A new feature, IP History, has been released on the HoneyDB web site and threat API. IP History provides a timeline summary of activity for a given IP address. HoneyDB’s database contains data on honeypot interactions going back to 2014.

To view the timeline on the HoneyDB web site you must be logged in. When viewing the host page for a given IP address, click the “HISTORY” tab on the page to load the timeline.

To access this data via the API see documentation here.

HoneyDB-timeline.png