Shodan indexes internet-connected devices and services, with search tools for examining exposed infrastructure.
GreyNoise
GreyNoise analyzes untargeted internet scanning and attack activity reaching servers connected directly to the internet.
About GreyNoise
GreyNoise Visualizer is a web-based security research tool that collects and analyzes untargeted, widespread, and opportunistic scan and attack activity. It focuses on traffic that reaches servers connected directly to the internet, rather than targeted attacks on specific organizations.
You can use the search function to look for IP addresses attempting to exploit specific vulnerabilities. The homepage lists examples such as CVE-2016-20017 in D-Link DSL-2750B, CVE-2023-52163 in Digiever DS-2105 Pro, and other command injection or remote execution attempts. You can also explore trends in scanning activity and browse intelligence sections. The site includes Log in and Sign Up options.
It suits people interested in internet security research, including those tracking widespread scanning, vulnerability exploitation attempts, and general attack patterns affecting internet-connected servers.
Key features
- Search IPs attempting to exploit specific CVEs
- Explore trends in internet scanning activity
- Review intelligence on opportunistic attack activity
- Web-based tool for security research
Best for: People researching untargeted internet scanning and vulnerability exploitation benefit most.
Good for
- Focuses on untargeted, widespread scanning activity
- Provides CVE-specific search examples
- Includes trends and intelligence views
GreyNoise at a glance
- Website
- viz.greynoise.io
- Category
- Privacy & Security › Security Research
- Type
- Online tool
- Pricing
- Not confirmed. Check the site
- Platforms
- Web
- Open source
- Not stated
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
GreyNoise alternatives
Tools and sites you could use instead, ranked by how closely they match.
Netlas provides technical information about IP addresses, domains, websites, web apps, IoT devices and other assets.
LocalMonero and AgoraDesk have closed their peer-to-peer cryptocurrency trading platform.
ONYPHE scans IPs and URLs at internet scale for attack-surface discovery, management and cyber threat intelligence.
FOFA maps internet-connected assets so security researchers and organizations can search services, devices, and vulnerability exposure.
Browse the APTnotes repository, which collects reports and reference material about APT activity.
Pick
24 alternativesPopular in Security Research
Well-known listings from the same topic.
FortiGuardfortiguard.comgofoss.netgofoss.netCounter-OSINT guide for Russiansgithub.com/soxoj/counter-osint-guide-ruCriminal IPcriminalip.ioDigital Attack Mapdigitalattackmap.comLocalBitcoinslocalbitcoins.com
GreyNoise FAQ
What is GreyNoise Visualizer?
It is a web tool that collects and analyzes untargeted scan and attack activity reaching internet-connected servers.
What can you search for on GreyNoise?
You can search for IPs attempting to exploit specific vulnerabilities, including the CVE examples shown on the homepage.
Do you need an account to use GreyNoise Visualizer?
The homepage shows Log in and Sign Up options for access to the visualizer.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.