New API endpoints have been added to the Threat Info API. These endpoints take an IP address as input and return true/false, and additional information, if it is part of a known Internet scanning service. See documentation for details.