GreyNoise's company blog on internet scanning traffic, botnets, and newly exploited vulnerabilities, based on its network of sensors.
Commenters cite GreyNoise as a service that separates background internet scanning from targeted attacks, helping reduce alert noise. It also appears in a job post.
GreyNoise | Researcher | Remote (US) | Full-time | https://www.greynoise.io/
GreyNoise operates a large network of passive collector sensors in hundreds of data centers geographically distributed all around the world. These sensors collect and analyze "Internet Background Noise" which is converted into useful insights and made accessible to our web interface and integrations.
We act like noise canceling headphones for security teams; we tell our customers what not to worry about by eliminating pointless alerts generated by devices all around the Internet. Check out our data: https://www.greynoise.io/viz/query/?gnql=last_seen%3A1d
What You Will Do:
* Write rules that generate GreyNoise tags (https://www.greynoise.io/viz/cheat-sheet/tags)
* Develop a deep understanding of internet scanning and opportunistic exploitation
* Play an important role in the collection, ingestion, and representation of GreyNoise data
* Develop tools and tradecraft for finding the 'signal in the noise'
* Finding malware, worms, and command-and-control nodes in bulk
* Contribute to publishing formal and informal findings
Tech: Go, Python, SQL, AWS
More info: https://www.greynoise.io/careers/researcher
Submit resume to: hiring+researcher@greynoise.io
Feel free to email me questions directly: nate+hn@greynoise.io
GreyNoise | Researcher | Remote (US) | Full-time | https://www.greynoise.io/
GreyNoise operates a large network of passive collector sensors in hundreds of data centers geographically distributed all around the world. These sensors collect and analyze "Internet Background Noise" which is converted into useful insights and made accessible to our web interface and integrations.
GreyNoise is like noise canceling headphones for security teams; we tell our customers what not to worry about by eliminating pointless alerts generated by devices all around the Internet.
Check out our data: https://www.greynoise.io/viz/query/?gnql=last_seen%3A1d
What You Will Do:
* Write rules that generate GreyNoise tags (https://greynoise.io/cheat-sheet/tags)
* Develop a deep understanding of internet scanning and opportunistic exploitation
* Play an important role in the collection, ingestion, and representation of GreyNoise data
* Develop tools and tradecraft for finding the 'signal in the noise'
* Finding malware, worms, and command-and-control nodes in bulk
* Contribute to publishing formal and informal findings
More info: https://www.greynoise.io/careers/researcher
Submit resume to: hiring+researcher@greynoise.io
Feel free to email me questions directly: nate+hn@greynoise.io
Hey there I manager our Community at GreyNoise - those are the Organizations that the IP is originating from! Our "Actor" Classification gives better insight into /who/ is actually conducting the activity (i.e. https://www.greynoise.io/viz/ip/92.154.95.236)
You can look up IPs in GreyNoise to know if they are scanning the internet (if no results are returned, the answer is likely no or not at scale.)
Happy to answer any q's :)
When will people realise that removing login attempts is meaningless security theatre? It's like when some CIO or politican says "we've been attacking 29 Million times today".
This is why companies pay for https://www.greynoise.io/ so they don't need to worry about meaningless stuff.
A quick plug for my friends over at GreyNoise... they have honeypots all over the internet and identify various scanners as well as their observed intentions.
Here is everyone running masscan against the internet: https://www.greynoise.io/viz/query/?gnql=tags%3A%22Masscan%20Client%22
The major use case for them nowadays is to help filter out the noise in your alerts. See for example a company such as GreyNoise (https://www.greynoise.io) to help companies focus on real attacks and not just background noise/ automated attacks.