Catch attackers before they catch you. Mirror Trap runs a grid of fake services, classifies every probe with AI, fingerprints attacker behavior, and delivers real-time intelligence — all in one self-contained platform.
Every attacker interaction is captured, classified, and reported automatically. No manual analysis needed.
Ports 22, 80, 443, 3306, 5432, 6379, 8080, and 8443 serve realistic banners. Attackers see a real server, not a honeypot.
After three or more probes, the engine flags the attacker. AI classifies their type, tool, skill level, and likely objective.
Behavioral DNA is hashed from port sequence and timing. The same attacker using different IPs produces the same fingerprint.
Instant Telegram or email notifications. Weekly PDF reports with attacker breakdowns, top ports, and security recommendations.
Self-learning modules adjust trap placement based on attacker patterns. Each interaction makes the system smarter.
Not just another honeypot. Behavioral fingerprinting and AI classification separate signal from noise.
Fake SSH, HTTP, MySQL, PostgreSQL, Redis, and more all with realistic banners and responses.
DeepSeek-powered classification of attacker type, tool, skill level, and next move.
Same attacker switching VPNs gets the same behavioral hash. Track across IPs and sessions.
WebSocket-powered threat gauges, port heatmaps, and live attacker timeline.
Instant notifications with full classification and threat level delivered to your phone.
Auto-generated threat intelligence reports with attacker trends and session breakdowns.
Multi-layer fake internal network. Attackers explore for hours while you watch every move.
One-command Docker Compose deploy. Zero configuration, zero expertise required.
Full attacker database with search, filter, bulk operations, and live session logs.
Self-hosted is always free. Cloud plans for teams that want zero infrastructure to manage.
Choose your path.
| Component | Technology |
|---|---|
| Honeypot Engine | Python, Raw TCP Sockets, Threading |
| Dashboard | Flask, Socket.IO, Eventlet |
| Classifier | DeepSeek API |
| Alerts | Telegram Bot API |
| Database | SQLite |
| Reports | ReportLab, Weekly PDF Generation |
| Deployment | Docker, Docker Compose, Systemd |