HoneyDB Updates

New Endpoint for IBM Cloud IP Ranges

2024-02-14T02:55:44.263Z

Adding to the Datacenter helper endpoint, IBM Cloud IP ranges is now available.

See details here https://honeydb.io/threats#datacenter

New API Endpoint for Payload History

2022-11-28T15:12:29.149Z

new endpoint has been added to the HoneyDB Threat Info API. The “Payload History” endpoint provides access to historical payload data going back to 2014. For more details see the introduction write up on this endpoint here https://deception.substack.com/p/honeydb-payload-history. You can also find details in the API docs here https://honeydb.io/threats#payload_history.

API Access Update

2022-11-08T16:40:24.425Z

All API access plans now have access to ALL endpoints! Previously, API access plans were broken down by queries-per-month (QPM) and specific endpoint access. Now the difference between plans will be QPM. The only exception is with commercial licensing as will retain an end user component. For details visit: https://honeydb.io/plans

Removed threatcrowd from IP Info

2022-11-05T11:58:15.854Z

The threatcrowd.org service is no longer available. Queries to this service has been removed from the HoneyDB API (IP Info endpoints).

Server Outage (8/26)

2022-08-26T12:56:50.939Z

The HoneyDB web site and APIs were unavailable from approximate 4am to 6:30am EDT. There was an issue with the hardware hosting the web site and API. The web site and API were restored to a new host to resolve the issue. Apologies for any inconvenience.

New API Endpoint for ASN Stats

2022-08-16T16:01:04.428Z

A new endpoint has been added to the HoneyDB Threat Info API. The “Stats ASN” endpoint provides a list of Autonomous System's (AS) and count of corresponding IP addresses that have interacted with HoneyDB honeypots. For more details visit https://honeydb.io/threats#stats_asn.

IP Info Helper Endpoints

2021-02-06T18:25:06.204Z

New IP Info endpoints have been added to the HoneyDB Threat Info API. These endpoints help to provide additional threat context of an IP address. Query the endpoints to determine if an IP is:

A bogon IP
A Tor exit node
On one of the supported threat lists

Supported threat lists include SANS IP, CI Army, Emerging Threats Compromised IP, Project Honeypot, and ThreatCrowd. For more details on these helper endpoints, see the documentation here.

IP History

2021-01-25T03:56:00.001Z

A new feature, IP History, has been released on the HoneyDB web site and threat API. IP History provides a timeline summary of activity for a given IP address. HoneyDB’s database contains data on honeypot interactions going back to 2014.

To view the timeline on the HoneyDB web site you must be logged in. When viewing the host page for a given IP address, click the “HISTORY” tab on the page to load the timeline.

To access this data via the API see documentation here.

Server Outage (9/27) - Update

2020-09-27T17:15:00.001Z

HoneyDB servers have been restored and should be fully operational. Further verification will be performed throughout the day. Thanks again for your patience as the restoration took longer than expected.

Server Outage (9/26) - Update

2020-09-26T16:33:00.001Z

Servers have been partially restored. Data corruption is requiring more time to rebuild some services.