⬢github Python · 56 ★ +55 since we first saw it · pushed 19 h ago · MIT
hedgerow-dev/coldframe
Low-interaction honeypot for supermarket refrigeration controllers (Danfoss AK-SM 800A, Dixell XWEB 500)
Coldframe is a low-interaction honeypot that impersonates supermarket refrigeration controllers, specifically Danfoss AK-SM 800A and Dixell XWEB 500 supervisors. It logs who connects, passwords tried, and use of known CVEs, while offering fake dashboards and defrost controls so attackers believe they're hitting real equipment. It's a single dependency-free Python file emitting JSON event logs.
Why now: A Show HN post, following 2026 attacks on real European refrigeration systems via default passwords and unpatched firmware, is drawing attention to this freshly released tool.
Who it is for: ICS/threat-intelligence security researchers and defenders who want to detect and study attackers targeting industrial refrigeration infrastructure.
honeypotics-securitymodbusthreat-intelligence
Stars over our 134 snapshots: 1 to 56, since 1 d ago.
Where people talked about it
API: https://socialmediatrends-api.osmike.com/v1/repos/hedgerow-dev/coldframe