Internet infrastructure · IP reputation, internet-noise classification and threat-intelligence API
GreyNoise Intelligence: coverage and access
separating benign background scanning from targeted threats, triage, IP enrichment and threat hunting
What it covers
Geography and granularity
Geography: global IPv4/IPv6 scanning activity
Granularity: IP, actor/behavior label, CVE, tool and observation metadata
Source type: IP reputation, internet-noise classification and threat-intelligence API
Potential use
separating benign background scanning from targeted threats, triage, IP enrichment and threat hunting
Access and cost
web visualizer, API and SDK
account/API key; community access has limits
Cost: community/free limited; commercial tiers
Update cadence: ongoing collection and classification of observed scanning activity
- Provider page ↗
- Documentation and access details ↗Check the provider's current terms and instructions before use
Interpret carefully
Limits that affect the decision
labels are probabilistic intelligence and may lag or change; coverage focuses on observable Internet noise
ongoing collection and classification of observed scanning activity
This record summarizes source documentation; Jon Bishop did not conduct an independent audit of the underlying dataset.