Trendoday

Show HN: Coldframe, a honeypot that poses as a supermarket fridge controller

61 comments

  • Points209
  • Comments46
#9Rank now –
#9Peak rank
2Days on list
218Score · 7d
Nov 7, 2026First seen
Rank · 7 days

On Hacker News

I built Coldframe, a honeypot that pretends to be a supermarket refrigeration controller. Inspired by the events on industrial fridge installations in the past weeks, I wanted to see what people would try against a convincing fake. To learn more about this I built a honeypot that resembled perfectly the Danfoss AK-SM 800A and Dixell XWEB interfaces. Both of them are recognized on Shodan as real ones (an not as honeypots). It’s one Python file using only the standard library, and it builds on…

Points
209
Comments
46
Submitted by
hedgerow-dev
Posted
Nov 7, 2026
Site
github.com

Story details from Hacker News ↗ · linked article on github.com.

Trending history

Show HN: Coldframe, a honeypot that poses as a supermarket fridge controller was first seen on Hacker News · Front page on Nov 7, 2026. Since then it has appeared in 147 checks on 2 different days, across 3 lists (Hacker News · Front page, Hacker News · Show HN, Hacker News · Show HN · this week). Its best position was #9 of 30, reached on Nov 8, 11:54 UTC. It is #9 right now, holding steady at #9 over the last 6 checks.

Rank history

Position on Hacker News · Front page at every check (lower is better).

#1#11#20#30 17:3922:5404:0909:2414:39 Nov 7, 17:39 UTC · #29Nov 7, 17:54 UTC · #27Nov 7, 18:09 UTC · #26Nov 7, 18:24 UTC · #20Nov 7, 18:39 UTC · #12Nov 7, 18:54 UTC · #11Nov 7, 19:09 UTC · #11Nov 7, 19:24 UTC · #11Nov 7, 19:39 UTC · #11Nov 7, 19:54 UTC · #14Nov 7, 20:09 UTC · #13Nov 7, 20:24 UTC · #13Nov 7, 20:39 UTC · #14Nov 7, 20:54 UTC · #15Nov 7, 21:09 UTC · #15Nov 7, 21:24 UTC · #13Nov 7, 21:39 UTC · #15Nov 7, 21:54 UTC · #14Nov 7, 22:09 UTC · #13Nov 7, 22:24 UTC · #14Nov 7, 22:39 UTC · #14Nov 7, 22:54 UTC · #14Nov 7, 23:09 UTC · #12Nov 7, 23:24 UTC · #12Nov 7, 23:39 UTC · #12Nov 7, 23:54 UTC · #12Nov 8, 00:09 UTC · #11Nov 8, 00:24 UTC · #12Nov 8, 00:39 UTC · #11Nov 8, 00:54 UTC · #12Nov 8, 01:09 UTC · #12Nov 8, 01:24 UTC · #12Nov 8, 01:39 UTC · #11Nov 8, 01:54 UTC · #11Nov 8, 02:09 UTC · #12Nov 8, 02:24 UTC · #12Nov 8, 02:39 UTC · #13Nov 8, 02:54 UTC · #13Nov 8, 03:09 UTC · #12Nov 8, 03:24 UTC · #13Nov 8, 03:39 UTC · #12Nov 8, 03:54 UTC · #13Nov 8, 04:09 UTC · #11Nov 8, 04:24 UTC · #11Nov 8, 04:39 UTC · #12Nov 8, 04:54 UTC · #12Nov 8, 05:09 UTC · #11Nov 8, 05:24 UTC · #11Nov 8, 05:39 UTC · #11Nov 8, 05:54 UTC · #11Nov 8, 06:09 UTC · #13Nov 8, 06:24 UTC · #13Nov 8, 06:39 UTC · #13Nov 8, 06:54 UTC · #13Nov 8, 07:09 UTC · #13Nov 8, 07:24 UTC · #13Nov 8, 07:39 UTC · #13Nov 8, 07:54 UTC · #13Nov 8, 08:09 UTC · #13Nov 8, 08:24 UTC · #13Nov 8, 08:39 UTC · #14Nov 8, 08:54 UTC · #13Nov 8, 09:09 UTC · #13Nov 8, 09:24 UTC · #14Nov 8, 09:39 UTC · #13Nov 8, 09:54 UTC · #14Nov 8, 10:09 UTC · #12Nov 8, 10:24 UTC · #11Nov 8, 10:39 UTC · #11Nov 8, 10:54 UTC · #11Nov 8, 11:09 UTC · #10Nov 8, 11:24 UTC · #10Nov 8, 11:39 UTC · #10Nov 8, 11:54 UTC · #9Nov 8, 12:09 UTC · #9Nov 8, 12:24 UTC · #9Nov 8, 12:39 UTC · #10Nov 8, 12:54 UTC · #10Nov 8, 13:09 UTC · #10Nov 8, 13:24 UTC · #9Nov 8, 13:39 UTC · #9Nov 8, 13:54 UTC · #10Nov 8, 14:09 UTC · #9Nov 8, 14:24 UTC · #9Nov 8, 14:39 UTC · #9

Last 14 days

Best rank per day (UTC).

Oct 26today

Metric history

points as reported by Hacker News.

085170257 17:3922:5404:0909:2414:39 Nov 7, 17:39 UTC · 6Nov 7, 17:54 UTC · 15Nov 7, 18:09 UTC · 28Nov 7, 18:24 UTC · 42Nov 7, 18:39 UTC · 63Nov 7, 18:54 UTC · 71Nov 7, 19:09 UTC · 82Nov 7, 19:24 UTC · 84Nov 7, 19:39 UTC · 92Nov 7, 19:54 UTC · 102Nov 7, 20:09 UTC · 105Nov 7, 20:24 UTC · 110Nov 7, 20:39 UTC · 118Nov 7, 20:54 UTC · 123Nov 7, 21:09 UTC · 125Nov 7, 21:24 UTC · 133Nov 7, 21:39 UTC · 135Nov 7, 21:54 UTC · 143Nov 7, 22:09 UTC · 149Nov 7, 22:24 UTC · 153Nov 7, 22:39 UTC · 157Nov 7, 22:54 UTC · 163Nov 7, 23:09 UTC · 166Nov 7, 23:24 UTC · 172Nov 7, 23:39 UTC · 172Nov 7, 23:54 UTC · 174Nov 8, 00:09 UTC · 179Nov 8, 00:24 UTC · 181Nov 8, 00:39 UTC · 185Nov 8, 00:54 UTC · 185Nov 8, 01:09 UTC · 187Nov 8, 01:24 UTC · 191Nov 8, 01:39 UTC · 192Nov 8, 01:54 UTC · 193Nov 8, 02:09 UTC · 193Nov 8, 02:24 UTC · 193Nov 8, 02:39 UTC · 193Nov 8, 02:54 UTC · 195Nov 8, 03:09 UTC · 198Nov 8, 03:24 UTC · 198Nov 8, 03:39 UTC · 202Nov 8, 03:54 UTC · 202Nov 8, 04:09 UTC · 205Nov 8, 04:24 UTC · 206Nov 8, 04:39 UTC · 207Nov 8, 04:54 UTC · 207Nov 8, 05:09 UTC · 208Nov 8, 05:24 UTC · 208Nov 8, 05:39 UTC · 209Nov 8, 05:54 UTC · 209Nov 8, 06:09 UTC · 212Nov 8, 06:24 UTC · 213Nov 8, 06:39 UTC · 214Nov 8, 06:54 UTC · 216Nov 8, 07:09 UTC · 217Nov 8, 07:24 UTC · 218Nov 8, 07:39 UTC · 221Nov 8, 07:54 UTC · 223Nov 8, 08:09 UTC · 225Nov 8, 08:24 UTC · 227Nov 8, 08:39 UTC · 228Nov 8, 08:54 UTC · 229Nov 8, 09:09 UTC · 229Nov 8, 09:24 UTC · 231Nov 8, 09:39 UTC · 232Nov 8, 09:54 UTC · 234Nov 8, 10:09 UTC · 237Nov 8, 10:24 UTC · 238Nov 8, 10:39 UTC · 241Nov 8, 10:54 UTC · 243Nov 8, 11:09 UTC · 245Nov 8, 11:24 UTC · 245Nov 8, 11:39 UTC · 247Nov 8, 11:54 UTC · 247Nov 8, 12:09 UTC · 249Nov 8, 12:24 UTC · 249Nov 8, 12:39 UTC · 252Nov 8, 12:54 UTC · 253Nov 8, 13:09 UTC · 253Nov 8, 13:24 UTC · 254Nov 8, 13:39 UTC · 254Nov 8, 13:54 UTC · 255Nov 8, 14:09 UTC · 257Nov 8, 14:24 UTC · 257Nov 8, 14:39 UTC · 257

Where it trended

ListBestDaysChecksLast seen
Hacker News · Front page#9285
Hacker News · Show HN#1242
Hacker News · Show HN · this week#8220

From the discussion

A few top-level comments from Hacker News, shortened. Read the full thread on Hacker News.

I would be very skeptical of anyone relying on Shodan data. At one point I was trying to write honeypots myself by replicating wifi cameras, but almost all the ones on the internet I found were honeypots of some sort, and the ones that weren't were already hacked and had their web pages replaced. In retrospect it…

An extra insight, there was some news of 'blood banks' also being targetted. This is possibly a stronger (painful) target. It would demorelize people that are donors. https://www.independent.co.uk/tech/security/blood-hack-fridg...

One thing keeps coming back, (and it's the story of industries where security and patching is an afterthought). a supermarket has no security team. If a fridge controller needs patching, a VPN and a strong password to be safe, that work has to come from the vendor or installer by default. One would hope that all…

Questions

Is Show HN: Coldframe, a honeypot that poses as a supermarket fridge controller trending on Hacker News right now?

Yes. As of Nov 8, 14:39 UTC it is #9, holding steady at #9 over the last 6 checks.

What is the highest rank Show HN: Coldframe, a honeypot that poses as a supermarket fridge controller reached?

#9 on Hacker News · Front page, on Nov 8, 11:54 UTC. Trendoday checks this list every 15 minutes.

How long has Show HN: Coldframe, a honeypot that poses as a supermarket fridge controller been trending?

It was first seen on Nov 7, 2026 and has been on the list on 2 days (147 checks) since.

How much discussion did it get on Hacker News?

209 points and 46 comments; submitted by hedgerow-dev on Nov 7, 2026.