Top all-time · #4677
The GreyNoise Blog
Company blog · greynoise.io/blogsecurity
The GreyNoise Blog is the company blog at greynoise.io, writing about security. Since 2019, 17 different Hacker News readers have linked it 29 times, most often “Debugging D-Link: Emulating firmware and hacking hardware”. It is still writing: the last post was on 2026-10-15, and you can follow it by feed.
Too few sampled comments (15) to say how often HN recommends it.?
Why HN links it
HN commenters link GreyNoise's threat-intel reports and data visualizations on internet scanning, exploitation and botnets, usually as sources. Most comments promote the company's product rather than the writing.
Summarised by Claude from a sample of 15 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
The network edge is your blind spot. GreyNoise delivers real-time threat intelligence to detect active exploitation, uncover compromised devices, and investigate attacks as they happen.
Most-linked posts?
- /viz/query/?gnql=tags%3A%22Apache%20Log4j%20RCE%20Attempt%222 people · 2 mentions · first linked 2021-12-10
- Debugging D-Link: Emulating firmware and hacking hardware2 people · 2 mentions · first linked 2023-03-16
- /2 people · 2 mentions · first linked 2019-08-25
- /2 people · 2 mentions · first linked 2022-01-06
- Stealthy Backdoor Campaign Affecting Asus Routers2 people · 2 mentions · first linked 2025-05-29
- /careers/researcher2 people · 2 mentions · first linked 2021-09-01
What Hacker News says?
Disclaimer, I work for GreyNoise, we monitor the internet for mass scanning/exploitation attempts. We are currently tracking this activity and have noted almost 100+ hosts checking for this: https://www.greynoise.io/viz/query/?gnql=tags%3A%22Apache%20...
Comment linking /viz/query/?gnql=tags%3A%22Apache%20Log4j%20RCE%20Attempt%22
on “Log4j RCE Found”Submitted Atlassian Confluence Server CVE-2022-26134 being actively expoited in the wild as a story · 14 points
HN discussionHey there I manager our Community at GreyNoise - those are the Organizations that the IP is originating from! Our "Actor" Classification gives better insight into /who/ is actually conducting the activity (i.e. https://www.greynoise.io/viz/ip/92.154.95.236 ) You can look up IPs in GreyNoise to know if they are scanning the internet (if no results are returned, the answer is likely no or not at scale.) Happy to answe…
Comment linking /viz/ip/92.154.95.236
on “Masscan: TCP port scanner, scanning entire Internet in under 5 minutes”Submitted New Internet Noise Storm: Secret Messages and the China Connection as a story · 6 points
HN discussionA quick plug for my friends over at GreyNoise... they have honeypots all over the internet and identify various scanners as well as their observed intentions. Here is everyone running masscan against the internet: https://www.greynoise.io/viz/query/?gnql=tags%3A%22Masscan%2...
Comment linking /viz/query/?gnql=tags%3A%22Masscan%20Client%22
on “Masscan: TCP port scanner, scanning entire Internet in under 5 minutes”Submitted Stealthy Backdoor Campaign Affecting Asus Routers as a story · 4 points
HN discussionGreyNoise Intelligence | https://greynoise.io/ | https://twitter.com/GreyNoiseIO | Washington, D.C. | Onsite or Remote Currently in the market for: (apply here: https://rb.gy/pymbl6 ) * Senior Software Engineer * Senior Data Engineer * Software Engineer There are hundreds of cybersecurity companies telling their users what to worry about. GreyNoise is the only cybersecurity company telling users what not to worry ab…
Comment linking /
on “Ask HN: Who is hiring? (February 2021)”Submitted GreyNoise Discovers Stealthy Backdoor Campaign Affecting Thousands Asus Routers as a story · 3 points
HN discussionGreyNoise Intelligence | https://greynoise.io/ | https://twitter.com/GreyNoiseIO | Washington, D.C. | Onsite or Remote There are hundreds of cybersecurity companies telling their users what to worry about. GreyNoise is the only cybersecurity company telling users what not to worry about. We are an early-stage cybersecurity product company trusted by security teams all over the world. Our thousands of free users and…
Comment linking /
on “Ask HN: Who is hiring? (January 2021)”Submitted New DDoS Botnet Discovered: Over 30k Hacked Devices as a story · 2 points
HN discussionGreyNoise Intelligence | https://greynoise.io/ | https://twitter.com/GreyNoiseIO | Washington, D.C. | Onsite or Remote Currently in the market for: (send resumes to hiring@greynoise.io) * Senior Software Engineer * Senior Data Engineer There are hundreds of cybersecurity companies telling their users what to worry about. GreyNoise is the only cybersecurity company telling users what not to worry about. We are an ear…
Comment linking /
on “Ask HN: Who is hiring? (March 2021)”Submitted Debugging D-Link: Emulating firmware and hacking hardware as a story · 2 points
HN discussionGreyNoise | Researcher | Remote (US) | Full-time | https://www.greynoise.io/ GreyNoise operates a large network of passive collector sensors in hundreds of data centers geographically distributed all around the world. These sensors collect and analyze "Internet Background Noise" which is converted into useful insights and made accessible to our web interface and integrations. GreyNoise is like noise canceling headph…
Comment linking /careers/researcher
on “Ask HN: Who is hiring? (September 2021)”Submitted Debugging D-Link: Emulating firmware and hacking hardware as a story · 1 points
HN discussionGreyNoise | Researcher | Remote (US) | Full-time | https://www.greynoise.io/ GreyNoise operates a large network of passive collector sensors in hundreds of data centers geographically distributed all around the world. These sensors collect and analyze "Internet Background Noise" which is converted into useful insights and made accessible to our web interface and integrations. We act like noise canceling headphones f…
Comment linking /careers/researcher
on “Ask HN: Who is hiring? (September 2021)”Submitted A week in the life of a GreyNoise Sensor: The benign view as a story · 1 points
HN discussionAlso with https://www.greynoise.io/ api you can determine if these IPs are scanning the internet or targeting you specifically.
Comment linking /
on “Who's Attacking My Server?”When will people realise that removing login attempts is meaningless security theatre? It's like when some CIO or politican says "we've been attacking 29 Million times today". This is why companies pay for https://www.greynoise.io/ so they don't need to worry about meaningless stuff.
Comment linking /
on “Best Practices for Securing SSH”The major use case for them nowadays is to help filter out the noise in your alerts. See for example a company such as GreyNoise ( https://www.greynoise.io ) to help companies focus on real attacks and not just background noise/ automated attacks.
Comment linking /
on “Cowrie: a medium-interaction SSH and Telnet honeypot”More details here: https://www.greynoise.io/viz/query/?gnql=tags%3A%22Apache%20... Tor exit nodes are under attack.
Comment linking /viz/query/?gnql=tags%3A%22Apache%20Log4j%20RCE%20Attempt%22
on “Actual CVE-2021-44228 payloads captured in the wild”GreyNoise report: https://www.greynoise.io/blog/new-ddos-botnet-discovered
Comment linking /blog/new-ddos-botnet-discovered
on “New botnet is delivering record-size DDoSes”GreyNoise report: https://www.greynoise.io/blog/new-ddos-botnet-discovered
Comment linking /blog/new-ddos-botnet-discovered
on “Botnet that appeared overnight is delivering record-size DDoSes”good to see competition in this space, https://www.greynoise.io is an alternative
Comment linking /
on “Why Internet Background Noise Makes Cybersecurity Hard?”
