Show HN: Coldframe, a honeypot that poses as a supermarket fridge controller
Coldframe is a honeypot that mimics a supermarket refrigeration controller to lure potential attackers and record their activities. It uses the standard library in Python and is inspired by recent attacks on industrial fridge installations. The honeypot mimics real Danfoss AK-SM 800A and Dixell XWEB interfaces, including their headers, page titles, and TLS versions. It recognizes exploit attempts, including CVE-2025-41450 and XWEB vulnerabilities, and records login attempts and control events. Two instances have been live for a day, with only generic scanners and Shodan's crawler interacting with them.
Read the full article at github.com →