Noise Letter March 2026

Summary: GreyNoise analyzed 4 billion sessions over 90 days and found that 39% of unique IPs targeting the edge come from home internet connections, with 78% vanishing before any reputation system can flag them. The company says traditional reputation feeds fail to flag IPs that rotate before they can be cataloged, and that attackers know this.
What's compelling: Nearly four in five of the residential IPs hitting your edge disappear before a reputation feed can name them, so the blocklist your firewall leans on is missing most of that traffic by design.

Read the original at GreyNoise Blog ↗