Noise Letter November 2025

Summary: GreyNoise's November 2025 NoiseLetter announces Query-Based Blocklists, which convert any GNQL query into a real-time, continuously updating blocklist for firewalls, SOAR, or other enforcement points, configurable to an organization's risk tolerance and available now to all GreyNoise platform customers. The newsletter also promotes a free IP Check tool that shows in seconds whether an IP has been observed scanning the internet or behaving suspiciously, and solicits Active Development Partners to apply Suricata Rules and network packet queries to the GreyNoise historical dataset.
What's compelling: The newsletter states that home networks are increasingly hijacked for scanning and malicious activity, often without anyone noticing - meaning the IP your family's network presents to the internet may already be someone else's attack infrastructure.

Read the original at GreyNoise Blog ↗