contains supervisory control and data acquisition (SCADA) systems, distributed control systems, and other configurations such as programmable logic controllers (PLC). ICS usually has its own network architecture, which is not connected to Ethernet. In order to be more standardized industrial development, ICS started|
to connect to Ethernet. For that, the hacker is able to use vulnerabilities to steal system information. The security problems of ICS gradually show up. In this thesis used a honeypot of ICS, Conpot, to monitor and collection information. Analyze the information which used SNMP connection and classified as management information scanning, device information scanning, and other information scanning.