25launches

The first launch of Coldframe.

Coldframe page

Coldframe

Launched Nov 10, 2026

A honeypot that poses as a supermarket fridge controller

Hunted by IlyasHunter
Visit github.com (opens in a new tab)

Coldframe is a low-interaction honeypot that impersonates supermarket refrigeration controllers, the kind hit by recent attacks on European stores. It mimics a Danfoss AK-SM 800A or a Copeland/Dixell XWEB supervisor, with optional fake Modbus temperatures, and logs every login, command and known-exploit attempt as JSON lines, tagged by CVE. It never runs commands or forwards traffic. One Python file, standard library only. MIT.

FreeOpen SourceDeveloper Tools
1

▲ 0 upvotes

Meet the team

Hunted by Ilyas. The makers are not on 25launches yet.

H (Hunter)
  • Coldframe screenshot 1
  • Coldframe screenshot 2

Discussion 1

Ask questions, give feedback. Comments don't count in the ranking.

Sign in to join the discussion.

  • IlyasHunter Pinned

    After the fridge attacks on European supermarkets, someone built the bait. Coldframe is a great way to learn how OT attacks actually look in the wild, in a single dependency-free Python file you can read in one sitting.