HoneyDB Updates

honeydb.io

Removed threatcrowd from IP Info

The threatcrowd.org service is no longer available. Queries to this service has been removed from the HoneyDB API (IP Info endpoints).

Server Outage (8/26)

The HoneyDB web site and APIs were unavailable from approximate 4am to 6:30am EDT. There was an issue with the hardware hosting the web site and API. The web site and API were restored to a new host to resolve the issue. Apologies for any

New API Endpoint for ASN Stats

A new endpoint has been added to the HoneyDB Threat Info API. The “Stats ASN” endpoint provides a list of Autonomous System's (AS) and count of corresponding IP addresses that have interacted with HoneyDB honeypots. For more details visit

IP Info Helper Endpoints

New IP Info endpoints have been added to the HoneyDB Threat Info API. These endpoints help to provide additional threat context of an IP address. Query the endpoints to determine if an IP is: A bogon IP A Tor exit node On one of the

IP History

A new feature, IP History, has been released on the HoneyDB web site and threat API. IP History provides a timeline summary of activity for a given IP address. HoneyDB's database contains data on honeypot interactions going back to 2014...

Agent Release (v1.18.0)

A new version of the agent has been released. Added CouchDB plugin https://honeydb.io/downloads

64-bit ARM Agent

The HoneyDB Agent is now available for 64-bit ARM. Debian packages have also been published for 64-bit ARM Ubuntu 18 (Bionic) and Ubuntu 20 (Groovy). For package repository setup and install see the links on the HoneyDB downloads page...

Agent Release (v1.17.0)

A new version of the agent has been released. Added tags option to hpfeeds configuration Added INFO event for malformed requests in HTTP plugin https://honeydb.io/downloads

Agent Release (v1.16.0)

A new version of the agent has been released. Added option for printing agent logs to standard out Fixed bug in hpfeeds logger https://honeydb.io/downloads