HoneyDB Updates

New Endpoint for IBM Cloud IP Ranges

Wed, 14 Feb 2024 02:55:44 GMT

Adding to the Datacenter helper endpoint, IBM Cloud IP ranges is now available.

See details here https://honeydb.io/threats#datacenter

New API Endpoint for Payload History

Mon, 28 Nov 2022 15:12:29 GMT

new endpoint has been added to the HoneyDB Threat Info API. The “Payload History” endpoint provides access to historical payload data going back to 2014. For more details see the introduction write up on this endpoint here https://deception.substack.com/p/honeydb-payload-history. You can also find details in the API docs here https://honeydb.io/threats#payload_history.

API Access Update

Tue, 08 Nov 2022 16:40:24 GMT

All API access plans now have access to ALL endpoints! Previously, API access plans were broken down by queries-per-month (QPM) and specific endpoint access. Now the difference between plans will be QPM. The only exception is with commercial licensing as will retain an end user component. For details visit: https://honeydb.io/plans

Removed threatcrowd from IP Info

Sat, 05 Nov 2022 11:58:15 GMT

The threatcrowd.org service is no longer available. Queries to this service has been removed from the HoneyDB API (IP Info endpoints).

Server Outage (8/26)

Fri, 26 Aug 2022 12:56:50 GMT

The HoneyDB web site and APIs were unavailable from approximate 4am to 6:30am EDT. There was an issue with the hardware hosting the web site and API. The web site and API were restored to a new host to resolve the issue. Apologies for any inconvenience.

New API Endpoint for ASN Stats

Tue, 16 Aug 2022 16:01:04 GMT

A new endpoint has been added to the HoneyDB Threat Info API. The “Stats ASN” endpoint provides a list of Autonomous System's (AS) and count of corresponding IP addresses that have interacted with HoneyDB honeypots. For more details visit https://honeydb.io/threats#stats_asn.

IP Info Helper Endpoints

Sat, 06 Feb 2021 18:25:06 GMT

New IP Info endpoints have been added to the HoneyDB Threat Info API. These endpoints help to provide additional threat context of an IP address. Query the endpoints to determine if an IP is:

A bogon IP
A Tor exit node
On one of the supported threat lists

Supported threat lists include SANS IP, CI Army, Emerging Threats Compromised IP, Project Honeypot, and ThreatCrowd. For more details on these helper endpoints, see the documentation here.

IP History

Mon, 25 Jan 2021 03:56:00 GMT

Server Outage (9/27) - Update

Sun, 27 Sep 2020 17:15:00 GMT

Server Outage (9/26) - Update

Sat, 26 Sep 2020 16:33:00 GMT