Coldframe

About

A low-interaction honeypot that imitates supermarket refrigeration controllers, specifically the Danfoss AK-SM 800A and Dixell XWEB 500. It logs connections, login attempts and requests matching known CVEs as JSON lines, and lets weak logins into a fake dashboard so defrost actions can be recorded. It is a single Python file using only the standard library, with optional Modbus TCP, and nothing behind it is real.