Grey Noise | IP Timeline Feature
Summary: GreyNoise added an IP Timeline feature that shows up to 90 days of history for IPs it observes scanning and exploiting the internet, displayed as a timechart alongside existing IP page fields like DNS information and destination sites. The timeline tracks when an IP's classification changed among unknown, malicious, and benign, when it moved from reconnaissance to exploitation, which services it targeted, and its history of tags, reverse DNS, ASN, ports scanned, and web activity.
What's compelling: An IP that looks quiet in your logs today may have been scanning and exploiting you two weeks ago, and a point-in-time threat feed would never show you that shift from reconnaissance to exploitation.
Read the original at GreyNoise Blog ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026