HoneyDB Updates

HoneyDB Agent v2

Thu, 21 Mar 2024 10:40:06 GMT

Version 2 of the HoneyDB Agent has been released! In this version there are several internal code optimizations, upgrades and bug fixes. Notably there are significant enhancements to the SSH, Telnet, and FTP plugins. In addition, custom configuration support was added for several of the plugins.

For details on plugin configuration see https://honeydb-agent-docs.readthedocs.io/en/latest/plugins/

This version also sets the foundation for many more improvements and expansion of capability. Custom configuration of plugins will continue to expand and improved service emulation is in the works. Keep an eye on subsequent minor releases as there is more to come!

Happy Honeypotting!

Updated Sign In with Google

Wed, 14 Feb 2024 11:42:48 GMT

The Sign In with Google option has been upgraded to use the most recent Google APIs. This is expected to resolve problems some users had with signing in via Google.

New Endpoint for IBM Cloud IP Ranges

Wed, 14 Feb 2024 02:55:44 GMT

Adding to the Datacenter helper endpoint, IBM Cloud IP ranges is now available.

See details here https://honeydb.io/threats#datacenter

HoneyDB Python Client v1.5.0

Tue, 06 Feb 2024 02:47:39 GMT

Added support for newer API endpoints:

IP History
Stats
Datacenter (IBM)
Payload History

You can upgrade using the command:

pip install —upgrade honeydb

https://pypi.org/project/honeydb

New API Endpoint for Payload History

Mon, 28 Nov 2022 15:12:29 GMT

new endpoint has been added to the HoneyDB Threat Info API. The “Payload History” endpoint provides access to historical payload data going back to 2014. For more details see the introduction write up on this endpoint here https://deception.substack.com/p/honeydb-payload-history. You can also find details in the API docs here https://honeydb.io/threats#payload_history.

API Access Update

Tue, 08 Nov 2022 16:40:24 GMT

All API access plans now have access to ALL endpoints! Previously, API access plans were broken down by queries-per-month (QPM) and specific endpoint access. Now the difference between plans will be QPM. The only exception is with commercial licensing as will retain an end user component. For details visit: https://honeydb.io/plans

Removed threatcrowd from IP Info

Sat, 05 Nov 2022 11:58:15 GMT

The threatcrowd.org service is no longer available. Queries to this service has been removed from the HoneyDB API (IP Info endpoints).

Server Outage (8/26)

Fri, 26 Aug 2022 12:56:50 GMT

The HoneyDB web site and APIs were unavailable from approximate 4am to 6:30am EDT. There was an issue with the hardware hosting the web site and API. The web site and API were restored to a new host to resolve the issue. Apologies for any inconvenience.

New API Endpoint for ASN Stats

Tue, 16 Aug 2022 16:01:04 GMT

A new endpoint has been added to the HoneyDB Threat Info API. The “Stats ASN” endpoint provides a list of Autonomous System's (AS) and count of corresponding IP addresses that have interacted with HoneyDB honeypots. For more details visit https://honeydb.io/threats#stats_asn.

Email Sign In Option

Wed, 30 Mar 2022 02:13:49 GMT

New users can now register and sign-in with just an email address.

This new option can be found on the login page. Enter your email address and click the sign in button. Next, check your inbox for an email from HoneyDB. Click the link in the email to sign in.