Version History · MIRE/C³

This is the version history of The MIRE. Releases are typically monthly.

New to The MIRE? Start with Welcome to The MIRE.

2026.10 – October 2026

Live canary credentials. Some of the AWS keys, SSH keys, GitLab logins and session cookies The MIRE hands out are real Tracebit canaries that report any use. The long-lived kinds are shared over time, so the free quota is never exhausted, and the bait never breaks if Tracebit is unreachable.
The first bite, five minutes after harvest, and an alert feed joined back to who took each key: The Keys That Bite Back.
“Used” on the statistics page: canaries tried, by how many IPs, how soon after harvest, and what attackers went for.
Deep tarpit for debug paths (/dev, /test, /staging): crawlers that walk the tree are held longer the deeper they go, and the tree now ends.
Scanners no longer receive one fixed notice that could fingerprint The MIRE.
This site’s welcome page, rewritten.

Route gaps closed: bare directories, .php/.html scanner variants, doubled WordPress API prefixes, version-control siblings and open-proxy probes.
A maze for scrapers replaying lists of Chinese-titled URLs.
Decoy archives without duplicate entries.
A new neutral 404 page: “There is no spoon”.
Field reports: Patterns, not doors and The Polite Redirect.

Wider crawler interception, and a per-IP decoy budget: past it, a client keeps the delay but gets lighter decoys.
What 7’434 user-agents taught us.

The big update: new decoy routes, a tarpit for AI crawlers, and a move to gevent, so one worker holds thousands of slow connections.
Faster decoy generation, video-on-demand decoy fixes and capture of submitted credentials.
What 421’000 dead-ends taught us and ClaudeBot wasn’t alone.