4 ms·
All the results on the first page (as much as it would show me) are just VPS providers.
by mod 5y ago
All the results on the first page (as much as it would show me) are just VPS providers.
- cyber_sm 5y agoHey there I manager our Community at GreyNoise - those are the Organizations that the IP is originating from! Our "Actor" Classification gives better insight into /who/ is actually conducting the activity (i.e. https://www.greynoise.io/viz/ip/92.154.95.236 https://www.greynoise.io/viz/ip/92.154.95.236) You can look up IPs in GreyNoise to know if they are scanning the internet (if no results are returned, the answer is likely no or not at scale.) Happy to answer any q's :)
- mod 5y agoI knew, of course, that they were originating from those VPS providers. That makes perfect sense--I wouldn't run masscan on my residential IP, either. I went back to the page linked by the GP post. I clicked through all 10 items and the actor was "Unknown" on all of them. I don't really expect you guys to be able to know who is renting AWS servers or something. I don't know how that would be possible, honestly. It's a cool site, though.