🧰 GreyNoise

The items that name it 9

• The OpenSourceMalware Show #25
  talkas tools2026-10-15It is written here as GreyNoise (holds data on the mass scanning IP).

  holds data on the mass scanning IP

• GhostAction Attack Escalates By Targeting GitHub Users
  writeupas tools2026-10-09It is written here as GreyNoise: 193.32.204.199 noise=true, classification=malicious, last seen October 8.
• CITRIX 0-DAY EXPLOITS: CVE-2026–88771 & CVE-2026–88772 IN THE WILD
  writeupas tools2026-10-06

  Used by the researcher to analyze exploit/scanning trends; identified September 29 as a peak scanning day for CVE-2026-88771.

• DarkMe RAT: A VB6 APT Trojan Turned Conventional Infostealer
  writeupas tools2026-09-22

  Reputation service checked for the C2 infrastructure, which returned no classification

• Combining EPSS and Reachability Analysis to Optimize Vulnerability Management | Blog | Endor Labs
  articleas tools2026-09-11

  Commercial vendor providing exploitation activity detection data to EPSS

• No (Bad) CAP: Inside an Ongoing LSHIY Password Spray Attack
  writeupas tools2026-06-30

  Cited as having identified 3xK Tech GmbH (AS200373) as responsible for 62% of scanning activity for a critical vulnerability discovered towards the end of last year

• Malwoverview 8.0.5
  repoas tools2026-06-28

  IP classification via community API

• paralax/SeldomMonster
  repoas classification.technologies2026-05-12
• Tradecraft Tuesday Recap | Huntress
  articleas tools2025-12-23

  Provided exploitation data showing React2Shell attacks accelerating from near zero to hundreds per hour