GreyNoise
greynoise.io · Company blog · on HN since 2019
GreyNoise's company blog on internet scanning traffic, botnets, and newly exploited vulnerabilities, based on its network of sensors.
What HN saysCommenters cite GreyNoise as a service that separates background internet scanning from targeted attacks, helping reduce alert noise. It also appears in a job post.
17HN people shared it
10linked it in comments
8stories submitted
33story points
1 year agolast shared
2019people per year2026
Most-shared posts
- 1Homepage6 people · first shared 2019
- 2Stealthy Backdoor Campaign Affecting Asus Routers2 people · 7 points · first shared 2025 · 2 comments on HN
- 3Debugging D-Link: Emulating firmware and hacking hardware2 people · 3 points · first shared 2023 · discussion on HN
- 4Query2 people · first shared 2021
- 5Query2 people · first shared 2021
- 6Researcher2 people · first shared 2021
- 7Atlassian Confluence Server CVE-2022-26134 being actively expoited in the wild1 people · 14 points · first shared 2022 · 6 comments on HN
- 8New Internet Noise Storm: Secret Messages and the China Connection1 people · 6 points · first shared 2024 · discussion on HN
- 9New DDoS Botnet Discovered: Over 30k Hacked Devices1 people · 2 points · first shared 2025 · discussion on HN
- 10A week in the life of a GreyNoise Sensor: The benign view1 people · 1 points · first shared 2022 · discussion on HN
- 11Tags1 people · first shared 2021
- 1292.154.95.2361 people · first shared 2021
- 13Query1 people · first shared 2021
- 14Tags1 people · first shared 2021
What HN people wrote when they linked it
gauravphoenix · 2023-03-15
good to see competition in this space, https://www.greynoise.io is an alternative
cplex · 2022-03-13
Also with https://www.greynoise.io/ api you can determine if these IPs are scanning the internet or targeting you specifically.
angry_octet · 2022-01-06
When will people realise that removing login attempts is meaningless security theatre? It's like when some CIO or politican says "we've been attacking 29 Million times today".
This is why companies pay for https://www.greynoise.io/ so they don't need to worry about meaningless stuff.
achillean · 2019-08-25
The major use case for them nowadays is to help filter out the noise in your alerts. See for example a company such as GreyNoise (https://www.greynoise.io) to help companies focus on real attacks and not just background noise/ automated attacks.
vk126 · 2021-09-03
GreyNoise | Researcher | Remote (US) | Full-time | https://www.greynoise.io/
GreyNoise operates a large network of passive collector sensors in hundreds of data centers geographically distributed all around the world. These sensors collect and analyze "Internet Background Noise" which is converted into useful insights and made accessible to our web interface and integrations.
GreyNoise is like noise canceling headphones for security teams; we tell our customers what not to worry about by eliminating pointless alerts generated by devices all around the Internet.
Check out our data: https://www.greynoise.io/viz/query/?gnql=last_seen%3A1d
What You Will Do:
* Write rules that generate GreyNoise tags (https://greynoise.io/cheat-sheet/tags)
* Develop a deep understanding of internet scanning and opportunistic exploitation
* Play an important role in the collection, ingestion, and representation of GreyNoise data
* Develop tools and tradecraft for finding the 'signal in the noise'
* Finding malware, worms, and command-and-control nodes in bulk
* Contribute to publishing formal and informal findings
More info: https://www.greynoise.io/careers/researcher
Submit resume to: [email protected]
Feel free to email me questions directly: [email protected]
greynoise_nate · 2021-09-01
GreyNoise | Researcher | Remote (US) | Full-time | https://www.greynoise.io/
GreyNoise operates a large network of passive collector sensors in hundreds of data centers geographically distributed all around the world. These sensors collect and analyze "Internet Background Noise" which is converted into useful insights and made accessible to our web interface and integrations.
We act like noise canceling headphones for security teams; we tell our customers what not to worry about by eliminating pointless alerts generated by devices all around the Internet. Check out our data: https://www.greynoise.io/viz/query/?gnql=last_seen%3A1d
What You Will Do:
* Write rules that generate GreyNoise tags (https://www.greynoise.io/viz/cheat-sheet/tags)
* Develop a deep understanding of internet scanning and opportunistic exploitation
* Play an important role in the collection, ingestion, and representation of GreyNoise data
* Develop tools and tradecraft for finding the 'signal in the noise'
* Finding malware, worms, and command-and-control nodes in bulk
* Contribute to publishing formal and informal findings
Tech: Go, Python, SQL, AWS
More info: https://www.greynoise.io/careers/researcher
Submit resume to: [email protected]
Feel free to email me questions directly: [email protected]
ChrisArchitect · 2025-03-07
GreyNoise report: https://www.greynoise.io/blog/new-ddos-botnet-discovered
pajko · 2021-12-12
More details here: https://www.greynoise.io/viz/query/?gnql=tags%3A%22Apache%20Log4j%20RC…
Tor exit nodes are under attack.
cyber_sm · 2021-09-29
Hey there I manager our Community at GreyNoise - those are the Organizations that the IP is originating from! Our "Actor" Classification gives better insight into /who/ is actually conducting the activity (i.e. https://www.greynoise.io/viz/ip/92.154.95.236)
You can look up IPs in GreyNoise to know if they are scanning the internet (if no results are returned, the answer is likely no or not at scale.)
Happy to answer any q's :)
mike_d · 2021-09-28
A quick plug for my friends over at GreyNoise... they have honeypots all over the internet and identify various scanners as well as their observed intentions.
Here is everyone running masscan against the internet: https://www.greynoise.io/viz/query/?gnql=tags%3A%22Masscan%20Client%22