Abstract: A honeypot identification method based on cyberspace mapping provides improved accuracy and efficiency of identifying a honeypot. One or more open ports corresponding to a target Internet Protocol address and a target open port for login are determined. Account login information of the target open port is acquired. A service of the target open port is logged into to acquire system environment information. Cyberspace mapping data is determined based on the one or more open ports, port fingerprint information of the one or more open ports, and the system environment information. A honeypot identification result of the target Internet Protocol address is obtained based on the cyberspace mapping data.