2 ms·
Hey there I manager our Community at GreyNoise - those are the Organizations that the IP is originating from! Our "Actor" Classification gives better insight in
by cyber_sm 5y ago
Hey there I manager our Community at GreyNoise - those are the Organizations that the IP is originating from! Our "Actor" Classification gives better insight into /who/ is actually conducting the activity (i.e. https://www.greynoise.io/viz/ip/92.154.95.236 https://www.greynoise.io/viz/ip/92.154.95.236)
You can look up IPs in GreyNoise to know if they are scanning the internet (if no results are returned, the answer is likely no or not at scale.)
Happy to answer any q's :)
- mod 5y agoI knew, of course, that they were originating from those VPS providers. That makes perfect sense--I wouldn't run masscan on my residential IP, either. I went back to the page linked by the GP post. I clicked through all 10 items and the actor was "Unknown" on all of them. I don't really expect you guys to be able to know who is renting AWS servers or something. I don't know how that would be possible, honestly. It's a cool site, though.