New IP Info endpoints have been added to the HoneyDB Threat Info API. These endpoints help to provide additional threat context of an IP address. Query the endpoints to determine if an IP is:

  • A bogon IP

  • A Tor exit node

  • On one of the supported threat lists

Supported threat lists include SANS IP, CI Army, Emerging Threats Compromised IP, Project Honeypot, and ThreatCrowd. For more details on these helper endpoints, see the documentation here.