shodan-honeypot-score
Check if an IP address is a honeypot. Get a probability score to filter scan results and identify deceptive hosts.
Instructions
Check if an IP address is likely a honeypot.
Returns a probability score from 0.0 (not a honeypot) to 1.0 (definitely a honeypot). Useful for filtering scan results and identifying deceptive hosts. Requires a Shodan API key.
Returns: HoneypotResult with IP address and honeypot probability score.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ip | Yes | IP address to check. Example: "8.8.8.8". | |
| timeout | No | HTTP request timeout in seconds. Default: 30. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ip | Yes | The IP address that was scored | |
| score | Yes | Honeypot probability score (0.0 = not a honeypot, 1.0 = honeypot) |