Show HN: Coldframe, a honeypot that poses as a supermarket fridge controller
61 comments
- Points209
- Comments46
61 comments
I built Coldframe, a honeypot that pretends to be a supermarket refrigeration controller. Inspired by the events on industrial fridge installations in the past weeks, I wanted to see what people would try against a convincing fake. To learn more about this I built a honeypot that resembled perfectly the Danfoss AK-SM 800A and Dixell XWEB interfaces. Both of them are recognized on Shodan as real ones (an not as honeypots). It’s one Python file using only the standard library, and it builds on…
Story details from Hacker News ↗ · linked article on github.com.
Show HN: Coldframe, a honeypot that poses as a supermarket fridge controller was first seen on Hacker News · Front page on Nov 7, 2026. Since then it has appeared in 147 checks on 2 different days, across 3 lists (Hacker News · Front page, Hacker News · Show HN, Hacker News · Show HN · this week). Its best position was #9 of 30, reached on Nov 8, 11:54 UTC. It is #9 right now, holding steady at #9 over the last 6 checks.
Position on Hacker News · Front page at every check (lower is better).
Best rank per day (UTC).
points as reported by Hacker News.
| List | Best | Days | Checks | Last seen |
|---|---|---|---|---|
| Hacker News · Front page | #9 | 2 | 85 | |
| Hacker News · Show HN | #1 | 2 | 42 | |
| Hacker News · Show HN · this week | #8 | 2 | 20 |
A few top-level comments from Hacker News, shortened. Read the full thread on Hacker News.
I would be very skeptical of anyone relying on Shodan data. At one point I was trying to write honeypots myself by replicating wifi cameras, but almost all the ones on the internet I found were honeypots of some sort, and the ones that weren't were already hacked and had their web pages replaced. In retrospect it…
An extra insight, there was some news of 'blood banks' also being targetted. This is possibly a stronger (painful) target. It would demorelize people that are donors. https://www.independent.co.uk/tech/security/blood-hack-fridg...
One thing keeps coming back, (and it's the story of industries where security and patching is an afterthought). a supermarket has no security team. If a fridge controller needs patching, a VPN and a strong password to be safe, that work has to come from the vendor or installer by default. One would hope that all…
Archived daily, weekly and monthly lists that include this entry.
Yes. As of Nov 8, 14:39 UTC it is #9, holding steady at #9 over the last 6 checks.
#9 on Hacker News · Front page, on Nov 8, 11:54 UTC. Trendoday checks this list every 15 minutes.
It was first seen on Nov 7, 2026 and has been on the list on 2 days (147 checks) since.
209 points and 46 comments; submitted by hedgerow-dev on Nov 7, 2026.